{"report_id":"39919aec-e0a5-412b-87a8-e933858b8601","version":6,"status":"done","tags":[],"date":"2026-03-03T21:08:27Z","url":{"schema":"http","addr":"xpm3.top/usdc/?claim.circle.com","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xpm3.top/usdc/?claim.circle.com","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"title":"$USDC Token Airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xpm3.top/usdc/?claim.circle.com","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T21:08:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-03T21:07:59Z","timestamp":1772572079,"ip_dst":{"addr":"100.50.130.208","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":54750,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Webhook/HTTP Request Inspection Service Domain (m .pipedream .net in TLS SNI)","source":"{\"timestamp\":\"2026-03-03T21:07:59.694889+0000\",\"flow_id\":1936264902191754,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":54750,\"dest_ip\":\"100.50.130.208\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047738,\"rev\":1,\"signature\":\"ET INFO Webhook/HTTP Request Inspection Service Domain (m .pipedream .net in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_08_25\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0010\"],\"mitre_tactic_name\":[\"Exfiltration\"],\"mitre_technique_id\":[\"T1567\"],\"mitre_technique_name\":[\"Exfiltration_Over_Web_Service\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_26\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_08_25\"]}},\"tls\":{\"sni\":\"eoe1u9eng3oo7bi.m.pipedream.net\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":933,\"bytes_toclient\":3168,\"start\":\"2026-03-03T21:07:59.502410+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-03T21:07:59Z","timestamp":1772572079,"ip_dst":{"addr":"100.50.130.208","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":54766,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Webhook/HTTP Request Inspection Service Domain (m .pipedream .net in TLS SNI)","source":"{\"timestamp\":\"2026-03-03T21:07:59.698965+0000\",\"flow_id\":1335471991925671,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":54766,\"dest_ip\":\"100.50.130.208\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047738,\"rev\":1,\"signature\":\"ET INFO Webhook/HTTP Request Inspection Service Domain (m .pipedream .net in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_08_25\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0010\"],\"mitre_tactic_name\":[\"Exfiltration\"],\"mitre_technique_id\":[\"T1567\"],\"mitre_technique_name\":[\"Exfiltration_Over_Web_Service\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_26\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_08_25\"]}},\"tls\":{\"sni\":\"eoe1u9eng3oo7bi.m.pipedream.net\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-03-03T21:07:59.502695+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xpm3.top","ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-03T21:08:30.412058Z","last_seen":"2026-03-03T21:08:30.412058Z","alert_count":26,"request_count":26,"received_data":8878893,"sent_data":11981,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"eoe1u9eng3oo7bi.m.pipedream.net","ip":{"addr":"100.50.130.208","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2015-11-25","domain_rank":0,"first_seen":"2025-08-21T04:25:57.661405Z","last_seen":"2026-03-02T23:39:57.187289Z","alert_count":0,"request_count":1,"received_data":258,"sent_data":479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"userstatics.com","ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"domain_registered":"2020-11-05","domain_rank":262534,"first_seen":"2020-11-05T23:01:51Z","last_seen":"2026-02-27T05:02:21.169485Z","alert_count":0,"request_count":1,"received_data":525,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-03-02T03:23:18.258902Z","alert_count":0,"request_count":9,"received_data":680593,"sent_data":4113,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-03-02T04:27:56.544413Z","alert_count":0,"request_count":3,"received_data":5178,"sent_data":1511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"userstatics.com/get/script.js?referrer=https://xpm3.top/usdc/?claim.circle.com","fqdn":"userstatics.com","domain":"userstatics.com","tld":"com"},"ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fea7fbf2c619fd4b7716fcaa64070c6c","sha1":"f192732937981a26f526b7c1293a2ae13bc59a22","sha256":"df9690fea031319de38a437cb6d393026c4aae70642ed394c4254ed64f035b26","sha512":"145c293c29dc95f829b71b3e7378fac6a17d3081f9d2e17a986bed2cc5f07f4bc35e791010264c841f02057a64a9f297d4f62335fef59f0c237a541599edb6c3","ssdeep":"","tlshash":"61c09b148f1d87f5203642de75e3c3c8947460e67515d40a644f64f95599ed30ec1d91","size":133,"data":"","first_seen":"2023-11-04T00:48:23Z","last_seen":"2026-04-03T20:51:53.478094Z","times_seen":5034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/?claim.circle.com","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"82821d6af9da2c1e1e0903a4a8db0165","sha1":"f6d55428a56e4f8ec0f98b676a55bb99644e7f7f","sha256":"1a7ea02c26c2ddfbb018742ff39c7b4b5ffacf562f29d6596e0fdfe509b69df9","sha512":"9f04e79ab948d8f0b7e0aa29d323b60c26a0f876c0a7bf6f36edc95e26cb961092238497fecb9df8b421331a7abd1c6d255f1a65789e9ca61f2e657d6be87cfa","ssdeep":"","tlshash":"c701d0cb4c222801076b622a1cae2ad822239427fc99ee533597a5503f4db0d53a76ca","size":748,"data":"","first_seen":"2025-09-04T18:27:35.788302Z","last_seen":"2026-03-31T17:49:02.14017Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/68469777501b8d1909142b40/1it9rvbbn","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"311d7f616ed531b295913c908215b827","sha1":"065e7c05cfad1dd3c2e8bf6ac2d567fab2227e6f","sha256":"282e81b26d107a9bb52166b6003758bcc37520f8751210f85c0552d9f6e42022","sha512":"e867d92ecc6e6649c6269821f81dc4c37378ffc28023101bd4c737d179a5d2e75feddd2a349b13c6f434346d8c82c99ad58a2cc8825adf17aa1f145767918895","ssdeep":"","tlshash":"9a41ddea5b4f1c52b22410d90dbef90ef47720f745d95892870c085272757ad2f8ee38","size":2123,"data":"","first_seen":"2026-02-22T11:23:36.483832Z","last_seen":"2026-03-31T17:49:02.092448Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324696,"data":"","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-04T12:50:00.570045Z","times_seen":7356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/?claim.circle.com","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff41b0500d4b001fcfc713ee213e9329","sha1":"ce4aa997fbf6864992949b54bbe9bc8b38d53cf2","sha256":"4be1f83cb396db338ebcd336338caae916b17bf3e91044b1d75e5f3451328fbf","sha512":"4543060ab2f93b12b13cee91ae480cb7f71597f1db9b05170d8ac17ff7a3ae83c7ef7b233e0d24e424b42a06e1e9a39973b48f52b53b3fcdbe7e1c4fe3c24f7c","ssdeep":"","tlshash":"31e0c04c35007d20926316a310b2dd4c70b33028a144a45088afc8442618d49c42cf98","size":334,"data":"","first_seen":"2025-06-11T12:30:05.301299Z","last_seen":"2026-03-31T17:49:02.152462Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-04T12:50:00.513865Z","times_seen":71367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/?claim.circle.com","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1563446e411a639becefc80de8d320dd","sha1":"30b48de29f8bc47dfd9f6bde86bba7078044165a","sha256":"383dee231633dbfbd1d24dd7809884e51e01de1cd81601fbb1df861da3857492","sha512":"a94e3f9f89f01e0127c14d53099e061ab0b8c4abb5ce92905819e678efb142652fdc1d5d40e5d7c864ef55ded96654c58c685dd59dd2a50e98c863c048b422e5","ssdeep":"","tlshash":"f2e02637f4856d521b3232d7161b822e737ab180a18418a21b4d8e7c7b6a62c464ac00","size":330,"data":"","first_seen":"2025-06-14T11:21:45.409901Z","last_seen":"2026-03-31T17:49:02.168121Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-04-04T12:50:00.571734Z","times_seen":7359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/js/main.js","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65d1005ea708869da916a464285804a2","sha1":"ea24e1e45a4a29e672d3c491ac9f00a48a4685e3","sha256":"e449267ffdeb86a791df188cbb78a93e30b8663a41e2c8955c5ecd4d745d0dd8","sha512":"98d8df3734c2c0575fbcb331a238f5a19946ce8d6688510d66b6aeca648ce9e68351aef57453ea512dee7a088e67194da158ce214c811cd7591d1330c560826a","ssdeep":"","tlshash":"2a51b72a52200b77c5730abf9b868ac4ea34358760446b15fd6dc7840fb5a0989b1fcf","size":2952,"data":"","first_seen":"2023-11-12T14:41:11Z","last_seen":"2026-03-31T17:49:02.042752Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-04T12:50:00.577406Z","times_seen":71408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/?claim.circle.com","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"acf2b263031701ccee421dc0df4ff111","sha1":"a424880f67ea32e75cc388bda3d7a55b549bd37f","sha256":"0f3a1de0c901bda5efa92f33035d0bf2e72aeec31733d5429544a34183d41ac8","sha512":"a4b5ede208aaaa8e19aa5048bd15ee5eff13f9e38ca9085f06fed179ef378ca7ba55d0fcb16a4906901bdc9a2c2178e64c4050bbeda0ed5deae4ba11b76aba1d","ssdeep":"","tlshash":"c5e01aa16091a0a750ee315d8b2bb68e7a76b0e3748c3420a08c4e94b5e193b8a25e4c","size":382,"data":"","first_seen":"2025-06-14T11:21:45.412498Z","last_seen":"2026-03-31T17:49:02.173861Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/?claim.circle.com","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66569f113ba76d6e7ef05c6c31192475","sha1":"d22961faa69c14fb8c94b571453acdecc2fff109","sha256":"7a2f089e1c8f37181b5ee5c6aa463f8a49668bf4a8b8f4d73d3fdaf89e34882b","sha512":"44549e310e3ef9f3aac759409227e050906a2ef1ab4e28c6d5821513e721b4e8c4db72d598e122d75ab85fd5663739278e72cc9bd053f82ab5a55a3f4cfa3382","ssdeep":"","tlshash":"b4a01232072545f0226f431d13499a403a3100c39044f20012182c842b80c4850a0521","size":86,"data":"","first_seen":"2025-06-14T11:21:45.414246Z","last_seen":"2026-03-31T17:49:02.21575Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/js/custom.js","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc8c2e739f8cd87ea6468ef7bd9e1bee","sha1":"de7aa972b65f37f5aa3cebd05eb7ed6c8dac3cd7","sha256":"01a7648d32d8d331ed0e3a1d964610671d5c9f197ef0fab6753ad7284a8c90f3","sha512":"db5d8e08a74479c5a27e27847d1a3c6abbf70bc5638dfa58dcd4e0044f45aac9eb6f0f08d9708728126549483821f18d10f20051cc85fa5821abb650406b0088","ssdeep":"192:vUpspV+/bMUpBO1UnQmCk7eBpuBnOnJt4n:CsL+/wUpBRQmCk2O","tlshash":"21329d9e61f82065bd3b72509fb52a04e75a131fd001d982befe17d82fb600aa5d5f8c","size":11552,"data":"","first_seen":"2023-11-12T14:41:11Z","last_seen":"2026-03-31T17:49:02.021247Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/js/plugin.js","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80158aafeca73b5986f94c874968d223","sha1":"03ab86711ea61bc8ffebde495379a06c3b8d0eb8","sha256":"d20fc32be07e6b9e4c2a508a30108f63dfb19f4255372df56f8760b56c00ad83","sha512":"439e8f33e37d2467aa90781a39604915077c58ae72f9f7ef2007d7f6252b3c69e2561d1bd44acbf2dec311b36823ff6c9bea06bc67d001c466b361dfd0ac0e56","ssdeep":"3072:CgfRBc4J+J3jL5TCOauTwD6FdnCVQNea98Hru5Lw9ePVbmwpc4mOFUsB:CgZAJzEOQ0+iea98Hru5Lw8mwpJmOFUw","tlshash":"ef3419897394747246ab20b5517f020bf23a68a9b409846cf46cd8ed2e7cd89317bf7d","size":252943,"data":"","first_seen":"2025-06-14T11:21:45.373939Z","last_seen":"2026-03-31T17:49:02.007332Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/?claim.circle.com","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de3efb8eaf629d24815f15c6b3747e45","sha1":"be0b125f634d99ce9104030354e229548f59e8b7","sha256":"3bb9f207a90e162176678a8d8f9f7e2e87c579fa1d5a5f2185d320184db16834","sha512":"3d202143709379cffb993b9d70199bd8015e905ad814db10c1fb9698b7f6463f5cbe8087c07784c50ac7cd9be8ebe93ebbd107e6385ca8f52e7f1405cb581377","ssdeep":"","tlshash":"b651b0c8979eb498cbfc185f9e1da695043de137b84d4a2fb5cc83d7046989ab25c860","size":2688,"data":"","first_seen":"2025-06-14T11:21:45.415728Z","last_seen":"2026-03-31T17:49:02.220413Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/0x.js","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d4acd04b840bc06246022c4aedeb33c","sha1":"c47c07af75ef1b63be422071799113cb7d484544","sha256":"66688abfe36b64a65debbbd0403af3020052d4c66318a58cb5b025149bac7de0","sha512":"d4827cf0bc816147f6bb86edbc1a52c9a5b91ebc5faa02d7d9026e852088e28f1a0f296c4afe4af80a94e394e4b75837410c47bb887832a03f6a86bf2b53128e","ssdeep":"768:KN9yFcio+wKh9tXjcb4IbDB6IcP8nHfVlkbWVgnC1fAi0YAclqc/gIJg2bTco:IxQ9tTcb4eB0AfVlkbWVgnC1fAi02Dx","tlshash":"e44394d8691ac0d85d9620ede833e409e4a8091bcd6df163a63cddc1b41efa78487d7b","size":58819,"data":"","first_seen":"2026-02-18T11:47:00.249562Z","last_seen":"2026-03-31T17:49:02.069288Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-04-04T12:50:00.544708Z","times_seen":44895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-04-04T12:50:00.530044Z","times_seen":7354,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xpm3.top/usdc/?claim.circle.com","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T21:07:58.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/?claim.circle.com HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2YVsm2qOdY5h5tTpYT2sVdEk4bx1z9x5lOrdJMIQg7xPNykn6dG3J0qifuq1VAE9hHFTsLRji5Y%2FU2GRT2VIDrgfgQ8zfPJs\"}]}\r\nage: 95\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d6b9d21cfb83ee7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20193,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (716)","md5":"917635c13c8d97ae8a4c507265237824","sha1":"ae364b3b0e87e7ededdc446a669369f593bd6949","sha256":"c31da69ae81ea74b7ae479a7b3df44f921b0d831e1a9bdfa8c53188f5e71ef9d","sha512":"232e8192c29197c3fb848a17e7bc415e54d709cee0a937fbab6394343a5fc4270166533fb71e5a580db938f065476b87f170fc1708b450f39914ebcc8cb2cb10","ssdeep":"384:Vf2IpNlkFao/rVR/Nt7tU+tQtFtoRBOKxSKD6tKpSxfh0cKhD76KJ4/MCJ35stOl:Vf2Ip3oegBOwSe2USDSD76C4/N5tJ","tlshash":"6c92b66563ec3477122380eb31586f5864afc733f517a459f1ffcae83b89c49a816922","first_seen":"2026-03-02T23:40:03.548131Z","last_seen":"2026-03-07T20:46:44.779727Z","times_seen":4,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":295,"dns":268,"connect":8,"send":0,"wait":21,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/0x.js","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/0x.js HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: W/\"69a5774f-e5c3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MOeQ%2F29IVHWWdbtJmGYOOKsaFaiH%2FXkoiS68eJtPQ9oZKg%2FM6gZHeU7c%2FeeWve1IIi4GLK9iJ1riUDPvOrqRkzQ%2BgRZ7JTSc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d235a19dddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58819), with no line terminators","md5":"7d4acd04b840bc06246022c4aedeb33c","sha1":"c47c07af75ef1b63be422071799113cb7d484544","sha256":"66688abfe36b64a65debbbd0403af3020052d4c66318a58cb5b025149bac7de0","sha512":"d4827cf0bc816147f6bb86edbc1a52c9a5b91ebc5faa02d7d9026e852088e28f1a0f296c4afe4af80a94e394e4b75837410c47bb887832a03f6a86bf2b53128e","ssdeep":"768:KN9yFcio+wKh9tXjcb4IbDB6IcP8nHfVlkbWVgnC1fAi0YAclqc/gIJg2bTco:IxQ9tTcb4eB0AfVlkbWVgnC1fAi02Dx","tlshash":"e44394d8691ac0d85d9620ede833e409e4a8091bcd6df163a63cddc1b41efa78487d7b","first_seen":"2026-02-18T11:47:00.249562Z","last_seen":"2026-03-31T17:49:02.069288Z","times_seen":16,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/css/style.css","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/css/style.css HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: W/\"69a5774f-5a6d1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YpaPMNI%2BSOM5bo%2FhRX6q9yIZ88IwjoCHE32%2FtaZ37%2BP45PRralO8gXkf3ZjGnoqt0HmL3lVBEjSx8KsmmP0nsL9jGVOJBd9b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d234a18dddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":370385,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"3b2cfa812d63ee5dc5b00dac1798fe28","sha1":"74297f792e0b3f8d385a1126887befaf6af1ac5e","sha256":"f63733e6e4568f7090c2850a5bba1774d0e794cd53f619eaf578f3243f05b969","sha512":"9d16edbcfa059bb2b0cbaf7250eef543c7c2cd6b876448f0ef650fbbe8b1b91a3ae5e66ef7b563956dda27149dfee7a1842d06f34c5c2c184f6f59d2d9857ec8","ssdeep":"6144:yF9fcF/ALfLNL4mxGHOuFdKfYOumMDsp4:yFemoHOuFdKfYOumMDsp4","tlshash":"0274029afdf11504345b916864e7bbf97f7e8082d60ece7a76e23274cf853c14862a84","first_seen":"2025-06-14T11:21:45.394664Z","last_seen":"2026-03-31T17:49:02.000811Z","times_seen":27,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/css/owl.carousel.min.css","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/css/owl.carousel.min.css HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: W/\"69a5774f-d17\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLxLUh5XPR3ghXDXtDOJhpdxY6SKQjxcVdvzFI8VcSiwfprMQezzuDut51NPuhepFGzdt%2FCPUZ3T8OYwZMKsa1oeQyp9cqu9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d25aaacdddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-04-04T13:40:43.590509Z","times_seen":30325,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eoe1u9eng3oo7bi.m.pipedream.net/","fqdn":"eoe1u9eng3oo7bi.m.pipedream.net","domain":"pipedream.net","tld":"net"},"ip":{"addr":"100.50.130.208","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.m.pipedream.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 25 Dec 2025 00:00:00 GMT","end":"Sat, 23 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"35:B2:9B:25:AC:60:01:78:F1:ED:BC:8D:C9:1E:78:39:5F:6D:C1:6B","sha256":"3A:0D:9F:17:7F:58:78:0C:FD:A2:3B:EF:2F:72:E8:8C:98:2D:74:A4:D1:49:22:DE:54:03:39:1E:1C:D8:11:06"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: eoe1u9eng3oo7bi.m.pipedream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://xpm3.top/\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 03 Mar 2026 21:08:00 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":1279,"timings":{"blocked":573,"dns":9,"connect":98,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"userstatics.com/get/script.js?referrer=https://xpm3.top/usdc/?claim.circle.com","fqdn":"userstatics.com","domain":"userstatics.com","tld":"com"},"ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:00.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"userstatics.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 18:42:22 GMT","end":"Mon, 01 Jun 2026 18:42:21 GMT"},"fingerprint":{"sha1":"18:0A:C0:7A:B2:8A:E2:12:D0:C0:A8:37:4C:3E:33:C4:A8:B0:31:D8","sha256":"A7:A8:54:0B:C5:5D:9D:CE:62:D3:8E:AF:2B:23:40:9A:9F:7A:46:6B:B8:AD:C6:B8:56:81:F1:42:A5:32:7C:14"}}},"request":{"raw":"GET /get/script.js?referrer=https://xpm3.top/usdc/?claim.circle.com HTTP/1.1\r\nHost: userstatics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 03 Mar 2026 21:08:00 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 133\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.2.1\r\nAccess-Control-Allow-Origin: https://xpm3.top\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Allow-Headers: X-Requested-With,content-type\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"fea7fbf2c619fd4b7716fcaa64070c6c","sha1":"f192732937981a26f526b7c1293a2ae13bc59a22","sha256":"df9690fea031319de38a437cb6d393026c4aae70642ed394c4254ed64f035b26","sha512":"145c293c29dc95f829b71b3e7378fac6a17d3081f9d2e17a986bed2cc5f07f4bc35e791010264c841f02057a64a9f297d4f62335fef59f0c237a541599edb6c3","ssdeep":"","tlshash":"61c09b148f1d87f5203642de75e3c3c8947460e67515d40a644f64f95599ed30ec1d91","first_seen":"2023-11-04T00:48:23Z","last_seen":"2026-04-03T20:51:53.478094Z","times_seen":5034,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":103,"dns":23,"connect":32,"send":0,"wait":76,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:01.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xpm3.top/\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:08:01 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d6b9d326831198c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-04-04T12:50:00.562848Z","times_seen":39618,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/js/jquery.nice-select.min.js","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/js/jquery.nice-select.min.js HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grYzxX%2FWY9qPt1aNxFIbjcpg3Tn1ujiA0SVlLf3MtVF7hGritDmxatTTKiGJWEer9p1ZzcblGoajpB%2F7isbX6bj47Iuy5z2W\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9d6b9d235a1fdddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/js/main.js","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/js/main.js HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:04 GMT\r\netag: W/\"69a57750-b88\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wg78BhQRJ1CG9gYvDJEWPYGuYJAECShHmCh8zrwb6qXtDC%2FfLENuAV6JwBNkonn%2F%2F3glNPdd8gJkG7Hu9bX%2F6bljHJJNZLW4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d235a22dddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"65d1005ea708869da916a464285804a2","sha1":"ea24e1e45a4a29e672d3c491ac9f00a48a4685e3","sha256":"e449267ffdeb86a791df188cbb78a93e30b8663a41e2c8955c5ecd4d745d0dd8","sha512":"98d8df3734c2c0575fbcb331a238f5a19946ce8d6688510d66b6aeca648ce9e68351aef57453ea512dee7a088e67194da158ce214c811cd7591d1330c560826a","ssdeep":"","tlshash":"2a51b72a52200b77c5730abf9b868ac4ea34358760446b15fd6dc7840fb5a0989b1fcf","first_seen":"2023-11-12T14:41:11Z","last_seen":"2026-03-31T17:49:02.042752Z","times_seen":26,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/68469777501b8d1909142b40/1it9rvbbn","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /68469777501b8d1909142b40/1it9rvbbn HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d6b9d291860e891-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"311d7f616ed531b295913c908215b827","sha1":"065e7c05cfad1dd3c2e8bf6ac2d567fab2227e6f","sha256":"282e81b26d107a9bb52166b6003758bcc37520f8751210f85c0552d9f6e42022","sha512":"e867d92ecc6e6649c6269821f81dc4c37378ffc28023101bd4c737d179a5d2e75feddd2a349b13c6f434346d8c82c99ad58a2cc8825adf17aa1f145767918895","ssdeep":"","tlshash":"9a41ddea5b4f1c52b22410d90dbef90ef47720f745d95892870c085272757ad2f8ee38","first_seen":"2026-02-22T11:23:36.483832Z","last_seen":"2026-03-31T17:49:02.092448Z","times_seen":15,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":43,"dns":1,"connect":9,"send":0,"wait":144,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:00.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 21:08:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9d6b9d2e1ca3e891-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-04T12:50:00.577406Z","times_seen":71408,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/js/custom.js","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/js/custom.js HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:04 GMT\r\netag: W/\"69a57750-2d20\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PsGt4Ye%2FyavnX%2FZ70SOjc4ser0aTAIUjfP7DNewybVXeBy73LXVK4GqlLkLis5Rue%2BwPmwFbsAxB9G9s94YOcLtYofXxd75w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d235a20dddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11552,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"dc8c2e739f8cd87ea6468ef7bd9e1bee","sha1":"de7aa972b65f37f5aa3cebd05eb7ed6c8dac3cd7","sha256":"01a7648d32d8d331ed0e3a1d964610671d5c9f197ef0fab6753ad7284a8c90f3","sha512":"db5d8e08a74479c5a27e27847d1a3c6abbf70bc5638dfa58dcd4e0044f45aac9eb6f0f08d9708728126549483821f18d10f20051cc85fa5821abb650406b0088","ssdeep":"192:vUpspV+/bMUpBO1UnQmCk7eBpuBnOnJt4n:CsL+/wUpBRQmCk2O","tlshash":"21329d9e61f82065bd3b72509fb52a04e75a131fd001d982befe17d82fb600aa5d5f8c","first_seen":"2023-11-12T14:41:11Z","last_seen":"2026-03-31T17:49:02.021247Z","times_seen":29,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/js/plugin.js","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/js/plugin.js HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:04 GMT\r\netag: W/\"69a57750-3dc0f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0fs9n5NbIN%2Bgp%2BulvE%2BXw3nVEuX5XzAU2lM5ytwm2DpK9ORo%2BOUOYU996Kv%2FG4zdnclprBjgrahyBcHOjRYsRy%2Ft2Plp2ILr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d235a1edddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":252943,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32471)","md5":"80158aafeca73b5986f94c874968d223","sha1":"03ab86711ea61bc8ffebde495379a06c3b8d0eb8","sha256":"d20fc32be07e6b9e4c2a508a30108f63dfb19f4255372df56f8760b56c00ad83","sha512":"439e8f33e37d2467aa90781a39604915077c58ae72f9f7ef2007d7f6252b3c69e2561d1bd44acbf2dec311b36823ff6c9bea06bc67d001c466b361dfd0ac0e56","ssdeep":"3072:CgfRBc4J+J3jL5TCOauTwD6FdnCVQNea98Hru5Lw9ePVbmwpc4mOFUsB:CgZAJzEOQ0+iea98Hru5Lw8mwpJmOFUw","tlshash":"ef3419897394747246ab20b5517f020bf23a68a9b409846cf46cd8ed2e7cd89317bf7d","first_seen":"2025-06-14T11:21:45.373939Z","last_seen":"2026-03-31T17:49:02.007332Z","times_seen":25,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/fonts/bootstrap-icons.woff2","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/fonts/bootstrap-icons.woff2 HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/css/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 112440\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: \"69a5774f-1b738\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JijZlxXENqdO5Gji1Yn%2Fg49hRG2Sdz045AaAl9pWo7R4cr78bzDwO6GmRW04bCaDDd5SXR5eZuLKtf2ePuzGZzpQxVkM0bso\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d6b9d295af3dddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112440,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 112440, version 1.0","md5":"31e1300d419245fd27614630601dc74d","sha1":"3a284b0618771f29da8eb6be900e99439253dce0","sha256":"c69bf1ccae5f13b5aa4345dcfeb209a8148ad0bfa1e0678b93792aae0429c764","sha512":"d861071b92e4db2ab0c39fd97099aa7024b50c594c9dee7fa4b2137668fea79ebc4b5290558a87d6ee5e48bdeea10dc4b7877105b84ec06d60c3b1b5aff6396f","ssdeep":"3072:gRAJT6JF9ltW5gQJNMiJiRk6lKu1MwRuoV/9:zEJFrI5gMM+0k6lT6wR59","tlshash":"a3b3121c4b3ff207ec3abe35ac8e036ac7a35a51e6445b760de9aa91243c54bf061713","first_seen":"2023-04-19T16:25:28Z","last_seen":"2026-04-04T07:54:13.405532Z","times_seen":3889,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/fonts/Rajdhani-Bold.ttf","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/fonts/Rajdhani-Bold.ttf HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 373192\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: \"69a5774f-5b1c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BzCtZh5TjwIkcb7cV921b1bruP3vPG05zStS6F48P3Mox0bWkRnqojfev0%2FK8D%2BlueXzJwcP1q0KhwBOAaWUI8tZl3aCk29\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d6b9d294aefdddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":373192,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"62eb2a35acdf719d19b2598e8e5f69df","sha1":"d9c403532e310d0a470f959e65ed283a4f21d7a7","sha256":"0e2754864bf70da4f279189b713026551927c0c10258ff6dd431ff71fd6c8dd0","sha512":"18c481579ca002efc9c2f58d4ba02d7774da16d5149658631edf1cf286ff5f9272b4d9ea4a71a0cc5c15bdaf388728f12c6b4f4c6aac07154361b33ba6463ae4","ssdeep":"6144:vrhJE3EeP5MDfibDYMwytTPX06PAcJYLN4OV:tS3lMD8RP+V","tlshash":"b1846d2dab3adf92d3d7648e0d82cc0233e0fb49b7567bc7dd6197a864429c641a34c9","first_seen":"2023-05-07T23:09:24Z","last_seen":"2026-04-01T02:47:24.139438Z","times_seen":145,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/secureproxy?e=jscdn/getFile","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"saxpg6vyhtw8knf80viz\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:08:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=piZTIVfKwdMk6Cp3SKoCiNMe8OmXXeK2dMQqoo%2FLUx9gcv%2B%2F46gaugPcM1r6jEWqouAbXDayF8Ng3hhEGIg0XCN68fzy4U8RBLA2sQz9YLWYoQ%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9d6b9d2a0b00dddc-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3395852,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9ed1f2aeef7effe27b117f4d1fda3357","sha1":"7e68939a88ed643ca61e6415e2cea7e5b3658807","sha256":"cbcf7940c81fca96e7ec2acca7ebdf43f538fd4541f10bd94be62fce452f1e33","sha512":"3b7b8912ff0cf4301c8883e34bddf762a0a54a6e4207814e5a9cc4650ba155e71d4dcd1778e0e9e11553687c9d2dbca5214ec7952ce92186a3e2f03d26c3bcdc","ssdeep":"24576:Ib/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0RtzG:GGkwdNZngkO5ta","tlshash":"832523d21f57983c8b9c1fd570ab1d0f29444d23148596feead2d8c732a8b7041ea9af","first_seen":"2026-03-03T21:08:37.039328Z","last_seen":"2026-03-03T22:57:33.304547Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":759,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:00.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 21:08:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9d6b9d2dec73e891-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-04T12:50:00.513865Z","times_seen":71367,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:00.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 21:08:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"0beffdc96a1a1b35b5ce2759d6d1d51a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d6b9d2dfc7de891-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-04-04T12:50:00.571734Z","times_seen":7359,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/favicon.ico","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:00.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/favicon.ico HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:08:01 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69a5774f-3aee\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0AMuAtDK%2FzxKTavt1fmT7nm53dMDLWo2Gp7jWlTbUsOLzMWDlooslaazEsda4spHH%2FXh%2B2m8zfLLcLpzLiknj8LsfVGhhRE\"}]}\r\ncf-ray: 9d6b9d31fbfadddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"882d0a759a208f741bd3ad33d5200518","sha1":"8a05652651080b5edd127e8062b772cceeae938c","sha256":"990658ba72642c2122b58d961fff4058f52eb37e171a048277739678e3f0afc3","sha512":"d0d56a287298ac96924cf4594adcf89e81faeabd7cc02af581918dbd0a72985c4c8e44f25e55b36d79092d7f11a32ccd83bd945e8c49687a911dd59df79a4b69","ssdeep":"192:jExiBDcks6+a0FxYz07jaXu0sqSnlW5uQjz4heFm:jRDD4aXOqSj64heFm","tlshash":"4d62d94272c447bcf41dcb38f996a5d677196d32c8420d8a6359fb180c8be34bf6265a","first_seen":"2023-09-19T16:11:48Z","last_seen":"2026-03-31T17:49:02.131663Z","times_seen":38,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/images/usdc.svg","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/images/usdc.svg HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69a5774f-1012\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXt2ePPLqv7%2FJDmX%2BmiBc9rX6FZRN9PdFHMoZMfFEk0HmQaJ0QM18zhxjPANIsJQJe77yof%2BzIwrk8ey91IYhQsJ8Ry5e2Ly\"}]}\r\ncf-ray: 9d6b9d235a1bdddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4114,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae7325678c731831184fbdc2ca19d297","sha1":"4d7243fd1ba5cd09b69787777dba41703fbae998","sha256":"8246048c8c1aaecea72aa228df64f2befd23bbc1f2a281fb417b1028b57af588","sha512":"3d3e2287cd92fd318060145cbc695481a7eb7cc1d96824b1441049694639151e45142218883739e37b5371c9983148dfb544a6974dc434cdd51116a8a8cfa7f3","ssdeep":"96:M+SvBcwhZHPOeG1D8G/MOqmycytTBwwg65s4iQ9f:M1vBZhZHbG1D8GkB7Lpx5zig","tlshash":"4b8166de3b2689f4de44f3feff2210ecb40b686512868a34c2dc9f1974619ad5d44992","first_seen":"2023-11-12T14:41:10Z","last_seen":"2026-03-31T17:49:02.071744Z","times_seen":27,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/css/style.css","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/css/style.css HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: W/\"69a5774f-5a6d1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bNThkrNzYBLtHKwQGFzymwXBqpwLW5bSuu5G5AlbmCaasRm0VDzUNOF4VCCs67E5DR7IHNGNL2tG7v%2FtZZZPiWXdereNPlB0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d236a23dddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":370385,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"3b2cfa812d63ee5dc5b00dac1798fe28","sha1":"74297f792e0b3f8d385a1126887befaf6af1ac5e","sha256":"f63733e6e4568f7090c2850a5bba1774d0e794cd53f619eaf578f3243f05b969","sha512":"9d16edbcfa059bb2b0cbaf7250eef543c7c2cd6b876448f0ef650fbbe8b1b91a3ae5e66ef7b563956dda27149dfee7a1842d06f34c5c2c184f6f59d2d9857ec8","ssdeep":"6144:yF9fcF/ALfLNL4mxGHOuFdKfYOumMDsp4:yFemoHOuFdKfYOumMDsp4","tlshash":"0274029afdf11504345b916864e7bbf97f7e8082d60ece7a76e23274cf853c14862a84","first_seen":"2025-06-14T11:21:45.394664Z","last_seen":"2026-03-31T17:49:02.000811Z","times_seen":27,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/css/owl.theme.default.min.css","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/css/owl.theme.default.min.css HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: W/\"69a5774f-3f5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4oRmuk%2BKQp2tPor0lfyCgHLjJXbmd56oOZL4Git2m9NpKXtU%2FfdhPeuADDP%2B6oVJpRiROKMNca8joago0U6n3rE63Tx0lSUn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d25aaaadddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-04-04T13:40:43.60449Z","times_seen":18438,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/images/bg-21.png","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/images/bg-21.png HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 73531\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: \"69a5774f-11f3b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=up1r1GmNTrJ1cWR0VQwmnM7%2BxtK6oVUqC85mLLDuGLltneEpSECTbYd9%2FCasC0oTxopINNHV50UdrvSJ5WEfAesGXpLmXBh6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d6b9d291aeadddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 4614, 8-bit/color RGBA, non-interlaced","md5":"b652703294887588182161c90698d0cd","sha1":"4c651131008983d9c36ac96321ebc3f504d071f2","sha256":"1a851b90835d9c0042f224f84e90b40aaf89e7d744a3da81f11cf05336ab40a8","sha512":"d5ce8b376bfda4fa7ad86f030d1bc01b4cc32928506e81c3d48c94883bb6ca13e5f7c8315131828815d34194a124be60c90e05048d3e23350ae2216163f700b4","ssdeep":"768:4uF6vYxUrYqmFCwZah9n7TvwfIHd23A7F+rlYdhH9RhtJU4FuQHK2RW:4NwxUrYqmEwZW9n7MfdA7Uq1JnG","tlshash":"fa73a661a4b2d4bcd58c103c52cbbfbaaf911aa31421d3098736ffae6d977e74e09044","first_seen":"2025-06-14T11:21:45.360466Z","last_seen":"2026-03-31T17:49:02.095138Z","times_seen":27,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:00.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 21:08:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d6b9d2dfc74e891-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-04-04T12:50:00.544708Z","times_seen":44895,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:01.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xpm3.top/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 192\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":192,"data":"{\"p\":\"68469777501b8d1909142b40\",\"w\":\"1it9rvbbn\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://xpm3.top/usdc/?claim.circle.com\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"jeokGEUCAzTBTN-AwdPcu\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-5n1q\r\naccess-control-allow-origin: https://xpm3.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ndate: Tue, 03 Mar 2026 21:08:01 GMT\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9d6b9d337888198c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6a1dc1bc0651a4c732c1c1f700894cbb","sha1":"ba84d67acf78f6e358ba04b1134d4282c4db8576","sha256":"f3c4d1b54492ecb7b8f0c82b12fe57c9cdaffb391e22bc079753c14c0630c743","sha512":"b797bebd671fc0a4a6bd463d22b2ad0399c31581a18ba1a0ca94e7a472d7b7bf6ddc7460eea90e077ed58be9e024f63cbf1a1e3f591e69cf777e7d38b2b548f4","ssdeep":"","tlshash":"f01128171d4e5e0fb75663c288497d8446ccd9e276e80564d5c6ac963fe927e1c034b2","first_seen":"2026-03-03T21:08:37.046972Z","last_seen":"2026-03-03T21:08:37.046972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/css/bootstrap-icons.css","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/css/bootstrap-icons.css HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: W/\"69a5774f-159b5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xq%2FUNbCUxIUBqpya%2Bpxy25zGceaAceMCwAZZR3D3GXgwfIykjcHmuzhmOhtavgiBJtTlVN52l9q%2FFICXEbJD0aq6SfsyG1Y0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d25aaabdddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":88501,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b8b0aec1d7c07cca22ed06cfe816a714","sha1":"1630fe4bae75f9d65f000ca4078804cdc589a679","sha256":"9fc987cac9f83183c5fa0a4f78b325bb452861012f586917f95929b47c5129f9","sha512":"1addd738d62dc4faaba4afa465cb019d52ae0734e0f514afc1cbb0361cd9a172167a561d14da02ce31a7969c110abb6d12812fa6ccef6801f3229daed896ceca","ssdeep":"768:/qnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8IbgFVC:WOocm4FuwZ5ijINRDl8i","tlshash":"4683eebad14f05f9d341e4d92743674693aab93ce1812c7ad342399ee3c16188ad73ec","first_seen":"2025-06-14T11:21:45.378868Z","last_seen":"2026-03-31T17:49:02.112419Z","times_seen":41,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/images/coins.webp","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/images/coins.webp HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: W/\"69a5774f-2a0d0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyN626BOfXtZ6%2BynYVI5jtKZmYPj5jQDGnsWBFhJE1n9ZWwl3rK3SbyWNrUcyrmquOKfPToo1pHEaUSvAmnfmmTR3%2BlF0ozS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d235a1ddddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172240,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e96e0e15d57b42c791b12f0390c6d830","sha1":"a1958b3267a22aef4f3427960caf182a826f9c4a","sha256":"1e0b807181265d2ed121de4237b4e600cca4c30c50415adf9e7264031ff0bc7c","sha512":"24fae2e35f24c8b5f9b11f136272ba9e7f564aa17d8f631323acf7c6a08da895123b5ca2c4901caa49ddb0b85833d14b5138a09b81fa4370d5bdd26b8f364544","ssdeep":"3072:5DH2DaWXlvBJaHcZj19AAjH+iqUWAZ4mmqfWf1SQqt/gwVnm+bBb1Vhkf7AZ3:5iDBXlccB1d+UZTm8S1SdgwVm+bBbX3","tlshash":"54f3123ad1171f7d8d652e710866feb5627730c9f82d814cc2329ea53a9b4b37288db1","first_seen":"2023-11-12T14:41:11Z","last_seen":"2026-03-31T17:49:02.058632Z","times_seen":30,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/css/feather.css","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/css/feather.css HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: W/\"69a5774f-2cac\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DpfMkbNukmE7S79cueSKg7JZahy%2Bdej5bWzmf5QZoWMrMIe%2F%2BWg1RfOaXA1rdszW6ER%2FDAnxp79Z3FZ2s%2FcNCRSR5J3bcSgm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d6b9d25aaa9dddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11436,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11436), with no line terminators","md5":"6ab07360a122ea4501c7492979c0b2dd","sha1":"374cb54dd8fa4a920463dbd46eb45cc181986c84","sha256":"8706c1d0eb8ccecd0a290ee5c1c5f2be8190714095463bcf9638352fb3973e18","sha512":"a87d724e14fddea67ca6054fe72d3a69179e77bfe873ae93e6d918c4405981a2159be9b64fecdc1e53a56b8d4eff85b935a71357dc04aebf0aff226194b2ed44","ssdeep":"96:jv5hEI6IzTYGb1KeWzhrFhqTfrnSdOKpI3W+z+N6uvqlFTw5Hb/:jEI6WeFETjrK6hz+N6uvEFTw5Hb/","tlshash":"3132a6b8e46c52c83731c71f8765e6587586b922cd490d22f42fba0e2dc7769038deb8","first_seen":"2023-11-12T14:41:11Z","last_seen":"2026-03-31T17:49:02.109862Z","times_seen":42,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/fonts/Rajdhani-SemiBold.ttf","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/fonts/Rajdhani-SemiBold.ttf HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 363500\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: \"69a5774f-58bec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKQE8umenVcpfJEzCjrb10P7HsEuwJWjjhe1aXJb73XlIHSyuJY16AnaT0eCGNOjQMjTo8W7BElK0ZlURf9MI9BaDyfgJz4Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d6b9d294af0dddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":363500,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"e0d3c6c674dff62764623979d6f67133","sha1":"0fcd923c13976ebcc87b40237e3c5a053a347629","sha256":"5fd51c1334cafd3654059b0ee61aa470088a70e4637a9cfc0274557c751eb0cd","sha512":"f40952cbef6a8daea646578cf8042b24776848f7a7b431cfa8f1a849d06d5236e150bb271d95fa9a36529f17f61de6ee7ad4ab4048e8e1c3c1493b0bd87858db","ssdeep":"6144:UXj6K6Amoau8ymCb9Jt/oV9pJhg9IcyFsnl:kF6DGRg8Os","tlshash":"cb746d2cba27df63d3d6248f0d96cd0122d4b75eb796bbc3dc2257a864518c981632ce","first_seen":"2023-07-22T13:16:26Z","last_seen":"2026-03-31T17:49:02.06458Z","times_seen":71,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":270,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:00.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 21:08:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b057293b718ae7060a9acc593ff83f67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d6b9d2dfc76e891-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-04T12:50:00.570045Z","times_seen":7356,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=68469777501b8d1909142b40\u0026widgetId=1it9rvbbn\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:01.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=68469777501b8d1909142b40\u0026widgetId=1it9rvbbn\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xpm3.top/\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-375m\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-35-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Tue, 03 Mar 2026 21:08:01 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9d6b9d326830198c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2140,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8a91ac03d64affb5a56183cbe5247187","sha1":"0c1081e7e6a1224a695d8f5ef37015e1aa2a6980","sha256":"19e711160e1b8fa7a08cfb4e7dd46ed7b15c7ffa1e9fdce6a10046f3c6a5fcd3","sha512":"95a36894304e46fe9d1173c6ef123ce267f826f9d2df1c4b4ff248693ca4b97ec8f765a61fbd638ba0a9a943f874f81cdd783208da6602dd6ea75f071de80ec5","ssdeep":"","tlshash":"1541f0254a12dc7c63c9835371de7727aa2dd466f2846e0de1a89d2ce3fb64d210271b","first_seen":"2026-02-12T21:03:44.433061Z","last_seen":"2026-03-31T17:49:02.107279Z","times_seen":18,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/fonts/Rajdhani-Medium.ttf","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/fonts/Rajdhani-Medium.ttf HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 357884\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: \"69a5774f-575fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2BFWJNrLTar%2FXqzaKVX4nSKVwZFIQD3pISocetWCXEiGDixTHed%2FdcJAe4ZJFMJTwh2pP3XYAdnFNGFfl7dZwdOdIf989gy2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d6b9d295af2dddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":357884,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"5500ef6a4e84d3be9971dbb138c010e5","sha1":"21724de5a45db366c69e88083bdd33a7ec3c05e6","sha256":"88a3937dc5d0d96d6b1a313b82802b78541bfdb5c004a208dfeab56192938538","sha512":"9fc4a7c5338316057f64907a76666043d07429d7f4e95a0330f9210682736cfbcb56630c1e93a1f64d17c4d47ca19de481f2c7d568f55197ecf3591361255a65","ssdeep":"6144:mF/uGTNW7oTp1uqGetY/t3bPD+W/2QkCtloRs2BgExHA:cxWkf+tOly","tlshash":"aa744b1dfa26df53c3e764ce0c86cc0323e5bb29b7867bc79d6582e85452cca85a3185","first_seen":"2023-09-28T17:58:21Z","last_seen":"2026-03-31T17:49:02.049941Z","times_seen":131,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:01.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://xpm3.top/\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-bwhz\r\naccess-control-allow-origin: https://xpm3.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Tue, 03 Mar 2026 21:08:01 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9d6b9d32983e198c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:01.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xpm3.top/\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:08:01 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9d6b9d326832198c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-04-04T12:50:00.573982Z","times_seen":7429,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/images/usdc_bl.svg","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/images/usdc_bl.svg HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69a5774f-c94\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ouaLdLsbP10ABp4KVeyCdnH5aPerEGGBA%2FTMwy5ubDkJUbE3WthLiSQ25Zrl2mzq6sZsCsqZP5fw2iNVD5b9P1g44BbPhhOE\"}]}\r\ncf-ray: 9d6b9d235a1adddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4f92696fb1cc2a2939ffb851d9a3b87","sha1":"a222c6d5dba4ddbf8e45d014fe53bc21266f4ae7","sha256":"a083e480683aba38f1a73ce138e61787cd13e7c4a38e3b9b42417d57925eee31","sha512":"0baefeb89188f37d4ecb20969c0eecec2799a64dced0c47703420be8ab752df88c9a189b76e57179acd931462a9ee6bd9875a6f63d72d5ac2710ce696dbacfbb","ssdeep":"","tlshash":"7d616246838097fabca0023c82753c9435b9fd42b074f19867ef2477d60c8d090acac7","first_seen":"2025-06-14T11:21:45.371649Z","last_seen":"2026-03-31T17:49:02.038745Z","times_seen":27,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/images/coins.png","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:58.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/images/coins.png HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 443026\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: \"69a5774f-6c292\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzbDhLqYVjrI6PRpTsJLjBcASDUrfDTBWB9Ojbt5DieO3GNnRCpLqlXRLvycIdBlTbefhXOPMHiTXfu9eBy6ii2EcL7BMe2C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d6b9d235a1cdddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 810 x 810, 8-bit/color RGBA, non-interlaced","md5":"b462f909ae02c8a8a4789715c763ba93","sha1":"3ce49608a638524605f4683adee5ad417a2f15b3","sha256":"293ec33a329fd5e806823f0dfa04b095c54a9db7b2dad6cf4596879b9b2864e2","sha512":"a6acc7be1c50a77898df3474eef0d29e170019639ad7011bed62fb5b87fd96fd722d702b0a8d1157983bcee1e38f7f110b38ca9b009e0fe0b2dd05c2d4b117df","ssdeep":"12288:SfHW8+20iDeHojDEWNPBg0nwj7COaiCxmK:SPtDeHEDhNZgUw3CNi1K","tlshash":"c89423c7b9b6fd0bbb615e338d5126b9b2e04610ff3178264bd907dd80a0db690648dd","first_seen":"2023-11-12T14:41:11Z","last_seen":"2026-03-31T17:49:02.085399Z","times_seen":30,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/images/base.png","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/images/base.png HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 402135\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: \"69a5774f-622d7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYqq1mc2k9fvnalIhYlkcR8XEFEDI6qrtRJyubQdH%2BhL46K5VdZt1dIj5RNjBX9jlu0924U1WRudaoyKVyOEOl5XSLyIKA%2F1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d6b9d291aecdddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2400 x 280, 8-bit/color RGBA, non-interlaced","md5":"f55adb0bc027f3dafba37bd22b45da37","sha1":"3972ac4f668d2974db0d82280ef00821f0ce5fda","sha256":"1ca918bb01c201d4daab574a86dd7ce83623372529a01162804591c0ddf2aa56","sha512":"fbfca5a1382e1a727f96c51e64ba0e13767a2360804d16dfb8db774608f7c4731aab3e04f267b885166805250862837d49ebbe268f24e162ec13472ebf286125","ssdeep":"6144:buun1jyWI/bkC7tWW85Y/K05YawfyX1//zwAW9eME5UrdZK6EjuAAG3WSX:jjBCB985YYtW1jwsMbr2Hp1","tlshash":"2b842350540cb2f78be028f2156105bc8a6fc16a921729b923ff5e35dbfca0a6ed507d","first_seen":"2024-02-26T11:32:01Z","last_seen":"2026-03-31T17:49:02.061948Z","times_seen":32,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/images/bg-20.png","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/images/bg-20.png HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 1947587\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:03 GMT\r\netag: \"69a5774f-1db7c3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zAiQVChDsEgbSF%2Fk6%2F%2Bz2oJAm4p1OpD2Cho%2FSs7TE7z%2FNyoJ0SspeKXvCTHhG2UIGorMMMYvvMq2P%2Bvb1rwedd5xc0cj%2BVa8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d6b9d291aebdddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1947587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 900, 8-bit/color RGBA, non-interlaced","md5":"002e1b2fa89705d3d65a602ff1752296","sha1":"d26264577896d7d7ab5b1b877c18cd9df81bde65","sha256":"246905c107b1edd369ec46e4aa442b83543357965bc4d26cff87d358abf97647","sha512":"7786394246c226a2c6ed40686a9bffdb35c0023f372df8b4f2ac223599dd91c02dd9ce7c461b5eaea835f65e9a11565f121ebc4a1ebca8086c226eac268df8db","ssdeep":"24576:lUGw2o/x7hYkSeBO1F2PlUregEC5Ohr/fgJ4NmRNrX:xw2ox7hYfNF2qreeOhrn9NKrX","tlshash":"32253302ad7a2346dda011e13fbd9ed3b58b34007a65e5e33e5eb05250a2bcebd901d7","first_seen":"2025-09-04T18:27:35.764665Z","last_seen":"2026-03-31T17:49:02.099438Z","times_seen":24,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":537,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xpm3.top/usdc/js/jquery.nice-select.min.js","fqdn":"xpm3.top","domain":"xpm3.top","tld":"top"},"ip":{"addr":"172.67.138.122","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:07:59.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xpm3.top","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 10:47:36 GMT","end":"Sun, 31 May 2026 10:47:35 GMT"},"fingerprint":{"sha1":"36:08:F4:F8:2F:DF:5D:53:B9:D0:63:19:0A:CD:41:0B:4D:95:4E:07","sha256":"9A:82:CD:C2:F4:D1:F4:B4:4D:DC:36:13:A2:47:E6:2F:72:56:A3:05:9B:7E:4B:52:9A:64:80:1B:3D:18:07:17"}}},"request":{"raw":"GET /usdc/js/jquery.nice-select.min.js HTTP/1.1\r\nHost: xpm3.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/usdc/?claim.circle.com\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 03 Mar 2026 21:07:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 02 Mar 2026 11:41:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BSaf0AiWJNg9kCd5SfxNKkL6sbM5xCR7Hv52mFwQg%2Fu0f5yx4NkLmQEAQsNDGCc12F97iFugMs0WPeOOgsAEA1YGqMtQDJK\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9d6b9d29dafadddc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"xpm3.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xpm3.top/usdc/?claim.circle.com","date":"2026-03-03T21:08:00.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 07:50:57 GMT","end":"Mon, 06 Apr 2026 08:50:49 GMT"},"fingerprint":{"sha1":"76:A2:1D:87:6A:02:2B:AE:59:CF:63:88:47:0B:0E:A0:A4:71:2D:D7","sha256":"9E:00:F3:80:45:CF:47:97:9A:BA:39:F6:38:6F:52:DD:E7:5F:D6:9B:7E:89:F7:9D:B0:BD:98:6F:1F:45:64:2A"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://xpm3.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xpm3.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Mar 2026 21:08:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"d9deabdd1848c34f3ab46722f446c153\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9d6b9d2dfc79e891-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-04-04T12:50:00.530044Z","times_seen":7354,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}