{"report_id":"3c63d5e2-f7e2-4c5d-8f55-140da7959264","version":6,"status":"done","tags":[],"date":"2025-08-15T03:30:15Z","url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"title":"EVM Resolve"},"submit":{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-19T03:30:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T03:29:53Z","timestamp":1755228593,"ip_dst":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":48426,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-08-15T03:29:53.363677+0000\",\"flow_id\":2246438246510781,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":48426,\"dest_ip\":\"172.66.47.153\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"oneconnectwebdapps.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3492,\"start\":\"2025-08-15T03:29:53.356541+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"oneconnectwebdapps.pages.dev","ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-08-15T03:30:15.512663Z","last_seen":"2025-08-15T03:30:15.512663Z","alert_count":17,"request_count":17,"received_data":1061216,"sent_data":8227,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Font API","description":"Google Font API is a web service that supports open-source font files that can be used on your web designs.","website":"https://google.com/fonts","common_platform_enumeration":"","icon":"Google Font API.svg","categories":["Font scripts"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"uploads-ssl.webflow.com","ip":{"addr":"104.18.34.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-03-31","domain_rank":229417,"first_seen":"2018-01-28T08:50:30Z","last_seen":"2025-08-09T15:05:40.005354Z","alert_count":0,"request_count":4,"received_data":341282,"sent_data":2399,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"verify.walletconnect.com","ip":{"addr":"104.18.26.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":541794,"first_seen":"2023-01-25T23:45:52Z","last_seen":"2025-08-14T11:58:55.320784Z","alert_count":0,"request_count":1,"received_data":1131,"sent_data":571,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-15T03:29:53Z","timestamp":1755228593,"ip_dst":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.17","port":48426,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-08-15T03:29:53.363677+0000\",\"flow_id\":2246438246510781,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":48426,\"dest_ip\":\"172.66.47.153\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"oneconnectwebdapps.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3492,\"start\":\"2025-08-15T03:29:53.356541+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bb8bf33ae3fa1fbffdbce5791c6edc5","sha1":"6dd36dae3a4831b14cab162b12ab54d27b346690","sha256":"9732fc42b66ec2d8cd84ddd860af4eb997ee152a5fd35145e467919f9c9abb79","sha512":"808bc1d5118aff92e167f87b7d89d6928d073ecb1b7397fec62f38f2527d2f2ccf4458ddfee30b1674a4d59ca8389758ebaa7f36b7889449faea73eeb065fb8b","ssdeep":"","tlshash":"fad097ab39b0c430a3ec030f32f7e35835323460aa00a68b41c4cc1baa20f8304a1e68","size":256,"data":"","first_seen":"2025-06-13T15:16:15.860786Z","last_seen":"2026-06-21T08:32:19.406257Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"911d3ac831abe22b00aa9b87f8ed8c04","sha1":"a4ece90f853c76ebf3299c3eb4b72862f736404c","sha256":"df8a05dd16b1a7c1dde834745691321fc0d781afbd9296e3ce4637182b919b0b","sha512":"31e27bc1821d7d4399127fbc912f1f8ea9b0e21d9a5c741f20eff1d25d9e754ea0f77f9c4ff9d843d25f6c8f7d374439738e9721b326db089e7e5557e823c6d3","ssdeep":"","tlshash":"9df0246560b52771176ba22f534be542327350cb6068e848ba4d8eac0fd0a8544feac7","size":623,"data":"","first_seen":"2025-06-13T15:16:15.858705Z","last_seen":"2026-04-27T07:19:12.409248Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5de9e1474f7bec7cac65d78c9b86b260","sha1":"aa1a825ad8f644fac625f7301a8c960bc3c10cae","sha256":"06081f6d3741e2e788ab01e28c6d0eda3a82d70680612181691fdcc1e09af41c","sha512":"3012a3baed63dfaffb790f08035618ded4889e92c93bf8435d51c117d74af364e28decb998a77c9d902f737e65c50d3e446da844005cd6ce0dc840a35d4e73a9","ssdeep":"","tlshash":"e921ee2f2aa31034d66b601913bfe7583d3490136102d8c1779ddd899f10d2654beeee","size":1383,"data":"","first_seen":"2025-06-13T15:16:15.85976Z","last_seen":"2026-05-02T12:14:51.68621Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verify.walletconnect.com/9a504add1206ecb902aee52264862b81","fqdn":"verify.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.18.26.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"73eb8ac01d4a5992b5aba461b24d5486","sha1":"1b534f65c11423317ece8bee2bf88f38132db758","sha256":"35b976f28bb6905f398802456eb766779981243bb9037ecaa486b315306a3c25","sha512":"920ae08229d8970500022568bb41a3a62c132c5900fed1938fde012da4d9474e3175d7c92d8a839cb2c1c7d45412568c27fb2d8b453cf80c7ee8517dc096b395","ssdeep":"","tlshash":"4ef00eea0f04ae98140ad36232ad3e1021798489cc838410082924c5ea0dbcaf21b7cf","size":479,"data":"","first_seen":"2025-08-15T03:30:17.180895Z","last_seen":"2025-08-15T03:30:17.180895Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c42e1462a8d144f85ec79edc9056db6","sha1":"66588b76159d1e92b1a4b2d1c026b96caaa2d961","sha256":"1cb462aed8ffbf7f561781c9069f364ff365b60bc4173bd6c225c23e92e4a9a1","sha512":"bf8ea12b8f040b42412416ee953d48d0364e664776c357fae19bb023bb7e75708ebc0ea0f993589fea65a3ad0ba2f531b6a689c965d6dab0caffd7a0461af52d","ssdeep":"","tlshash":"1de0c2280a5349fd21bb3194c71ff240b8a400735045d801fd1ca5ca4f8091434aebc9","size":317,"data":"","first_seen":"2025-06-13T15:16:15.861925Z","last_seen":"2026-05-07T17:49:51.932469Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66920a284b2b974aaa8d3a98a938945f","sha1":"016120159372f9834e7e2b7c6e9387b05ff5b7a8","sha256":"38218329ab076a4107ac710637bba8af43ac71665ad7d52cc80164fce03a606e","sha512":"0ff5304b9276ee3dd4143306d2118adb1b398f67605cd87f7e89597519bc508cffe8af8c80bd4bd27d1f572681b093cb144062d5e0a967c0ea9e1733bc39e4c8","ssdeep":"","tlshash":"87f02470cf4c2df0641b70a34a3de8503ab908839482e61254950c5de787828872be36","size":480,"data":"","first_seen":"2025-06-13T15:16:15.863067Z","last_seen":"2026-04-27T07:19:12.421727Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/04138aeb-6cb7-46a8-9c02-5d69c4050c8f.js","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /04138aeb-6cb7-46a8-9c02-5d69c4050c8f.js HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nlink: \u003cfonts.googleapis.com/index.html\u003e; rel=\"preconnect \"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g1YsFfZHdlg3MiWDwYe0taJQdLp4Em5KSyR0xoGt0YH2gWNZfFHkjN%2B4N6m4s0c4ZjijftKuGjSGgeYibWOrfYLGKpglUG6B9kJ91eMkIZQcxBz%2BfdgbNN3VFSpal9CQ6k%2FFA4BfybwnlGm89IpP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c36bdd35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3955\u0026min_rtt=1934\u0026rtt_var=1936\u0026sent=24\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=14530\u0026recv_bytes=2189\u0026delivery_rate=3941962\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=215\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T22:07:09.704674Z","times_seen":17750852,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/04138aeb-6cb7-46a8-9c02-5d69c4050c8f.js","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /04138aeb-6cb7-46a8-9c02-5d69c4050c8f.js HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nlink: \u003cfonts.googleapis.com/index.html\u003e; rel=\"preconnect \"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TVT4jPAbWQrI0gxOb70n%2FPzG8PT6ckScJBOizvOJmd485CEZdDN33qC9oNN5RX23hVgJT7odZt3AxGNBjmmeXbYZ0bdUCwPyaCdrsUHSq%2F5uXbf2YbgXpJTIYS7vN3HCtfuy5ZW%2BaXCShUSwZezl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c373e055690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1816\u0026min_rtt=562\u0026rtt_var=766\u0026sent=115\u0026recv=28\u0026lost=0\u0026retrans=0\u0026sent_bytes=102924\u0026recv_bytes=3101\u0026delivery_rate=13479576\u0026cwnd=15600\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=277\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T22:07:09.704674Z","times_seen":17750852,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/evm/bg.png","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /evm/bg.png HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/evm/flow.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 64231\r\ncf-ray: 96f59c37de4d5690-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3745ba3aef5ce3f5c8d055cfe206832b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=l5z4PCuuxr%2BY5OY7RGU5kVxm1m977BWpawloerqSobHeHUUpQionZg%2FfI2lLKXlhhdqRTLKQdu4xvP8Bma88heyhrxBmdMJuDS0QTlV5RnBgYHwHrAQBDJ72r%2Bz1N2bjosdZ0bOkm7CH4cDhtq91\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1899\u0026min_rtt=562\u0026rtt_var=1496\u0026sent=166\u0026recv=35\u0026lost=0\u0026retrans=0\u0026sent_bytes=154608\u0026recv_bytes=3995\u0026delivery_rate=1906322\u0026cwnd=31200\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=411\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 440, 8-bit/color RGBA, non-interlaced","md5":"d47310f4ce0557abbbd79fbd87a11b62","sha1":"b751f831bba21094e72d3170223bb3cbc0efcca3","sha256":"84202435e318482a50adab11ea93bed336612c62d59ccc8515898a6e4921d780","sha512":"9ad71a3b47bbedb212c0f9ef54c1a7e00772ab26709ad21f992646406f51feb6f75f9f1ae040e00ce5634f9dbd520c97de20d0f8240879c7a321921a6295a033","ssdeep":"1536:33w17J8DjU7YveueCikiDIv4taFiiBZsRxEYjWr0LLLhti:fDg7+FGxMv2Cir3EYj40LLXi","tlshash":"6c53028f2f9fa162cc2fd2cfc46d06a90670e95051efaa72c4e7c4c40902959d7b44eb","first_seen":"2025-06-07T00:00:26.673058Z","last_seen":"2026-07-28T17:31:55.438214Z","times_seen":40,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/evm/header.png","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:54.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /evm/header.png HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 8701\r\ncf-ray: 96f59c38bee75690-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e4b35d2357e075ab5175bbccbafd9746\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SL%2FgmkxkNs%2F%2F98S4Ig8G0yZ92CcxSa8W1KUgmF4m7PH%2Fkn8H1l6IcnKKlkPo6b%2BfAAbMdrI6WRuMWcYTLGTISMJhcq5gEySJG1UrzHR1OW0zmnJYQRN3XM3drsTywg7kdqQp3lKOztUbO8NwB8qN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2239\u0026min_rtt=562\u0026rtt_var=1066\u0026sent=229\u0026recv=43\u0026lost=0\u0026retrans=0\u0026sent_bytes=221846\u0026recv_bytes=6268\u0026delivery_rate=7154166\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=541\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8701,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 141 x 40, 8-bit/color RGBA, non-interlaced","md5":"92649f46302e37ef3d33110cf1bd5310","sha1":"58e1f14ae262c52bb7046cb5f2cba1d1cf8da48c","sha256":"9f5ec8aa9847bc1bc07b0fd94e3028978f4920c1a32c8a930426b653df16c460","sha512":"ab3dbe39e0dffd284e58d5a0373c257ae00a7e536b3aecc781a9854a05806dceb68f0da0fdc9bd7f981977b1b65b007d912306148cf9ae2cd9bcc34a5777966c","ssdeep":"192:GwIILE6ZTm0l4n7xOs1j/oLyh0qYZ/etbDHPLeBqk:GwISE6802n31Lmyh0p/etHHPiR","tlshash":"98029e4924e621e2e6c9d203cdd03589c5231bd1cac7a2da99f38963f95c2518f752cb","first_seen":"2025-06-07T00:00:26.67715Z","last_seen":"2026-07-28T17:31:55.434053Z","times_seen":40,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/evm/images/636a3ef2888e1472a2cc8d71_logo-reddit.svg","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:54.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /evm/images/636a3ef2888e1472a2cc8d71_logo-reddit.svg HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"0a76dd77ebcf7a0d903a2bdc622d4c61\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ln68waqroxyI2ytBS2eb31jMemtwRb8wqBHidzIL8t8h2p4oJP55ExP4OqH1tEAMhrUBUChRHX28tR5DJoddrHoKu568d1qsVjNnfHYsq%2FQWko9WdM68WgbljWUk8BtmE%2B%2BWD5z%2BBkGMRbo4Ktyd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c38beeb5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1945\u0026min_rtt=562\u0026rtt_var=929\u0026sent=245\u0026recv=46\u0026lost=0\u0026retrans=0\u0026sent_bytes=238159\u0026recv_bytes=6404\u0026delivery_rate=7154166\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=547\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5956,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76818505d9f26b5322cefbb5f7776130","sha1":"f5993de3f0de04bc0b83a36fc6b0ce8e78f98be9","sha256":"dfc0a216bf46de9b0edaf03d2e361c36775f7358d1f2b352c5f8e1997f8006c0","sha512":"d8630bae29f349ac39f305dc6d3c0daa2979ed1d41f65986f40ee6c4374e702e81570a8ce1248fc42861b657e6d8687eb0ccd0e5ff4b93623f9d2766e06fc4b5","ssdeep":"96:deDXPOOkmdilVfTR5iKrBw93fX4BjM4/RGWNJiZ:uX2/H7R5kJ4/w+2","tlshash":"8bc174d6378bb7d0e105e3f9c62191eab69630fd6b51cbe982fa0f90e65151c4c948c1","first_seen":"2025-06-13T15:16:15.850648Z","last_seen":"2026-07-28T17:31:55.436792Z","times_seen":37,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/evm/images/636a3ef2888e141bc1cc8d74_logo-coinmarketcap.svg","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:54.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /evm/images/636a3ef2888e141bc1cc8d74_logo-coinmarketcap.svg HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"404da67d370e8cf12078e851d26f46fc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uwD11h%2FPwvo4pmMuhRk%2FxcNzlKYdc5Dam%2FH58cFJfsgVE2OYRjnr5jXR0dYJG3GBA4jzY%2FN9YVc%2FuRClNIjzKwY4uD0R2Ku7pwfoFbqrXF2iUoTDErIgSROYfAmOoYOCQNEP0S%2Baab3nbttr1iza\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c38beed5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2156\u0026min_rtt=562\u0026rtt_var=965\u0026sent=241\u0026recv=44\u0026lost=0\u0026retrans=0\u0026sent_bytes=234080\u0026recv_bytes=6314\u0026delivery_rate=7154166\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=544\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9489,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98a9fc529f6e9ac4a2adbf381a68ad7f","sha1":"80d70e862007daf9791b771bb40eb190d819e559","sha256":"c3e95ec34a818d9a5cb419bea105458ec0f2a13b904e80135151f1c7e2bf35a7","sha512":"d156f4780d6e8d69a746df1560e0b07d69484ea4ce4f484a487a6e51183606f6ef8b152234ffd12deaf0af8fdea0da9d6680ae7e19b724ae516dbd252bd69355","ssdeep":"192:w6R0H/gHJA9tSvlP9IMqJahwYAy84UiKqKShNinP2kQ11CwDq4CdJMeMv+gHXLA/:wX/FTMZ9AJAwYAy84UiKqKShNinekQ1e","tlshash":"2012cd8f7bd5b3a2ec0293d49a6160d4b7135079abb7cf2ac3db9f62ea5205c6c14c50","first_seen":"2025-06-13T15:16:15.851678Z","last_seen":"2026-07-28T17:31:55.443248Z","times_seen":37,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-15T03:29:53.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=r3nelu%2B7OZD2MPGaCZ4LFyu7KvxvoiT%2BYwmht18pIxNahRDCX98XWiCFPv0Pckjd9GYFavo4zQolxXwrQkWuZmSXDlwn4ZuvjLF%2BwDYoQyEzFumMk4Qb0U1Y8%2FFtN5aAwuxrfD9fPsTmxPrVVoB1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c34a82356c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6082\u0026min_rtt=386\u0026rtt_var=11369\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3247\u0026recv_bytes=1134\u0026delivery_rate=7476764\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=b3509d1d615ee8be\u0026ts=175\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Font API","description":"Google Font API is a web service that supports open-source font files that can be used on your web designs.","website":"https://google.com/fonts","common_platform_enumeration":"","icon":"Google Font API.svg","categories":["Font scripts"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":408460,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11170)","md5":"a70ce37da580d1dbcd2d6895acac0e3a","sha1":"8c35efee214ed1a215dac1d769f5e38dad5c6e31","sha256":"ac8c04c85f16132fdc7f80aaf79ec88a280efd461fc635d2196a84f9e3f593f1","sha512":"ddb2a3cb5c2108bd6a00fa64f4018e062d8de41fbf0d75c8187fd6a166782ab1e72a8a49a2c1f868532eb50921088aea4a2f5747098fcd972a0084cec9f3869f","ssdeep":"768:CtDAu6Ga//HVID2760DgH1f8ZfReTjU/EJPJWbzy1gAFfK0XLKeCYX6kL9G/twRb:C5aFY15z8xbqs4A0KeQVI+x/DS9XKqf","tlshash":"1c948571465a6f2e110df7b184f82ebe561900474c66bbb4b7ac86ee9b3db17c4c4238","first_seen":"2025-08-12T07:32:35.699996Z","last_seen":"2026-06-08T10:33:23.670266Z","times_seen":14,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":50,"dns":30,"connect":1,"send":0,"wait":157,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uploads-ssl.webflow.com/636a3ef2888e14e784cc8d53/636a3ef2888e146a64cc8d6c_Gordita-Regular.otf","fqdn":"uploads-ssl.webflow.com","domain":"webflow.com","tld":"com"},"ip":{"addr":"104.18.34.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploads-ssl.webflow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 12:26:02 GMT","end":"Thu, 16 Oct 2025 13:25:54 GMT"},"fingerprint":{"sha1":"9A:9B:13:41:01:2D:AE:B8:5A:F6:C6:4D:C9:9B:34:CF:D5:47:45:F8","sha256":"13:FE:BA:69:F3:A1:BF:FB:F8:0C:7A:D5:DB:3C:77:58:23:EC:7C:CA:8B:49:5D:62:20:14:C3:AE:7D:3A:7C:27"}}},"request":{"raw":"GET /636a3ef2888e14e784cc8d53/636a3ef2888e146a64cc8d6c_Gordita-Regular.otf HTTP/1.1\r\nHost: uploads-ssl.webflow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nOrigin: https://oneconnectwebdapps.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: application/x-font-otf\r\ncontent-length: 123236\r\nx-amz-id-2: glbvBJgjuWRZMSPZrFoLXXa40vWP3jLxQWO6vP6BCNO8RURr6qFtd4hoA7deiegQCBBzYYrWPYw+yKeTMrAydYl51kTW4/fm\r\nx-amz-request-id: BH1AKV15Y7AHNMJN\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 08 Nov 2022 11:35:15 GMT\r\netag: \"72b61656717612336e46e12dbf5e2e1f\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: 0Bm0DJKiHkt7On66XsUieuGrut9s8kpO\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 96f59c386f3a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":123236,"size_decoded":0,"mime_type":"application/x-font-otf","magic":"OpenType font data","md5":"72b61656717612336e46e12dbf5e2e1f","sha1":"4180ceaaf5b38e3c554a33c3fee07a7b421e1b8c","sha256":"6e755ce2892d3ebfa772786fdd9ae8182cdc09a05302a4b75f66dabe2ae66440","sha512":"59e7d61ea879684661ec221c5440e857567c437057a994f6af32ecb3c181aab3816b086251674f61cae6f2c86bff34e39617a3a81cfeb4c6c947c5cd5a07cfb4","ssdeep":"3072:jWF9At8dCF9xUdrgPSSDJ9SOE74r+7kx9i3B27y:O9A2O96iay7SOEWIOY3B27y","tlshash":"16c3cf5933858712ea81ef374fa7d27532107d0abc60e64ff6bbe22579a35048cdb285","first_seen":"2023-07-01T21:16:30Z","last_seen":"2026-07-28T17:31:55.442698Z","times_seen":52,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":67,"dns":2,"connect":10,"send":0,"wait":216,"receive":29,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploads-ssl.webflow.com/636a3ef2888e14e784cc8d53/636a3ef2888e14f1dfcc8d6a_Gordita-Medium.otf","fqdn":"uploads-ssl.webflow.com","domain":"webflow.com","tld":"com"},"ip":{"addr":"104.18.34.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploads-ssl.webflow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 12:26:02 GMT","end":"Thu, 16 Oct 2025 13:25:54 GMT"},"fingerprint":{"sha1":"9A:9B:13:41:01:2D:AE:B8:5A:F6:C6:4D:C9:9B:34:CF:D5:47:45:F8","sha256":"13:FE:BA:69:F3:A1:BF:FB:F8:0C:7A:D5:DB:3C:77:58:23:EC:7C:CA:8B:49:5D:62:20:14:C3:AE:7D:3A:7C:27"}}},"request":{"raw":"GET /636a3ef2888e14e784cc8d53/636a3ef2888e14f1dfcc8d6a_Gordita-Medium.otf HTTP/1.1\r\nHost: uploads-ssl.webflow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nOrigin: https://oneconnectwebdapps.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: application/x-font-otf\r\ncontent-length: 123676\r\nx-amz-id-2: 6TiJW9Kx1UsEHiFeZF7k/FfEVSTH33/sGyvbG7Mhlxf7CI5pVURTh5JQCN6ByAc7/FHsoMu9gyN1suQeVBtKRkVnM6YgVo9hK81aCgT5QFk=\r\nx-amz-request-id: 71WXF82M3YQZTNDP\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 08 Nov 2022 11:35:15 GMT\r\netag: \"5ef002714f0493e3e6d7c2afff9c826a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: _5kiHfM4c59.LohVtTfuvMgHtbJF0cQs\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 96f59c386f3856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":123676,"size_decoded":0,"mime_type":"application/x-font-otf","magic":"OpenType font data","md5":"5ef002714f0493e3e6d7c2afff9c826a","sha1":"08ddd7a722c14476412a693c8e76254102db8fcd","sha256":"5c06ac5ba3ed7514bf4a16e765cb1bae68e6215f7ae11230fd8e55dc94129bb1","sha512":"cd1ebf125fd1377e402ba66c551c84d52ba792ad6993102d5d224b22b10d1c30734f8211283e0e867778b3891b34a4ad4854254538ad2d12c84e1505039b7990","ssdeep":"3072:hNPPPVERZh4k6dMjZQL2OKvvrgAJZTW/GoONyf1KmBIEO:fZgooUAPTgJTK5n","tlshash":"14c3c01533148711dac1fe339fa7e2b5b3217907ad20aa8ff69be5647ce39189c5b201","first_seen":"2023-07-01T21:16:30Z","last_seen":"2026-07-28T17:31:55.439882Z","times_seen":55,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":15,"dns":21,"connect":1,"send":0,"wait":73,"receive":7,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/evm/636a3ef2888e146c77cc8d7a_icon-box-pomecosystem.svg","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:54.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /evm/636a3ef2888e146c77cc8d7a_icon-box-pomecosystem.svg HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"2f29329e0df0fc34f78a2a0160abc1a3\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7kyNgLbu8ICkrJBl6b8N6qnqyQLKt6V1F7J9jigfS7MTS2YpQGpyNIeshqpp%2Bu2FwmPiDeRVvN39XG9Pm6oDKmPJ4UvO6rxEvkrnE5qFfrSVkXron19PI6C28S4Ge8Y0jkOs2LhkqsUD%2FIv0cIgl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c38bee95690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2239\u0026min_rtt=562\u0026rtt_var=1066\u0026sent=238\u0026recv=43\u0026lost=0\u0026retrans=0\u0026sent_bytes=231504\u0026recv_bytes=6268\u0026delivery_rate=7154166\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=542\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3914,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f34509f064115cc07ddd78ce6c45c2d","sha1":"2b03d3df4759ad9e9d76810b02af22e5b0803bd4","sha256":"ca89b4624df66e740ea80070de78ecbfbe2885ec48239930c4301640224522e5","sha512":"42fc741ca07fae126bfc694e04a54248855fa017c3d0d2b15af7d65837a257efecf3914f6f532461085ff1890cd211ed844c48672999676cec613d71bbdf26b2","ssdeep":"","tlshash":"9d818445773a938cf444b2fc8257e839325619c8a5b2c4c9efe23e67e86115e0c764e3","first_seen":"2025-06-13T15:16:15.841742Z","last_seen":"2026-07-28T17:31:55.43628Z","times_seen":37,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/evm/icon.png","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:54.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /evm/icon.png HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2967\r\ncf-ray: 96f59c39ff6a5690-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0b80d09dd89649455b95bdcde5ecfeb4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eWxu53g5XctRIdm0hUFPMmwgEKJpqcX3ZQkiu49qjLbzzN6dInOypPcgAx0EdFLI7NJk6ndwx9luFZbNT%2FRvgIZHbzm8cI0tfzZNHWfWtggVKAOX9M9GQaRBF10LJoiSRKJqcUWE8al3yhWR5D4m\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1592\u0026min_rtt=562\u0026rtt_var=927\u0026sent=261\u0026recv=51\u0026lost=0\u0026retrans=0\u0026sent_bytes=250296\u0026recv_bytes=7136\u0026delivery_rate=7154166\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=745\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2967,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"fa92ee0042d7964cc9e7779788153ba7","sha1":"6c8deb92b7d3cd85b5d784d27909d6066cb8953e","sha256":"93ca37ae2840f5255f625218eb0a6e823074f2117924da871f310246573a08c4","sha512":"233b5a096dd39d4087743a15fca367cea7b8496c280891b5924dad2c2a7e43b63d395d56c90249b756188726d432b01773fd889d451f057989bdec78bc10a79b","ssdeep":"","tlshash":"7051a5603ce312d2548677465de968a0ce634267e8c79ec4b8eedd5b0f824924f5b193","first_seen":"2025-06-07T00:00:26.670353Z","last_seen":"2026-07-28T17:31:55.433508Z","times_seen":38,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/global-uploads.webflow.com/636a3ef2888e14e784cc8d53/636a3ef2888e145f21cc8da7_gradient-green.html","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /global-uploads.webflow.com/636a3ef2888e14e784cc8d53/636a3ef2888e145f21cc8da7_gradient-green.html HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/evm/flow.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nlink: \u003cfonts.googleapis.com/index.html\u003e; rel=\"preconnect \"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4d1YezHBNkqLMb2N84jQHDURkd6R%2FfD1L1dGVNK4Y%2F8WK%2FYTUIC4JSxPV8ykC5HzLL0b7KbLgLYsf5yZvBtKjaSbSiQyqt8IR0YONT9NKIeeJG8Bx46PQCWA1fsgJ5uZojDSmDMvhCHpl65IVhWP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c37de4f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1532\u0026min_rtt=562\u0026rtt_var=775\u0026sent=142\u0026recv=33\u0026lost=0\u0026retrans=0\u0026sent_bytes=128807\u0026recv_bytes=3907\u0026delivery_rate=15587827\u0026cwnd=15600\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=380\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408460,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (11170)","md5":"a70ce37da580d1dbcd2d6895acac0e3a","sha1":"8c35efee214ed1a215dac1d769f5e38dad5c6e31","sha256":"ac8c04c85f16132fdc7f80aaf79ec88a280efd461fc635d2196a84f9e3f593f1","sha512":"ddb2a3cb5c2108bd6a00fa64f4018e062d8de41fbf0d75c8187fd6a166782ab1e72a8a49a2c1f868532eb50921088aea4a2f5747098fcd972a0084cec9f3869f","ssdeep":"768:CtDAu6Ga//HVID2760DgH1f8ZfReTjU/EJPJWbzy1gAFfK0XLKeCYX6kL9G/twRb:C5aFY15z8xbqs4A0KeQVI+x/DS9XKqf","tlshash":"1c948571465a6f2e110df7b184f82ebe561900474c66bbb4b7ac86ee9b3db17c4c4238","first_seen":"2025-08-12T07:32:35.699996Z","last_seen":"2026-06-08T10:33:23.670266Z","times_seen":14,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verify.walletconnect.com/9a504add1206ecb902aee52264862b81","fqdn":"verify.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"104.18.26.46","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 20:02:47 GMT","end":"Wed, 12 Nov 2025 21:02:38 GMT"},"fingerprint":{"sha1":"2B:AD:F6:1B:13:53:4C:DC:EA:11:05:B1:8B:B1:97:6E:3C:97:39:9B","sha256":"A1:B9:1D:5E:8F:A1:A2:47:9D:95:E6:1E:4C:61:FA:99:31:1C:00:71:70:82:45:73:AD:93:DB:31:C9:09:0C:56"}}},"request":{"raw":"GET /9a504add1206ecb902aee52264862b81 HTTP/1.1\r\nHost: verify.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: public, max-age=180\r\ncontent-security-policy: frame-ancestors https://*.oneconnectwebdapps.pages.dev https://oneconnectwebdapps.pages.dev https://localhost:* http://localhost:* https://*.localhost:* http://*.localhost:* https://127.0.0.1:* http://127.0.0.1:*\r\nx-csrf-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE3NTUyMzIxOTN9.9u2tVMVbrkz_pv2pcEt1EZsSQpx4d23-neFMtxvvvtw\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c37cd68b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":496,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (496), with no line terminators","md5":"8f47400520b231d9ff3fd9379d1eff98","sha1":"798901340a186c6cd68dd3ca51df3fbff3b77351","sha256":"971094fc1b086cda903a634c988a75b4bd8f8b3aaaea6313c737189819c68ee1","sha512":"48b76c4ea33c689ac03715929b141c2d908fbba4024c8e7e5a99adf5c97410b24c11678653ae4a4ddb8a2ae62919dcdb36a70832641763e8a75676f0e506f3de","ssdeep":"","tlshash":"48f00eea0f04ee98144ad36232bd7e1425798489cc83c41108a924c5ea0dbdaf21b7cf","first_seen":"2025-08-15T03:30:17.167472Z","last_seen":"2025-08-15T03:30:17.167472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":47,"dns":20,"connect":1,"send":0,"wait":15,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploads-ssl.webflow.com/636a3ef2888e14e784cc8d53/636a3ef2888e14644ecc8d68_ClashDisplay-Bold.ttf","fqdn":"uploads-ssl.webflow.com","domain":"webflow.com","tld":"com"},"ip":{"addr":"104.18.34.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploads-ssl.webflow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 12:26:02 GMT","end":"Thu, 16 Oct 2025 13:25:54 GMT"},"fingerprint":{"sha1":"9A:9B:13:41:01:2D:AE:B8:5A:F6:C6:4D:C9:9B:34:CF:D5:47:45:F8","sha256":"13:FE:BA:69:F3:A1:BF:FB:F8:0C:7A:D5:DB:3C:77:58:23:EC:7C:CA:8B:49:5D:62:20:14:C3:AE:7D:3A:7C:27"}}},"request":{"raw":"GET /636a3ef2888e14e784cc8d53/636a3ef2888e14644ecc8d68_ClashDisplay-Bold.ttf HTTP/1.1\r\nHost: uploads-ssl.webflow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nOrigin: https://oneconnectwebdapps.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: application/x-font-ttf\r\ncontent-length: 45436\r\nx-amz-id-2: lRRENlrvsofH8SqDXkw+WhdYxnViQ0INwyJef53IO9RWJFAaYDGGP4YOz49M7cjuAXoZTlbKYL6D8CCX3Q9T7BfA2/vj1d6U\r\nx-amz-request-id: 71WQ16VQ2VQ3RX4V\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 08 Nov 2022 11:35:15 GMT\r\netag: \"845b81eb8251429424eadff3ad713e4a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: t8FlT4DP2oSnq6wmnjrAy9yTekeBEkJB\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 96f59c386f3456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45436,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"845b81eb8251429424eadff3ad713e4a","sha1":"ad48ac96269d34e5ac4b3149edc0720f118fac06","sha256":"d3bf1ae52ac8f5a7a17619e553526084cdae6f0b8230de51d77c9e5326417291","sha512":"01fe410f511bded4429baa54fdf5ea29de736094dbf7763a2ecc1cfbb0b1353ad58fc65038ec19722a7b53ffcfe2007d53a08fc5a0f59c268d6dc176ebd8b044","ssdeep":"768:8RTUEbIxIsManxKt9Bm2QaNMJO6CpW+ezMBzg1yOV6HUX:cUAEM9WaTQyCX","tlshash":"1e134b8dd382c786d7b58d799c52b3a7b332f83b86ddb34b98141960c972df48486843","first_seen":"2024-01-07T14:24:30Z","last_seen":"2026-07-28T17:31:55.439351Z","times_seen":72,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":66,"dns":20,"connect":1,"send":0,"wait":50,"receive":3,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uploads-ssl.webflow.com/636a3ef2888e14e784cc8d53/636a3ef2888e14fb3ccc8d69_ClashDisplay-Semibold.ttf","fqdn":"uploads-ssl.webflow.com","domain":"webflow.com","tld":"com"},"ip":{"addr":"104.18.34.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uploads-ssl.webflow.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 12:26:02 GMT","end":"Thu, 16 Oct 2025 13:25:54 GMT"},"fingerprint":{"sha1":"9A:9B:13:41:01:2D:AE:B8:5A:F6:C6:4D:C9:9B:34:CF:D5:47:45:F8","sha256":"13:FE:BA:69:F3:A1:BF:FB:F8:0C:7A:D5:DB:3C:77:58:23:EC:7C:CA:8B:49:5D:62:20:14:C3:AE:7D:3A:7C:27"}}},"request":{"raw":"GET /636a3ef2888e14e784cc8d53/636a3ef2888e14fb3ccc8d69_ClashDisplay-Semibold.ttf HTTP/1.1\r\nHost: uploads-ssl.webflow.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nOrigin: https://oneconnectwebdapps.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: application/x-font-ttf\r\ncontent-length: 45620\r\nx-amz-id-2: 44eu+WqlBkrSRhSA23rALTaMVK2KiA/4htNy++mpJtXCJocIMOrsBOx/tTv28Az+SCzKVceZh3c=\r\nx-amz-request-id: BH1CJSFYA5JHY8CJ\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 08 Nov 2022 11:35:15 GMT\r\netag: \"5c7adedf6a7a336edba5d31d1c866262\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: 0p0kMPIKAv6mDqUCnjrWLZSqTud_PwUj\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 96f59c386f3e56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45620,"size_decoded":0,"mime_type":"application/x-font-ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 30 names, Macintosh","md5":"5c7adedf6a7a336edba5d31d1c866262","sha1":"0837f8844612c82b5067d898d3f0619af9aa86fa","sha256":"77d8cfd143551af67e599b7d74f9ab51da33c77b149971e241c84647d2d33cd3","sha512":"43b9b37f9a6433b86ed4aa0eb34541f13245c97ac205759fc3c0b90fd2f1ed0bb7099ffaf5fbb94a73e882fb0d9a79eaa4d8541425b3fa24d80eedb6d1b67424","ssdeep":"384:ZACIoxhcWhezS6khkC5zC6bNBKdOwGJdPxX4GyFRNM9QPBLl5MtWV7BNWlKTXz/R:ZACbhcWwSNs4EZGLPvQNgWZZ6HcdYE","tlshash":"f7235b4debc1c787e66d4f3e9e51a3ab332af43b57ab730398006628d8674f844c8655","first_seen":"2024-01-07T14:24:30Z","last_seen":"2026-07-28T17:31:55.440864Z","times_seen":58,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":10,"dns":12,"connect":10,"send":0,"wait":71,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.html","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.html HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nlink: \u003cfonts.googleapis.com/index.html\u003e; rel=\"preconnect \"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2b7XaOdN9Z5MA%2BjeoWm1An92btxthVGYvbXJ5sfykucpmleQwiEmaaVb36r1%2BQI8T1EOcT9xs8%2Bx78asfeMb1U26l3ruaIDXA14uOyOc5UmdXMy%2Bm%2FqBFq7JnL9wce9D5eThySXLUfj8IhZvbXWK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c36bdd05690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4478\u0026min_rtt=3921\u0026rtt_var=1868\u0026sent=14\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=4224\u0026recv_bytes=2103\u0026delivery_rate=677776\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=212\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T22:07:09.704674Z","times_seen":17750852,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/cdnjs.cloudflare.com/ajax/libs/jquery/3.6.4/jquery.min.html","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/jquery/3.6.4/jquery.min.html HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nlink: \u003cfonts.googleapis.com/index.html\u003e; rel=\"preconnect \"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TY8xl%2BoQwsLWwxa5THmC%2BxeMz7x8V3Ta4CsNC5BcfqM0NYbsHJuewZOgmK6MD1eoPP521%2BwkXLBnkbJJw%2B0a21d66gIVUfPWhsC0d3IVwp292eUOBuIk24BbXtfoAlu4p79jA0Mm4kiiOEsKmchg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c36bdd15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1985\u0026min_rtt=562\u0026rtt_var=1133\u0026sent=89\u0026recv=24\u0026lost=0\u0026retrans=0\u0026sent_bytes=77072\u0026recv_bytes=2680\u0026delivery_rate=7598462\u0026cwnd=15600\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=237\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T22:07:09.704674Z","times_seen":17750852,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/cdn-cgi/challenge-platform/h/g/scripts/jsd/f2bbd6738e15/maind41d.js","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:54.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f2bbd6738e15/maind41d.js HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: application/json\r\ncf-chl-out: 6bavE5RUaaWxfaqSO3TIXA==$Ox7qJi43L2yyU34QcGl6TA==\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmpa%2BG6niLiUgTqFCn39PQs53sngOz%2BsHwX%2FEo0FzDdwXWk5KzsS%2B%2F2pS2rcfdZDJGRgEbhMQgHVo4AraJtxc0XQBQjaIWXRVy%2FsfQi3uPngutYnDaFbRPLV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 96f59c38aee45690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"fedb2d84cafe20862cb4399751a8a7e3","sha1":"81f344a7686a80b4c5293e8fdc0b0160c82c06a8","sha256":"f1234d75178d892a133a410355a5a990cf75d2f33eba25d575943d4df632f3a4","sha512":"ec1f46354deeb3c626a3b96035e24a537da5bd642d8d655ec936dff568ad8f33d82bf8f1a593ddbd8f7d21a5db7c8a2c1cb6428172e302eba822410c3ff062dd","ssdeep":"","tlshash":"c8400000000000000f0000cc00c0000300c00000000000000000000000c0cf00000000","first_seen":"2023-04-29T19:05:58Z","last_seen":"2026-08-02T20:11:34.379412Z","times_seen":2076,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/evm/images/636a3ef2888e144316cc8d72_logo-coingecko.svg","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:54.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /evm/images/636a3ef2888e144316cc8d72_logo-coingecko.svg HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"48bd8b15630fd8fef19ee8e0ed2311e9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nhO2RaQVDI7W%2BrPgFl%2FaWvwrGtsDaT1eHk4UiY%2BxL5%2BdlkQH9A06Y9l3caTrwJri%2Fwv0XO0RVeIASx5qV3iBZjUwj%2B%2FnBCHOUY9dt5hTfohrXok%2FlINWZeMi8t2qSWqhtujysIvQcO70n8i3rk8l\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c38beea5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1707\u0026min_rtt=562\u0026rtt_var=932\u0026sent=256\u0026recv=48\u0026lost=0\u0026retrans=0\u0026sent_bytes=246063\u0026recv_bytes=6495\u0026delivery_rate=7154166\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=551\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8223,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce9fda4fa19ee22eb13b18db1f5457af","sha1":"6c094a8127ebc37c37734fe677782b4a6aa475eb","sha256":"b596e1ecbb98af6b716159c4435b680cae5bcdb6aa6b84554aed3fa4d155e639","sha512":"64353929b31015ae7fac2442187a529ddad3ad6c4fe2a9d554d972ce2aa6506aa2e1f8d9be96cf47b5cfd84791e6a8d02ed44843d82355e7800994e23c479309","ssdeep":"192:JxAv4Ie47Qj6+kYmW1nKQ9bWbLGSBEiivIeD8A:LAgIM2YPUQ9bKIIpA","tlshash":"410272eb77d473e1e502f3b1ca3a543a7aab34fa2752c7a5c3989d40f60146c9c888d4","first_seen":"2025-06-13T15:16:15.849503Z","last_seen":"2026-07-28T17:31:55.444423Z","times_seen":37,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/evm/images/636a3ef2888e146e87cc8db0_logo-ipollo.svg","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:54.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /evm/images/636a3ef2888e146e87cc8db0_logo-ipollo.svg HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"af2fa921aa4c9b523ca92f837bf88bc6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F2cDogU6TTgYuoKIGcm9HbZl1qv1qgFWZrP2h9qUPnO7K3fUrCo8SiQ6JT%2Fi3l1pBJZMyEATJdXr4WDnr4LKEq7XR49bkgrPuqbwtYqWNnJFcCn86HxklUP51udKXoZuP0T00uCb4lsohMAcxBmU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c38beec5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1945\u0026min_rtt=562\u0026rtt_var=929\u0026sent=250\u0026recv=46\u0026lost=0\u0026retrans=0\u0026sent_bytes=241420\u0026recv_bytes=6404\u0026delivery_rate=7154166\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=548\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"566fc6212d122a87490f5c556a55f0ee","sha1":"4361e5a1ed1c5a52ad40f0443bc051916b05e3e5","sha256":"cb9bb6798d0f30b825a8826df1606da05e193313716f85ac1f5a735516575124","sha512":"2f70ed0bbabe9a81e187e8dc96d5e81da24e00fd36c6dc6e3e73421c247a642f4ccd8b8b5058697c8c065c55685beca840de408f8c0032145a7d2b56ea139e7a","ssdeep":"192:RM+CSmy+EV4QUkOWW+Rc2zzjhliTGRhDzFztvv9fRVs:e+CWjqz+RnXBRVs","tlshash":"9e1273e4a3c8e2d0f849e7e0d53aa4f2775b20f77e29cb59c3e05ea4d72115e898c485","first_seen":"2025-06-13T15:16:15.842919Z","last_seen":"2026-07-28T17:31:55.431918Z","times_seen":37,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/evm/icon.png","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:54.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /evm/icon.png HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2967\r\ncf-ray: 96f59c39ff6b5690-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0b80d09dd89649455b95bdcde5ecfeb4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=v%2BBnbkA6MjV3YHdPnbX66VkoNDa1m8rm3gyFNkiNgFzn1nbvJAZSleSEsZ6VM%2Fd%2FwuMpjOvHOkVv6yVvAYBKmy%2FYKZbK%2BQ1MfbbcD7Va0ciV3Wwb34ItxyO5dx0laY2lOWhlL1Ug8V166%2FBVt13g\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1558\u0026min_rtt=562\u0026rtt_var=765\u0026sent=265\u0026recv=52\u0026lost=0\u0026retrans=0\u0026sent_bytes=254076\u0026recv_bytes=7182\u0026delivery_rate=7154166\u0026cwnd=62400\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=772\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2967,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"fa92ee0042d7964cc9e7779788153ba7","sha1":"6c8deb92b7d3cd85b5d784d27909d6066cb8953e","sha256":"93ca37ae2840f5255f625218eb0a6e823074f2117924da871f310246573a08c4","sha512":"233b5a096dd39d4087743a15fca367cea7b8496c280891b5924dad2c2a7e43b63d395d56c90249b756188726d432b01773fd889d451f057989bdec78bc10a79b","ssdeep":"","tlshash":"7051a5603ce312d2548677465de968a0ce634267e8c79ec4b8eedd5b0f824924f5b193","first_seen":"2025-06-07T00:00:26.670353Z","last_seen":"2026-07-28T17:31:55.433508Z","times_seen":38,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oneconnectwebdapps.pages.dev/evm/flow.css","fqdn":"oneconnectwebdapps.pages.dev","domain":"oneconnectwebdapps.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.153","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oneconnectwebdapps.pages.dev/","date":"2025-08-15T03:29:53.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneconnectwebdapps.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 12:42:36 GMT","end":"Sun, 09 Nov 2025 13:40:11 GMT"},"fingerprint":{"sha1":"79:77:28:D9:70:98:67:AD:90:00:96:3B:4E:89:F1:F8:D4:EC:DE:D9","sha256":"F9:00:1F:47:E2:B8:BB:71:35:C0:80:77:7C:D8:02:4C:5D:F6:C3:46:8F:A2:0E:FC:A7:A5:66:EB:D5:A5:05:1E"}}},"request":{"raw":"GET /evm/flow.css HTTP/1.1\r\nHost: oneconnectwebdapps.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://oneconnectwebdapps.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 15 Aug 2025 03:29:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"fd3530d7c1d0d2fc7bd2c7096a2d9655\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hbQfiCHMa1BZvjdh1pnFQnPlHBQv%2Bf%2BjwPxYju6ybZcQ5I4zrjwfJ7aZb6oKeXSQk4lLXjbPu1x%2BvQowiOdd18wiXr%2FcNHIY%2FbymmVY9F4UosB3WLtWspkS4inzqZB1oT1iArwKtDuFd04MefXFK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 96f59c36bdcf5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2510\u0026min_rtt=562\u0026rtt_var=1445\u0026sent=67\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=56011\u0026recv_bytes=2503\u0026delivery_rate=8310471\u0026cwnd=15600\u0026unsent_bytes=0\u0026cid=6a8e142c5f0c05df\u0026ts=230\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111354,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2589)","md5":"94fd9a6480416dbd91a839498a614d5e","sha1":"e09f6d29397282e9565fa6224b95835a067c2346","sha256":"c7195c48fcf58cc7a3cdbfe289904bb22b6c4383c416080704e2d4c594f0a193","sha512":"bc7d9df0a05985529a5b102a79e8f86558e0bcd185f9de0c1959ef58183f1850ec5f877707d9b9bb90c70c198aac36a9d58bfd6102d47705ab2ffda24bbabb78","ssdeep":"3072:4FAEXQc7QdmV+Mb4+MI4+4svuChDrQNprK:iAEAc7Qdm/4+4svuChDrQNprK","tlshash":"77b3019a6ae331407c06a8bc9fe9675573158003e10ecd6a7ec9625dcf893c49de3b9c","first_seen":"2025-06-13T15:16:15.853106Z","last_seen":"2026-06-21T08:32:19.373772Z","times_seen":32,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-15","alert":"Sinkholed","trigger":"oneconnectwebdapps.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}