{"report_id":"3b2dc9ac-84aa-4740-a770-60997e971422","version":6,"status":"done","tags":[],"date":"2026-03-04T13:33:57Z","url":{"schema":"https","addr":"app.defisavertools.cc","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":0,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"app.defisavertools.cc/","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"title":"Defi Protocol – Resole All Defi Wallet Pending Issues","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T07:58:21.484737Z","times_seen":17669411,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"app.defisavertools.cc","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":0,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T13:33:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":7,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T13:33:32Z","timestamp":1772631212,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":34490,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-03-04T13:33:32.366513+0000\",\"flow_id\":678433917780247,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.40\",\"src_port\":34490,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3511,\"start\":\"2026-03-04T13:33:32.344343+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T13:33:32Z","timestamp":1772631212,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":57888,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2026-03-04T13:33:32.426950+0000\",\"flow_id\":856535474141541,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.40\",\"src_port\":57888,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":909,\"bytes_toclient\":3432,\"start\":\"2026-03-04T13:33:32.358757+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T13:33:32Z","timestamp":1772631212,"ip_dst":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":57886,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)","source":"{\"timestamp\":\"2026-03-04T13:33:32.427680+0000\",\"flow_id\":2212654217983817,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.40\",\"src_port\":57886,\"dest_ip\":\"20.105.41.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058788,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"1rpc.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-03-04T13:33:32.358217+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T13:33:32Z","timestamp":1772631212,"ip_dst":{"addr":"34.240.158.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":40950,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2026-03-04T13:33:32.479899+0000\",\"flow_id\":793981422943801,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.40\",\"src_port\":40950,\"dest_ip\":\"34.240.158.155\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-03-04T13:33:32.409145+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T13:33:32Z","timestamp":1772631212,"ip_dst":{"addr":"34.240.158.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":40938,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2026-03-04T13:33:32.485860+0000\",\"flow_id\":596578283568347,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.40\",\"src_port\":40938,\"dest_ip\":\"34.240.158.155\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-03-04T13:33:32.408795+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T13:33:33Z","timestamp":1772631213,"ip_dst":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":55544,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2026-03-04T13:33:33.423183+0000\",\"flow_id\":2130394856931685,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.40\",\"src_port\":55544,\"dest_ip\":\"104.26.11.181\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":917,\"bytes_toclient\":3518,\"start\":\"2026-03-04T13:33:33.377189+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-04T13:33:33Z","timestamp":1772631213,"ip_dst":{"addr":"63.32.237.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":47488,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2026-03-04T13:33:33.523495+0000\",\"flow_id\":217706333584942,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.40\",\"src_port\":47488,\"dest_ip\":\"63.32.237.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4607,\"start\":\"2026-03-04T13:33:33.441902+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"binance.nodereal.io","ip":{"addr":"34.240.158.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2021-07-19","domain_rank":1804985,"first_seen":"2022-10-20T10:44:48Z","last_seen":"2026-02-24T20:51:52.471809Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":3,"received_data":328047,"sent_data":1331,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc.meowrpc.com","ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":3113385,"first_seen":"2023-07-10T08:36:27Z","last_seen":"2026-02-14T03:06:52.78282Z","alert_count":0,"request_count":1,"received_data":525,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dapp.defisaverprotocol.xyz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-03-11","domain_rank":0,"first_seen":"2025-11-27T21:31:20.665049Z","last_seen":"2026-03-04T13:15:13.455861Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1rpc.io","ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"domain_registered":"2022-08-02","domain_rank":47066,"first_seen":"2022-08-18T07:06:26Z","last_seen":"2026-03-03T06:42:42.824952Z","alert_count":0,"request_count":2,"received_data":5428,"sent_data":1021,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-02-25T21:00:36.540082Z","alert_count":0,"request_count":1,"received_data":2964,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"63.32.237.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4924478,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2026-03-03T06:42:42.86591Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1053,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-03-02T09:16:51.330597Z","alert_count":0,"request_count":1,"received_data":256,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":28978,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"app.defisavertools.cc","ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"domain_registered":"2025-09-07","domain_rank":0,"first_seen":"2026-03-04T13:15:12.875504Z","last_seen":"2026-03-04T13:15:12.875504Z","alert_count":46,"request_count":46,"received_data":20412188,"sent_data":21490,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.20.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":117770,"sent_data":1100,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.tidio.co","ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2026-02-25T20:51:49.946786Z","alert_count":0,"request_count":5,"received_data":1018761,"sent_data":2347,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.defisavertools.cc/wallet-modal/wallet-modal.js","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52f13f37a5e3145177e51c471d286aa4","sha1":"35731d73a3550970d84eb6d1f0ad792b4bd7edff","sha256":"451c47c332902eab3037d18a67651157ea8e3e9bb5f6b2fcc29fe6c60fd7d04d","sha512":"eb57584d811db9e66a52eb8dc66de8d1d4d6922d6a9d7c24733b400762f47bbdd8a81d150e17f376f3976988d2ce7ad94175b91bcc3c3b71bf4405cd1eebd018","ssdeep":"192:bdwlPipMNsFNkkhWuCdvpeWukN6P/gK8vyKVC8ZSZasWrYXfNZyt:WlPipMNsFNkkhWuOukNe/gcqCnxIY1Zw","tlshash":"271251457fb5233661b7e72a681352b8fa205212aa2490b672fcc3961f31d519cbfdc8","size":9630,"data":"","first_seen":"2026-03-04T13:15:20.563978Z","last_seen":"2026-03-04T13:34:03.219178Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/a0e18f7a-d41b-4153-b38e-16f8b53798cc.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e21c7073dd3f60811af1a791d551817","sha1":"077553740f37d68445d1ae0c7e68d14fea65789d","sha256":"3af13eb81f4adfdcca76f9f1ed24f1441a147b6319c9a0993076431dfe5b2391","sha512":"7f7c28429efa881ae4dff484c5d207d2687c1715a36f2bb6c80738e600032919e818878bff24de21fdc3f5a72dc6f03a540a9f82d216fe7485c35f40012cb96d","ssdeep":"","tlshash":"ee11ef00f670e8b612ef58d100313807f2545869f16d84a477bdecb320b18de6bab235","size":1000,"data":"","first_seen":"2025-03-11T06:37:48.554747Z","last_seen":"2026-04-30T18:33:03.078686Z","times_seen":681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/crypto-js.min.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-02T04:52:18.919993Z","times_seen":31817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-02T07:37:48.071405Z","times_seen":236863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a808a5951af08030a475021b4d70406a","sha1":"ce110e03039956e0ee2789fbef6999f25f38270e","sha256":"481576d7b92e0d3dc53dd8fdf91ab59d27f6ea55c3ee6a8f08a06e88529ed6b4","sha512":"750e928461a9e8c13a96f5405de317b71ec5cd3cd633383a73a566dc67c0252c7d1b03d97876b7455a45459208e49f55f103cfba24eaeb1ca4adde2540c9fba7","ssdeep":"","tlshash":"e1e0c2ae6ab535b0023bf23f134fe68935b200873008cd163d4c4d9a0fa4e2824f18d5","size":298,"data":"","first_seen":"2026-03-04T13:15:20.626791Z","last_seen":"2026-04-05T14:28:50.00954Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/ethers.umd.min.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-02T04:01:58.308798Z","times_seen":8484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-02T07:49:36.331876Z","times_seen":736864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.defisavertools.cc/scripts/wallet-connect-v4.js?v=3","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /scripts/wallet-connect-v4.js?v=3 HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nCookie: gacfxdn1x7=4OTGpsDBUmj1L1g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:36:02 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2632354,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12127)","md5":"ae77ac286f1518ab4a4f346d2bac2a2e","sha1":"2fe94c28b4f708278ae2e14d1d5d36be1b0b29ca","sha256":"2d4b532902ba460018231cb017a847b98f2d363e839d4e20dc6ffa0010c30130","sha512":"5924efd2732abc32279d79fa500262255da7d25701a4420b924f0a819ef47094a33e64551dbeaa678e17da23abad9393440994fe660b4c6fb381d9cf6c31e96b","ssdeep":"24576:fzljmYnhTXtpQUUKocEDzzJqYeN7X6FbckdHh5/:fzljxBtpQUUKocEDzzJqYeN7XcB5/","tlshash":"b7256b9073a0b47a179752e4057b0406f238746b740d84acf6ecd4e6bfaa989c5b7f38","first_seen":"2025-07-26T22:38:55.935953Z","last_seen":"2026-07-11T04:16:11.470765Z","times_seen":202,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/wallet-modal/wallet-modal.js","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /wallet-modal/wallet-modal.js HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 23:09:58 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 2717\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9630,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"52f13f37a5e3145177e51c471d286aa4","sha1":"35731d73a3550970d84eb6d1f0ad792b4bd7edff","sha256":"451c47c332902eab3037d18a67651157ea8e3e9bb5f6b2fcc29fe6c60fd7d04d","sha512":"eb57584d811db9e66a52eb8dc66de8d1d4d6922d6a9d7c24733b400762f47bbdd8a81d150e17f376f3976988d2ce7ad94175b91bcc3c3b71bf4405cd1eebd018","ssdeep":"192:bdwlPipMNsFNkkhWuCdvpeWukN6P/gK8vyKVC8ZSZasWrYXfNZyt:WlPipMNsFNkkhWuOukNe/gcqCnxIY1Zw","tlshash":"271251457fb5233661b7e72a681352b8fa205212aa2490b672fcc3961f31d519cbfdc8","first_seen":"2026-03-04T13:15:20.563978Z","last_seen":"2026-03-04T13:34:03.219178Z","times_seen":2,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/ep-helper.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/ep-helper.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:23 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 5225\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40288,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40288), with no line terminators","md5":"05fa4b9055676b3e5bb6b5a7643e1f0e","sha1":"0156000c2a8883d39f1f6d9a9e8b0d81523235cd","sha256":"05533018a98815d525f2098499e566480da268f895a7bb818aed553663a47dc8","sha512":"6ef3a5423e74262e074228d38a3cbf898161b5dc2c51237b4b9b1fe32919e2ef70e9509f5c589201fc35f653cde6cae6a3539dd1361647aef41579133b0d9331","ssdeep":"384:+VEVzV/V5VcVmIDhIKSISlIoZIAhjIDChV9Us+CIz/iUp+8Bsf8dXE0vN/kU5GU+:+2VVT+AgCdBeDNk7RcvccttLY+tw","tlshash":"7a03cd467f431038b657082ee7ab961ca564b8c2f5428deca6e5643687fbcd8633d43c","first_seen":"2026-03-04T13:15:20.561948Z","last_seen":"2026-03-04T13:34:03.222981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/euclid-circular-b","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:28.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /css/euclid-circular-b HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 1051229\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 20 Feb 2026 09:32:58 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIgxsi4IT%2FHi8XSIjzCDMTIni%2FnYwQtRZknBgh%2BSB1JIK07VHod7cqFqRkP8rSmO%2BnCIbuYMIgiLhjKWHm%2FTMj%2FAuaID2zq6JYhABGhaIqrUIA%3D%3D\"}]}\r\ncf-ray: 9d7140beee6156f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2269,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"0dd7bb28cdbe92af733b350864df3ae9","sha1":"93c8681524320fd3806324f8d0087c7bfcf66d0b","sha256":"3bed88ab3b5c617a36dfc297f64ea05ff5afbda01ee9a6857a6ae89c28523c3b","sha512":"689df6e1d906c209ab75c557d6efd18b70f32d97ca1a098e6c9d856e94df33a06446619b019ef2a20c7ea03a12cd5469ae14e07ea5f196f7cbcfa5ce8296de5e","ssdeep":"","tlshash":"3041b67e028fa184ad570c59f34bf6a40ddf10a7248dde1e37b92d548ea65350681f5c","first_seen":"2025-07-01T18:34:08.142244Z","last_seen":"2026-07-12T21:10:39.259641Z","times_seen":255,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":13,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Mar 2026 09:10:24 GMT\r\nexpires: Tue, 02 Mar 2027 09:10:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 188588\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-02T07:58:34.036415Z","times_seen":251444,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//tururu.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4//tururu.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7224\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Mar 2026 08:44:51 GMT\r\netag: \"69a69f83-1c38\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 103434\r\ncontent-range: bytes 0-7223/7224\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXYILjatFDRsAQx%2FVrVk8yihW2SK%2BS8F2KP2xGTcpN4TOS34mH2MlBlN9FE6KLR3MrkOWWM%2Bggd13bN4TSLQkYZEv7QEOWKo6XuRVQ%3D%3D\"}]}\r\ncf-ray: 9d7140dc2fe6ea57-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"5061b4d134a7b4d5d744f9a127b757a8","sha1":"c5e240ac60d3914cb3836ba6652105c67720b845","sha256":"12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f","sha512":"bbd050943fd3129822d687f7733034989faa672e543d5fcc0f1bfc69f5af9c7ff3a4c6e1cd55011383760cef14351527f6de22cfb91b25e8d2ac201fc9b9c7c0","ssdeep":"192:2DjGr+6EnIPwZeM/BCepDxN8XcqOBO+JlRh:CjfxnIPkjpDP8Xcg+JlL","tlshash":"11e18c1937f3e09ed620177642d43664fcd01d8017e2945b25a8baebf13e3cbc26a961","first_seen":"2023-04-05T10:44:18Z","last_seen":"2026-08-02T06:37:28.974095Z","times_seen":9320,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":116,"dns":19,"connect":10,"send":0,"wait":16,"receive":10,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/index_files/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc//secureproxy.php?e=ping_proxy","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET //secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.defisavertools.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: gacfxdn1x7=4OTGpsDBUmj1L1g\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_337_0/static/js/chunk-WidgetIframe-9c7ac84d2f899f3c53f0.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/1_337_0/static/js/chunk-WidgetIframe-9c7ac84d2f899f3c53f0.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 06:38:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682d74e1-6f346\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1122\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukf5my3kVDifX78N%2BGcoVUDF%2BrNLIfVSbO7Lj2kwBjfPlAusbwZxxiX%2BzBIY8a5AhR27rtxZ%2FKedqnPsQzaTX1wE%2FAXHbv6F1CORBQ%3D%3D\"}]}\r\ncf-ray: 9d7140dc0f8fea57-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":455494,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0426aedf158f68b536e5f1f799ae1365","sha1":"5c8ab2f46f30abe8ae83be514d37afc79a0d48e7","sha256":"104b3a615c9999f935a3f24862c294b157c018e194fba59579d1f7378ee6c9ee","sha512":"be1f9c728dd6285384372e5bd02b1f888016ba5baf8652fb58b8ca53b2dd1852d7b3398032267673a84fcf380dcffd0f24727f49ec301bf5ccf69f2dc1897016","ssdeep":"12288:GA0UcSnfP+nrN66Tcx2/TVQ9IF2mHKP0BTpz:GA0Ucx6ZxQTVQ9IF2mHKP0B1z","tlshash":"35a45cc372c37468bb9751e6d4bb540d753e384db94880a8f6bca8a8198a5d46333fdc","first_seen":"2025-05-24T18:28:27.272459Z","last_seen":"2026-03-04T13:34:03.229646Z","times_seen":7,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":105,"dns":22,"connect":8,"send":0,"wait":23,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/i5mklxiecputtwyusg0fxcqdacp8umkw.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/i5mklxiecputtwyusg0fxcqdacp8umkw.js.indir HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:06 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 2115\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5984,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5984), with no line terminators","md5":"0e87c2ced81d224f81042bbdaf8769ae","sha1":"a8f546ab8b0413aefe395f74fc702427f21a2176","sha256":"6c7d5654a5db2f08a6fe491576454b19ab4064cb8c0b6f9fad6c148a21e634cd","sha512":"93caf67ea24a771a4a2147b705836b9f8fa095be17054cc3f560db8b1610190ceb950fdfa8a455fbc14913462d81a559adb4eb787c6f524a5bb9a203c6e5cba4","ssdeep":"96:oRemLCsGBAL4MVHqc83Iet2oIC4LBqFLghyYRfFB/4/aeGlBYPh:OLVpkIecrC4/yvahzYPh","tlshash":"c6c1d8d1346825695227ca7d70bfb30732b9602e280d91a4636cdcddad38ec7414beeb","first_seen":"2025-05-23T15:04:10.537903Z","last_seen":"2026-03-04T13:34:03.23152Z","times_seen":8,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance.nodereal.io/","fqdn":"binance.nodereal.io","domain":"nodereal.io","tld":"io"},"ip":{"addr":"34.240.158.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nodereal.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:EC:8E:68:9E:56:EA:CE:48:DE:13:D2:0C:5B:55:18:C3:74:A8:48","sha256":"09:E3:92:97:59:92:96:9A:A3:FC:76:BF:B6:57:D8:2B:24:69:0C:72:DB:30:57:8C:4A:F2:4B:56:9E:2E:65:1F"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.nodereal.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://app.defisavertools.cc/\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T07:58:21.484737Z","times_seen":17669411,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":312,"dns":51,"connect":39,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/index_files/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/merkletreejs@latest/merkletree.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/merkletreejs@latest/merkletree.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 54223\r\ncf-ray: 9d7140db8d2ea0f0-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.6.0\r\nx-jsd-version-type: version\r\netag: W/\"3a393-ow5VcB3yNddBHZ9Yv78eUVMKtdU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220102-FRA, cache-bma-essb1270022-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 39090\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gChQqdYAD6q1f4jfv9h%2FaolVNix8GRdgBgtWPsVkv8ATlcpsJOnfqpdkoBONL0n2c1LLaZSmFsw0s75JjlSxD4EyvihoFWcTw8a0r7zdPQfufTkW%2F%2BCwlUBe92BEt%2F%2BukIM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238483,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"67ce418e4d67b79b2e9d44050119f0d6","sha1":"a30e55701df235d7411d9f58bfbf1e51530ab5d5","sha256":"726fc8775a8aa08138293a5955dd14f9c2cb8b566f1c577f5d39c986bceab3a9","sha512":"827ddbae75068bcb5c45b95a5a33e8ef5f1f09cc8d5e580e17eb5370959970e8c0280d7edf8ed5e180390397c44ae8ff5861db566fa855bff17a52558a178956","ssdeep":"3072:6cBV39NAtLr/rq8orpLppLQ8CsPYx7F59U:6m9NAtvLYQVsQx7FLU","tlshash":"b7343bc63685a0a583da71a8043f990ff176e827404cd484e924f8f59cfce9956abf7c","first_seen":"2025-09-15T18:44:44.033997Z","last_seen":"2026-07-11T04:16:11.452106Z","times_seen":2066,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":36,"receive":5,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.meowrpc.com/","fqdn":"bsc.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:43:12 GMT","end":"Wed, 06 May 2026 12:43:10 GMT"},"fingerprint":{"sha1":"54:13:CA:9B:F7:DE:7D:9D:66:D0:F5:48:C1:29:9D:82:00:36:FE:0E","sha256":"27:BD:F2:31:97:97:24:38:FE:EF:6F:54:D9:8E:45:15:C1:63:D5:92:5A:66:8B:D3:3E:4F:75:1E:2D:55:EB:97"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://app.defisavertools.cc/\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\ncontent-type: text/html\r\nlocation: https://bsc.meowrpc.com\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CPIpn%2BGPby0b%2FR%2BqnZbmstprNZY2lEYXtNSgTYMM18dfDlP%2Bj7zig9%2BtN9FtPhj9QKvpy4qEb0tPLD3%2FXpYUsQUD2CONQv1nX0sZnlin\"}]}\r\nserver: cloudflare\r\ncf-ray: 9d7140dc2fa6aa14-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T07:58:21.484737Z","times_seen":17669411,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":97,"dns":34,"connect":23,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"63.32.237.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:34.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.defisavertools.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0x158862Ec60B7934f1333e53AC1e148811A2E3BeB\",\"data\":\"0x53ed5143\"},\"latest\"],\"id\":1,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 1aabd3f05f8b5b84ce83f141102e73df\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-06-18T09:20:21.245055Z","times_seen":5257,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/css2","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/css2 HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/index_files/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//notification-sound.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4//notification-sound.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 28255\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Mar 2026 08:44:51 GMT\r\netag: \"69a69f83-6e5f\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 103434\r\ncontent-range: bytes 0-28254/28255\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TruYNWXAKZj%2FH79xHLh3yS3UO77MCwpLNlw%2B9AMgNXoocLMGCi%2FNdsTtkZUSL0hfwbS%2BkJRhJMCQQV3r2BHfRuTlLKl4mvtr%2F8mOvQ%3D%3D\"}]}\r\ncf-ray: 9d7140dc1fc0ea57-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28255,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"ed632238ac260d2ff13a5b319163ea80","sha1":"ec3d658a6b985654354abd43c1688d9d020f9eee","sha256":"b43cdddf1836f84ff2873a9716fc541205e42ab4ee6163495fc5d9fa11a475ea","sha512":"951d0ec7b29dad74312dd617d2b715863f417e64e29702535ba6e9fcf231a8dcc2f3de89d5abee1b51fe03f7d3209eae13c17ca04878d7634e3841714e2059d1","ssdeep":"768:N4mLXoawnNyci56NczRzQJhvEgmTKBm9zt1J85voWDmrpNxe:SooaE8B6CzRAhsBmBm9zt1JVlrpNxe","tlshash":"d4c2d0c724248328f92a0db47cb70aabc250bf6804b14be6e34e93015eeffc50f4955a","first_seen":"2025-04-16T11:16:17.238101Z","last_seen":"2026-08-02T06:37:28.9539Z","times_seen":7064,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":109,"dns":19,"connect":10,"send":0,"wait":21,"receive":10,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/secureproxy.php?e=ping_proxy","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.defisavertools.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/image.png","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/image.png HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/index_files/post-9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/image-2.png","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /image-2.png HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:38:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 120190\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":120190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 860 x 860, 8-bit colormap, non-interlaced","md5":"d59dbec506ef7fd715188b431433d407","sha1":"3c55564827a0687d49ec073b80099c4ca1016360","sha256":"38fed24d65758c3f1f84a8431296849b2296c08d87f6e74fadf40965f8b5ac6c","sha512":"52b513a0ee27ccf4ec500c90504fac5c94571d907db6be9c084d7695cd0db325c68ce36a30070b8bedec92b1f34301d5f7ff978cb36beb08352001ddd8b2eee0","ssdeep":"3072:oW2mJXhbLgs9u6RUAhGYyYjpogk6unbTuUst5E1t8uyeR:oIhhvz/hGYtpE5uUg60eR","tlshash":"bbc312d4e8cbaf50d0b79801657b84fde961ba9d56123ec9eef6c604811f3ad4903382","first_seen":"2025-08-16T16:57:27.99057Z","last_seen":"2026-06-27T05:19:56.363416Z","times_seen":10,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/fonts/mulish_SGhgqk3wotYKNnBQ.woff2","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 27400\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Mar 2026 08:44:51 GMT\r\netag: \"69a69f83-6b08\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 103433\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A4VrdLFyWIL63fPhfZqBfVv4lwU48WhLjl%2FZdGzWFrZ8zll%2F0pznpYy5niKO7PK3%2FU4HbREAQmMM6ir6d6cNyneDEnIafddoFlkuUg%3D%3D\"}]}\r\ncf-ray: 9d7140dc2a18ea60-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27400, version 1.0","md5":"d96e6550e1c6b3063f60875bfd4a0870","sha1":"c1b22f0d075bd4413686866134fffcccb3f487b8","sha256":"577db921a554af3596942d3c48b5c91feaac8c767e183d518a8de8de86e5c7d8","sha512":"8446c25d840412230bb91806faab73de9dee5da6a8aae2c980431879d749ca8090d6879e6f42e3be27b416a00ee759dee2febc34df97c3ffa81ae15ce2196802","ssdeep":"768:F4xt+sRZS5Y1nK6uicEP3rhaxoQAoF6jLIRt:F4x3fcUrhOoK63IL","tlshash":"4dc2e10fe287737a5418f23ea969c86e365865503a2e67f1dc1a3ab51e18137b3c4f50","first_seen":"2023-04-08T09:21:33Z","last_seen":"2026-08-02T06:37:28.991511Z","times_seen":9362,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":119,"dns":21,"connect":10,"send":0,"wait":14,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.defisaverprotocol.xyz/cropped-saverlogo-1-32x32.png","fqdn":"dapp.defisaverprotocol.xyz","domain":"defisaverprotocol.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:34.359Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cropped-saverlogo-1-32x32.png HTTP/1.1\r\nHost: dapp.defisaverprotocol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T07:58:21.484737Z","times_seen":17669411,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/modal-12-seed.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/modal-12-seed.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:43 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 4856\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29381,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29381), with no line terminators","md5":"e3e81fcf59ccd09e58a6b2d236358763","sha1":"a0af6da6b9d6cd063a0d15746fa66cdb80e2ce98","sha256":"3457317dd30b5da56a84c62342b66e60acaaa1641b210916f6c23216b558b4cd","sha512":"b47fd79c1639485acad99c9b1fc17f3726b8abba2f9a1a70f30175dcdccb15f3a88f16353e6e44a799952b19652e22184405bef3e3403cdd4a4b91b8fbca62f1","ssdeep":"192:nJMhQ4kbpen//mz0aMaJtIKLZDcxPVBqMZiS0RBacpyG3x71rw6ICoH:naklennMMZKFAxPVBqMInaeNBCCoH","tlshash":"0cd22b91ba48e117f6aa862f55c0f94c75d9e60bfcf30d69e420d0008ed7d6f2a792e4","first_seen":"2024-08-13T22:13:15Z","last_seen":"2026-07-18T17:39:46.891566Z","times_seen":253,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/favicon.ico","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:30.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/bnb","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 01:15:39 GMT","end":"Mon, 01 Jun 2026 01:15:38 GMT"},"fingerprint":{"sha1":"08:EC:EA:C8:BD:B4:2E:DA:4C:A1:5D:BD:94:99:DE:34:43:E8:A6:FD","sha256":"14:BA:5E:86:C9:2C:CA:B9:CA:48:DF:28:7C:D6:F3:59:7E:D9:C0:59:36:85:8E:7D:9D:76:AB:5A:7E:C9:D3:FD"}}},"request":{"raw":"OPTIONS /bnb HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://app.defisavertools.cc/\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AutomataGeode/0.1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\nContent-Length: 0\r\nDate: Wed, 04 Mar 2026 13:33:32 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T07:58:21.484737Z","times_seen":17669411,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":77,"dns":0,"connect":32,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/index_files/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance.nodereal.io/","fqdn":"binance.nodereal.io","domain":"nodereal.io","tld":"io"},"ip":{"addr":"34.240.158.155","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nodereal.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:EC:8E:68:9E:56:EA:CE:48:DE:13:D2:0C:5B:55:18:C3:74:A8:48","sha256":"09:E3:92:97:59:92:96:9A:A3:FC:76:BF:B6:57:D8:2B:24:69:0C:72:DB:30:57:8C:4A:F2:4B:56:9E:2E:65:1F"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.nodereal.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.defisavertools.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0x158862Ec60B7934f1333e53AC1e148811A2E3BeB\",\"data\":\"0x53ed5143\"},\"latest\"],\"id\":1,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: af6016a8ec2c8b02e55ddd255f3fe95d\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-06-18T09:20:21.245055Z","times_seen":5257,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/wallet-modal/wallet-modal.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /wallet-modal/wallet-modal.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:37:07 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 2350\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13199,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"38956fabb8b8f4cfba9cdf77249de089","sha1":"30ea66a6ad6bb627e4a716e0a13fc8cd7fdcad63","sha256":"b484689cd399a525964379a55804d5aeea407a348c1363155b929cb48bd7552a","sha512":"5f1dd4f77d312cf115cdd0ce211716fd1f537b86036b92d44d514071c78b00329dc58e40972aa0e00d66df946c126f7558b170486986152b50fa834e86cbdc92","ssdeep":"192:F47w6q6en4lmzkCMcsaB4eh8qQ9k4pRY68K5My1+4602rkJLdr0atVG8:FEq6ehBAz9k4piimK+3AJLdr0afd","tlshash":"ee522ed27bb92100f81fe66864929f596319d443c10eeebd3fe0201d9ec82d569b6f9c","first_seen":"2026-03-04T13:15:20.604408Z","last_seen":"2026-03-04T13:34:03.240392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/a0e18f7a-d41b-4153-b38e-16f8b53798cc.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/a0e18f7a-d41b-4153-b38e-16f8b53798cc.js.indir HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:33:49 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10101989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"9f4aae1985465b285d63d0c70a2afdab","sha1":"5ee6287a1a92e28da682d85d5759de37fd966bb1","sha256":"6f1a009211eff9b6aa4bd9c4ebb4c53190b8cd50f8bc0bc7e45156c8ca3fab18","sha512":"a4da8e2e8d262cb5bfa98abdc5b4177f9c7bdb7b966245746bc636c2550dc728b6d50b4b4975eec90172d498d815b7b4c0bafde374e6da0576505ef2abf58859","ssdeep":"12288:VzBe6kEdOxQosOKZzeloY4JfuCdDegHijNICuQT6H9g11odHBOAS2s8WEue79bT7:qsd2QB","tlshash":"35250ce657a89d3f84ef1a07cd356e8d94ba4c72064ee04ef923b58cc47c1874b58b98","first_seen":"2026-03-04T13:15:20.552045Z","last_seen":"2026-03-04T13:34:03.242115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 07:43:26 GMT\r\nexpires: Fri, 26 Feb 2027 07:43:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 539406\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-02T07:11:56.834534Z","times_seen":31242,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":147,"dns":1,"connect":21,"send":0,"wait":22,"receive":39,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/dficoin.png","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /dficoin.png HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:38:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 426448\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":426448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 737 x 737, 8-bit/color RGBA, non-interlaced","md5":"d284286a368edec29560254f017e1823","sha1":"438dbf5fb85de8e6388a260cc081ba8a4be4ee78","sha256":"447bb2cdb4d93f117284470deeae54b028a6fa22c7598b3587b13f8a067fa657","sha512":"8de95b5172933b2203667330d9d43f206ac7e250c85abd3946dbb5d109056bf1f9acad99ca904b0edb74ce72dfacec8272f40728c003f95d7501f6d65789d701","ssdeep":"12288:R5NCdxL3N28G9TebtMz8nuaHrGET51L98spb:n4dJ+eXnua1d78U","tlshash":"9894232a44d6f5f4f4f6a349312582bf80ea8db63766d320be5b70b2017c5ebbb58105","first_seen":"2025-08-16T16:57:28.010214Z","last_seen":"2026-06-27T05:19:56.379824Z","times_seen":10,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:33:26.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:39:38 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 47588\r\ncontent-type: text/html\r\ndate: Wed, 04 Mar 2026 13:33:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.20.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":333254,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30655), with CRLF line terminators","md5":"9b09e701c89c3e4de3c46b779f1984b0","sha1":"1542a096f820b2a82fe4bb38f13408f9f80e3ffd","sha256":"b8303f3aa8f46ee11d1eca850d2f027a1210f9a399bcc9855123219bca254d5f","sha512":"6253e6c85810c92aefcb75641569a8af0476a58ec991d06b2ba915ae25e28364cfe8ce7a4e009c3bbf9dcfcc421c09d6633aa95c9f8cb8e354fd68549fa381f4","ssdeep":"1536:oVs/pbVwsqVofIgvO52aFYPYQf+pc5AX3BmTm8mMs7BbUrgoBKlXSHVvVFGV+XCC:Z/p6Ge3Yk7lXSLFGVlC","tlshash":"456488123cae301b256f039ba1365b4bed8ef6b1ca12559cb1fc62624ff7c54e993214","first_seen":"2026-03-04T13:15:20.597127Z","last_seen":"2026-03-04T13:34:03.245579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1697,"timings":{"blocked":547,"dns":1,"connect":163,"send":0,"wait":435,"receive":164,"ssl":384},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/bip39.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/bip39.js.indir HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/sweetalert2@11","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/sweetalert2@11 HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/frontend-lite.min-1.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/frontend-lite.min-1.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:27 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 1394\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11009)","md5":"60bbc1eacfaee6727bb7099bfb09d9b9","sha1":"8194697e1f796eb2badd12a71cf22a589ce309df","sha256":"e813e69de67d59e5314bca7ffdff4cd1ebf57fce9086147c447d6ec536707bdc","sha512":"ba1e2379b4909c3097a255e30c2648f71a5536eeb5003d14176af75c9462080af17813361aa41665efed876bdba581337902a4d36f5063c718de20c674f3ce2d","ssdeep":"192:IlCUn8qrIuqxIZqJIrqYqP3qYIYIP3IHq8qL3q/I8IL3IuqL3IL+q8IXqFqDqeq4:HpkSy","tlshash":"42325b26bd0b485c53bf51b7908b269c0a09c9cae1611cbdfb60650f41f4e89f3ba627","first_seen":"2024-03-12T09:44:35Z","last_seen":"2026-07-31T16:16:31.957766Z","times_seen":244,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/arrow_1-1024x1024.png","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /arrow_1-1024x1024.png HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/swiper.min.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/swiper.min.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:35:04 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 2558\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14246,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13989)","md5":"a7aeb35b928b0255d71a82f24126ec18","sha1":"12e1fc4dacac32a4870251788365d2d8e2652837","sha256":"dee6aa0506d6a0f5883b437a55f0b99d5c143e977f59e728eda8546b0fce00f1","sha512":"8b278d6fd9754e6ad38a8df61fbdfe177002948a667aa718426464d177e5da3c4a8929b66ba690829ac8b44fd0c79c4cfc43653344f03e08d9640eb96477d7da","ssdeep":"192:Ib9T4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IZMbHZ+Vnh2AVfHfA4XYz","tlshash":"e952e2585340282753274f374bb1cbb9d6b444c14b93896e92c0ee48d7f6cba236f6e9","first_seen":"2023-12-31T22:20:30Z","last_seen":"2026-07-23T05:30:31.924522Z","times_seen":160,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/post-9.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/post-9.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:59 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 3266\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":66432,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"23d29e38b76e0ff556daa2e1bb0b0575","sha1":"ee8dc5acdf554fbf70e4057cdcc733476ae55804","sha256":"ef1d504d68149d16436f0cb1602633dd2cf1af4fa98a56a67fa2cd6491e822d9","sha512":"47fcb3880fc5db50c9935405346feada469533afae8df865e37e757d90f4d6df405f641fcccc5100d268cee1411b444bbaa75dd7ec112c253ff4e4491d58d71a","ssdeep":"192:pZUo5vX0KH0FUwSZBk8z0cZvQA0x+0hpu04vbXD0oBaH0JMixn0gZvx5vJ0KZvxE:nbVzYJ9XEZXJ7veRbaYZenj8l","tlshash":"82537d60be03526c723f911fa123fadc24244ccaea7e26e1f9215623fc7ac5577d1a49","first_seen":"2025-11-27T21:31:34.770422Z","last_seen":"2026-06-27T05:19:56.374611Z","times_seen":7,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 16:45:18 GMT","end":"Sat, 30 May 2026 17:45:14 GMT"},"fingerprint":{"sha1":"EF:8D:ED:C7:B3:46:8A:91:47:71:92:F2:D9:B0:67:EA:C1:FC:5B:89","sha256":"01:CA:DB:EB:79:61:2D:B3:FE:2B:09:FE:44:84:EA:5B:6E:C1:3B:81:A1:0F:8C:9F:DE:2E:16:1E:59:45:06:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.defisavertools.cc/\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d7140d56c9a24b1-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":33,"dns":1,"connect":9,"send":0,"wait":107,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/1-1024x670.png","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /1-1024x670.png HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/styles/modal-12-seed.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /styles/modal-12-seed.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nCookie: gacfxdn1x7=4OTGpsDBUmj1L1g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:36:27 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 4856\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29381,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29381), with no line terminators","md5":"e3e81fcf59ccd09e58a6b2d236358763","sha1":"a0af6da6b9d6cd063a0d15746fa66cdb80e2ce98","sha256":"3457317dd30b5da56a84c62342b66e60acaaa1641b210916f6c23216b558b4cd","sha512":"b47fd79c1639485acad99c9b1fc17f3726b8abba2f9a1a70f30175dcdccb15f3a88f16353e6e44a799952b19652e22184405bef3e3403cdd4a4b91b8fbca62f1","ssdeep":"192:nJMhQ4kbpen//mz0aMaJtIKLZDcxPVBqMZiS0RBacpyG3x71rw6ICoH:naklennMMZKFAxPVBqMInaeNBCCoH","tlshash":"0cd22b91ba48e117f6aa862f55c0f94c75d9e60bfcf30d69e420d0008ed7d6f2a792e4","first_seen":"2024-08-13T22:13:15Z","last_seen":"2026-07-18T17:39:46.891566Z","times_seen":253,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/css.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/css.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:16 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 2327\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":124340,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"c5e91e31fd53da312dcafd617fe94090","sha1":"5c3025c55cbf60f35af16dc395e880e1de1c816a","sha256":"6c4d1f57881007a6108ab1363cb0f82ccb8059b13064d686e67367908b22bd9a","sha512":"5f0b0fe336244f16127f887dba4941c3228713a7ab719849d78a14030841e9fc1c04d7f6f855f74024186ede98e4b3f6ddc0f13c79f460ec384dcfe5b31f6f90","ssdeep":"768:tlXRAgBK4wBmK/rIxrOJTnAxljiBHnUl54LBw4mLWS3OHxVAbT9i3lFUzHUh6P8K:WQZyrMleHmFwfaRs7Gn","tlshash":"7fc3d990042b5000e7876ce223ce7f36fe4ea240b145d938abfd575badcada562b535c","first_seen":"2025-11-27T21:31:34.806035Z","last_seen":"2026-06-27T05:19:56.413457Z","times_seen":7,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/saverlogo-1.png","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /saverlogo-1.png HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:38:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48582\r\ncontent-type: image/png\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":48582,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 673 x 240, 8-bit/color RGBA, non-interlaced","md5":"ab06e4249ba3707f0872fcbaa6d2db55","sha1":"4ecdf0004659baa4966364f9b42843ba8c29c3c4","sha256":"b0a507ce17fe5c91d8d347b56d6a397c96ca0eac3322ce9a9adc4d1c549bb3f5","sha512":"a962e996aaa0a130dce36a1434227aa1dc5ff6a3df2fce170c79021e94643c2f619f046d40ca4b0ad23f546f9bc322666d9bd3da64dca633c270027422ec4b68","ssdeep":"768:WfrKucBmKt3xZcPli9Jiq18oA1Q/ZNJqhIRwsbRBqD6Pmh11fNT+jIjH/+tQ0OpT:Wfuucr3jUliH/yQTJ2w/3qDaurfNTgA3","tlshash":"a023f1970318f31fa7a06164dc146607af0ee2deaafe7199ac98c4d9154f246c176f31","first_seen":"2025-07-01T02:38:32.968808Z","last_seen":"2026-06-27T05:19:56.356526Z","times_seen":12,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/modal-21.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/modal-21.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:48 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2540010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54622), with CRLF line terminators","md5":"98e7e99cf9be662c7e8af9ba870774de","sha1":"4d3ef48db5fa7ebf43a9580bf365a379142f30e1","sha256":"8a8864155c369e5faa295da8367364df2ae22e66dd0d1ff9c00133241cb8b47c","sha512":"598ce40bd42c0350a472a51fcf47afe63a59d741f29f3fee1ccd574dbc3ad211824354c96b72d6f3b34e4b8df38afa76c02918d0b60af32a458d2aaccab4e0f8","ssdeep":"12288:+LCYWrSxKrDm4XHWFijwC+3ZmVLybVlPGcq8Sx3xFgVcxgULp9fo8iAKc3ph:+JWJP2taSqX","tlshash":"b1256cfa519d7dc90ef73d81170479811c6990e36aace198ff48c2a5b0ad1e8ee7cc64","first_seen":"2025-07-31T08:00:08.396512Z","last_seen":"2026-04-26T13:44:59.650917Z","times_seen":13,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/autocomplete.min.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/autocomplete.min.js.indir HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/post-6.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/post-6.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:55 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 334\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1168,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1168), with no line terminators","md5":"1ea8d343cd50fbb64bd6cea0dd19edde","sha1":"2412f4af2ae055a51cae3b51ab9c7eb46c2fe1bc","sha256":"4e49ca4f9dcd32a8114ab3c84fd91d30ffd7c805eb864f62c7efe370776fce59","sha512":"666a43979ca45a6fb812c6d58db6b284e1f9f2440964cb54f180eac8cfa64826383f30864519b439cd7e0c8309eb2f50021fb18086748eeaa742be10a04c2bfb","ssdeep":"","tlshash":"cf2137457a27d036e0bb092f91d3b02c112cd45b625fcadff41d9649f9bfa0a226d643","first_seen":"2023-10-13T12:40:53Z","last_seen":"2026-07-28T05:19:19.724415Z","times_seen":434,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1rpc.io/bnb","fqdn":"1rpc.io","domain":"1rpc.io","tld":"io"},"ip":{"addr":"20.105.41.175","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1rpc.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 03 Mar 2026 01:15:39 GMT","end":"Mon, 01 Jun 2026 01:15:38 GMT"},"fingerprint":{"sha1":"08:EC:EA:C8:BD:B4:2E:DA:4C:A1:5D:BD:94:99:DE:34:43:E8:A6:FD","sha256":"14:BA:5E:86:C9:2C:CA:B9:CA:48:DF:28:7C:D6:F3:59:7E:D9:C0:59:36:85:8E:7D:9D:76:AB:5A:7E:C9:D3:FD"}}},"request":{"raw":"POST /bnb HTTP/1.1\r\nHost: 1rpc.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.defisavertools.cc/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0xd24aeC3254652B0ab565E41A945b491e98Bb5FFC\",\"data\":\"0x73d4a13a\"},\"latest\"],\"id\":1,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nDate: Wed, 04 Mar 2026 13:33:33 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4903,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"de9a73a1a5dae05a90d288aa0fa0f5ee","sha1":"36dae6ae5e5144371d9c123a13fbff7926c28b72","sha256":"ff1536d46de0319a8cb1eff2085d79c0df6983c4b809f5b255e2dfdf9775b6bc","sha512":"ba8288272049f23c9f595a3768604632fb22598fef29ead5a5eb91024acdf9eb2a8d7f74f3a1fa8e63d31efe087d119212e2c420f04ca158d99ef53cd95a49c6","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLC:r5TB2SzAT/7kSRRrze3m","tlshash":"45a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-16T17:05:36.089407Z","last_seen":"2026-06-01T14:49:27.19234Z","times_seen":939,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":493,"receive":32,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp.defisaverprotocol.xyz/cropped-saverlogo-1-192x192.png","fqdn":"dapp.defisaverprotocol.xyz","domain":"defisaverprotocol.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:34.358Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cropped-saverlogo-1-192x192.png HTTP/1.1\r\nHost: dapp.defisaverprotocol.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T07:58:21.484737Z","times_seen":17669411,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/merkletree.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/merkletree.js.indir HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/wallet-connect-v4.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/wallet-connect-v4.js.indir HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_337_0/static/js/widget.9c7ac84d2f899f3c53f0.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/1_337_0/static/js/widget.9c7ac84d2f899f3c53f0.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 21 May 2025 06:38:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"682d74e1-79505\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 1122\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CttsodG6yTWFiQuVKHNjeAsMWYO3iWbnMRS8TD6PlHC0B2WjXXY0Nd2MNufUv%2B3W9hjc8SDfVGdbRcpnJIfORi%2B7dov0w4KHGd33XQ%3D%3D\"}]}\r\ncf-ray: 9d7140dc0f70ea57-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":496901,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e6a24a25cb48e2c8e0855371d0687159","sha1":"1594171b9ee43980df9ff471a9feb384b107bda3","sha256":"a8be1abe7206e0800928d4f4d3ba223223758c783e64611c1138d0fadf5652fe","sha512":"38500e2c4169b526f648c1eed44adb3915a69b1fa12b3a95fa2676d774ae283ea5b3f836238c6c8fa4c3ff272a94a698ccd558f5825121b64af3b5deef835259","ssdeep":"6144:OauENpTehbRx9GYVIp/vBl2Vqm9s4XU+kiXbq/nRyTe1gn6WX:DuENpTehbHcplybs4yeemn6WX","tlshash":"f5b408c871d2b06207f311b6407f1507f33a595a380d8490f624edeab97998ea277fad","first_seen":"2025-05-23T15:04:10.589284Z","last_seen":"2026-03-04T13:34:03.257207Z","times_seen":8,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":87,"dns":15,"connect":10,"send":0,"wait":19,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/autocompleter@9.2.1/autocomplete.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/autocompleter@9.2.1/autocomplete.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2223\r\ncf-ray: 9d7140db9d94a0f0-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 9.2.1\r\nx-jsd-version-type: version\r\netag: W/\"1778-T/efyFDYUSEmqnfjRzQWaoXGxew\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230138-FRA, cache-bma-essb1270062-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1174018\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=w0%2B97HjaLect3DPH08fZB6y5BPQXnA1Idq%2BDevKhSkb7UBM8dzdYGu8rIiE4OuJYa9TYLJPoahDiVoQLzqP9JNSW8Bm4ESJuy6%2F3Uimwu9t3bbA4TL9M5oQ8zvaXUqnDU8c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6008,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5512)","md5":"a86b4d0b78aa81ae3448dd179e63a6a1","sha1":"4ff79fc850d8512126aa77e34734166a85c6c5ec","sha256":"ad210c53d6d3b61146779594a306e0d0f48272ebf884284700613baa05919c74","sha512":"57be2c72415b2964b5d7b971f6445d62c7221d2a74be7e83245355f9990ddc29b3a54ef0e8cf885700796a0710f05ec5b49cb2a8b5cad580a87350250d091953","ssdeep":"96:mhrNV4lDBSEBnEMuZPo6paG9o2UKqB9PxtAdBzF9EvOViuhV33G:mvm45Mui6kB2UxjEdkSk","tlshash":"18c1757e3b0036731ac771e7959fb9421e782563e90e4c00a039ee943e3cee93667995","first_seen":"2024-08-13T22:13:15Z","last_seen":"2026-07-11T04:16:11.466156Z","times_seen":671,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":5,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/arrow_1-1024x1024.png","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /arrow_1-1024x1024.png HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/css2","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:29.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/css2 HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:29 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/styles/modal-21.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /styles/modal-21.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nCookie: gacfxdn1x7=4OTGpsDBUmj1L1g\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:36:33 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2540010,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54622), with CRLF line terminators","md5":"98e7e99cf9be662c7e8af9ba870774de","sha1":"4d3ef48db5fa7ebf43a9580bf365a379142f30e1","sha256":"8a8864155c369e5faa295da8367364df2ae22e66dd0d1ff9c00133241cb8b47c","sha512":"598ce40bd42c0350a472a51fcf47afe63a59d741f29f3fee1ccd574dbc3ad211824354c96b72d6f3b34e4b8df38afa76c02918d0b60af32a458d2aaccab4e0f8","ssdeep":"12288:+LCYWrSxKrDm4XHWFijwC+3ZmVLybVlPGcq8Sx3xFgVcxgULp9fo8iAKc3ph:+JWJP2taSqX","tlshash":"b1256cfa519d7dc90ef73d81170479811c6990e36aace198ff48c2a5b0ad1e8ee7cc64","first_seen":"2025-07-31T08:00:08.396512Z","last_seen":"2026-04-26T13:44:59.650917Z","times_seen":13,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/scripts/bip39.js","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /scripts/bip39.js HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nCookie: gacfxdn1x7=4OTGpsDBUmj1L1g\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:35:57 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 82563\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":259848,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20277)","md5":"c7b7bb793032915bce394ed7eac7320b","sha1":"64a4b3e4ba4203d2b76c58584e7f4b6e90b6db23","sha256":"fa823642c5a20c5223f7563f366ad5562e7c6054022f0535fe1630dc1b7cc28b","sha512":"abe02615a114c14440a5469cefc8a92e3e596b03f4cb3937ad2a0d9249f47fcc87bcced49449cf2090e051a279e9c3aac7fbf0099e9082365b6074bc13ef2a4c","ssdeep":"6144:vlWGL6BSn5NGCk3zi0mCw8DNU2HZP48FT0:tjkSnv1k20mCwSnHN48FT0","tlshash":"e844830909984fbe8eed21e094e67ce0b0384e06d5993cbf795ea1565d16bdef0c278c","first_seen":"2026-03-04T13:15:20.586825Z","last_seen":"2026-03-04T13:34:03.25964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/frontend-lite.min.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/frontend-lite.min.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:33 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 12968\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":118630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"06be0b21dc152604b174d6ff7688d568","sha1":"d8cb5bcc06a447442730f351521e472ca53310e6","sha256":"c400284ab75d0086e3cd071b699c581468efa2459272226894ebe56ef4094404","sha512":"4e487166c6f87cbb568fa98d1e45fbe739ef15837ab18cf02473de0a9003de098856026e640354831f5a636fdd107562d37c0193bcaef43ce8ca3d2db0ecee7f","ssdeep":"768:7GnP5Kb3tgnl6T5sZQ8tQfJjCqn/0ginSla6T8L47YwbuXh7+:7GTtQxWqn/snSla6T8L47YwbuXhS","tlshash":"1ac353923d07622a662f5e3f4a87769c53a445c1da437ad6f442c413d2feee1372a823","first_seen":"2024-03-26T14:00:23Z","last_seen":"2026-07-28T09:14:45.931786Z","times_seen":1130,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/accent.png","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/accent.png HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/index_files/post-9.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/crypto-js.min.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/crypto-js.min.js.indir HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:33:56 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 22222\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-02T04:52:18.919993Z","times_seen":31817,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/ethers.umd.min.js.indir","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/ethers.umd.min.js.indir HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:01 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-02T04:01:58.308798Z","times_seen":8484,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":562,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/global.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/global.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:38 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 2689\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":40821,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15910)","md5":"237fd1c26e91eb1e202379af615d61bd","sha1":"f6e0aff048843523ba983bd8839729eadc80800f","sha256":"ca74d842e703dce637cb7851b491cecf165473e3311f638809284442a1125c45","sha512":"e482c5ff83066e5ddcabeeebe571bdcdfb36178826724a00ff96f2b04f4aef27ff1534cbd47f1c6edca16f1cb5f92db3f4a35bf7c1c4892a10bb43339b40dc0d","ssdeep":"192:CVFCJW/CB7J7PypJtwcHWRkXNW7t7Dd5qMCp6It0eyBrrYjBcD0NS6H0S6MSH6Hv:QqRDrWEx7F2OUT","tlshash":"9803e6887827d126f977046f758ff47c181ca4de5c4bcae7f448860689fbf2aa368614","first_seen":"2024-08-20T02:28:14.778832Z","last_seen":"2026-06-27T05:19:56.372335Z","times_seen":5,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:32.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/index_files/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:32 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"63.32.237.157","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://app.defisavertools.cc/\r\nOrigin: https://app.defisavertools.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T07:58:21.484737Z","times_seen":17669411,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":78,"connect":36,"send":0,"wait":40,"receive":0,"ssl":309},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/1-1024x670.png","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /1-1024x670.png HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-02T06:19:40.880859Z","times_seen":146606,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:28.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Mar 2026 13:33:28 GMT\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28292,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"03fc5ce717184382900cd5b4f9eae937","sha1":"32f2cf198aba6041ca94af2b5832fd06db8ad2d5","sha256":"bebcfa90ed51868ba0bc68205b8345b3e0a2faaed4a7a13edc225d27a716b497","sha512":"c964c7e8ed4556e0e6958b856974eb471dfc937228e8665658fa8a199b98b69a39dd9074f472e7973ce2304a95efd1f08c593c7be35b5ef1472f654162e06bf2","ssdeep":"384:vtfcHjg8ciI0QOkTltULv1qY49GnDu6SqY42kcCkhkx+kRkg1kUqY4nkbk3kk9fJ:OFJNG4CiFyg2UfIUk+H00YNRYj78","tlshash":"38c22c91041b5444ab835ce233cf7e31ee0fa2617080d0b9abfd5b9baddad66527835c","first_seen":"2026-02-23T09:25:27.181803Z","last_seen":"2026-07-12T21:10:39.300754Z","times_seen":39,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":158,"dns":1,"connect":15,"send":0,"wait":33,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.defisavertools.cc/index_files/bdt-uikit.css","fqdn":"app.defisavertools.cc","domain":"defisavertools.cc","tld":"cc"},"ip":{"addr":"172.93.121.21","port":443,"asn":393960,"as":"HOST4GEEKS-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:27.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.defisavertools.cc","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Jan 2026 22:34:38 GMT","end":"Tue, 07 Apr 2026 22:34:37 GMT"},"fingerprint":{"sha1":"E6:C0:47:C9:81:D5:1F:7F:88:69:FB:05:21:10:06:54:16:57:CF:BF","sha256":"6E:BE:3A:88:83:BA:CC:D0:B0:99:96:0C:C0:51:47:AB:49:06:9B:A8:1F:CB:17:C9:E2:5D:4E:AA:5D:8A:9D:CB"}}},"request":{"raw":"GET /index_files/bdt-uikit.css HTTP/1.1\r\nHost: app.defisavertools.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 07 Sep 2025 19:34:11 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 14304\r\ncontent-type: text/css\r\ndate: Wed, 04 Mar 2026 13:33:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":92029,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"78393f047a56dccc2ea660c9530fff90","sha1":"3a0ec33b1df793bdcad735ceeebe615b3fd57328","sha256":"4ece83ce0953c7c3484ddb76944a9dfe38ff91392adc702e532dacfd7f4dc6f5","sha512":"fbf246f823350717eb0b197e2cc133f0784d6c0ac0e698cdb5bc2a993e1b84ac343f1f0762213ceeacf4d9ea80363c2c95da42734a097ca2ee74ddcdcb817c79","ssdeep":"768:9eFPkcRmDUqhEQArFHh1bY5btK5Y1bpEQADEInjBemtICahIbIMIXnGIvHerUIHO:sPkcRmDUfbY5sGbmeOiiQ","tlshash":"e393a2955d5030acf16b8515d7e0f668f3298c82f7230beab5d3a76687c7ad20633a1c","first_seen":"2026-03-04T13:15:20.556745Z","last_seen":"2026-03-04T13:34:03.265822Z","times_seen":2,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"app.defisavertools.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.defisavertools.cc/","date":"2026-03-04T13:33:33.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.defisavertools.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:33:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21407\r\ncf-ray: 9d7140dbff95a0f0-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.26.21\r\nx-jsd-version-type: version\r\netag: W/\"1391c-tJx+5eoTuohRvXa93vZPciE1SGQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220035-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 9966\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kHhWTzZ8UDHez4YZeXHs%2By6xGliWdruK4ocjZi4oKZmIs6YJ9xrLaxpQjvg%2B5vN7JaiH0revwvyXcLkJY6RQkxmhlJBtvLLYs%2FIQSE7oJmQlsqOL%2F1HvwJBmMSegZKE1sBM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80156,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49168)","md5":"8e6c16d185c20909441fa19a76449ded","sha1":"b49c7ee5ea13ba8851bd76bddef64f7221354864","sha256":"0d9d16e58a96e428a0ba2fe1f17fff6dd23c11287390322322b80b2953881c2b","sha512":"9068e116d5c32926c61d93b6f2df979de3efb847acffd6c167dad7de644e38ce754b2a53953d0ef6d93ba16b75c8d169a7e9b0c0ff0ed3e05439032d5024b5f6","ssdeep":"1536:9wk6ey/PIZAo+DUC55luQDbJZ8VUxzIYbRd:ce2InCluQDbn8EIY/","tlshash":"4d73f8916a00f03776ab45ae75d1e2047af99405fcb34854f42cc8804fe7d4f2ab7aba","first_seen":"2026-03-01T04:44:58.152054Z","last_seen":"2026-04-29T21:25:54.246019Z","times_seen":311,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":15,"receive":1,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}