{"report_id":"3c80c9dc-ad3b-4fc9-b095-958705830a6a","version":0,"status":"done","tags":[],"date":"2026-07-12T21:03:17Z","url":{"schema":"http","addr":"repegs-apyxfi.app","fqdn":"repegs-apyxfi.app","domain":"repegs-apyxfi.app","tld":"app"},"ip":{"addr":"196.251.107.102","port":0,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6e3f0c6332e4b69487bd99e95b18142f","sha1":"bb8478279ec42f38184cbdce54f48cff4b0abfe6","sha256":"60285af847f70de9e250388959331fa5a838a47bcf26fe10b3d17186df5f4d8a","sha512":"bc21fe1bccd23eb234468a7c57c2426b62a465310b4884e58ac19f6e1622eb11e55e7ce6137b8bb729177308df3dbd597d2cca5f46789507e40f64c08b757663","ssdeep":"96:DJFs1Bx13gb61j1l09B7gx10UFZV4jl22D+i8kDNLeOl:H61rpo0mULV4jM2D+z0sI","tlshash":"559140a544f5663b18a386a9e9d17f47af81a607ce8d29417baf00f31f87d54886f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"repegs-apyxfi.app","fqdn":"repegs-apyxfi.app","domain":"repegs-apyxfi.app","tld":"app"},"ip":{"addr":"196.251.107.102","port":0,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:03:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"repegs-apyxfi.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"data-image-svg--base64.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.516492Z","last_seen":"2026-07-09T20:49:17.794285Z","alert_count":0,"request_count":9,"received_data":489265,"sent_data":4606,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"side-still-sky.sei-pacific.quiknode.pro","ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:15:36.755254Z","last_seen":"2026-07-08T09:14:17.060837Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":646,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lb.drpc.live","ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-10T05:28:32.633791Z","last_seen":"2026-07-08T09:14:18.43535Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":627,"comment":"","tags":null,"fingerprints":null},{"fqdn":"evm-ws.sei-apis.com","ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-24","domain_rank":0,"first_seen":"2026-05-12T17:14:21.523342Z","last_seen":"2026-07-08T09:14:18.122278Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":586,"comment":"","tags":null,"fingerprints":null},{"fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","ip":{"addr":"208.115.202.150","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2018-01-05","domain_rank":0,"first_seen":"2026-05-12T17:14:21.517294Z","last_seen":"2026-07-08T09:14:16.998344Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":650,"comment":"","tags":null,"fingerprints":null},{"fqdn":"repegs-apyxfi.app","ip":{"addr":"196.251.107.102","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":20582374,"sent_data":2361,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":1,"received_data":523243,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"meow-rpc-mainnet.com","ip":{"addr":"104.21.43.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-11","domain_rank":0,"first_seen":"2026-06-12T09:25:41.610108Z","last_seen":"2026-07-08T08:14:10.099936Z","alert_count":0,"request_count":2,"received_data":1926,"sent_data":1271,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"repegs-apyxfi.app/5dXBGOKOaP.js","fqdn":"repegs-apyxfi.app","domain":"repegs-apyxfi.app","tld":"app"},"ip":{"addr":"196.251.107.102","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"scriptElement","is_inline":false,"md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","size":804974,"data":"","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-12T23:01:26.842811Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","size":522095,"data":"","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-12T23:01:26.853712Z","times_seen":371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"repegs-apyxfi.app/","fqdn":"repegs-apyxfi.app","domain":"repegs-apyxfi.app","tld":"app"},"ip":{"addr":"196.251.107.102","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"introduction_type":"Function","is_inline":false,"md5":"b03b75162e10e6226e0cd5b209d29161","sha1":"cb53e88d7e51a2c2b97abf0335daa078e1afebaf","sha256":"c5182fc6ba614b92226af14ea8398954c1f1ef683513037692c73c8ca9f935b9","sha512":"529367a5378adcd540159a8cff38ca25e2cdb027ceba7364ec7f7e404cd662985eee7a80ec3a12fdd8d0e518a196c6ceef208f7ca4d398b3a3c433614605204a","ssdeep":"6144:TjloRAcFtrLMJtLHJ6ETmfE8c/+1Db2h67m3vRTUbNZV4sXoZYrxd7IY+J:TjeRNFtU8Ldz7IY+J","tlshash":"e2f4116223924c3c8b5e52527d7deb4da0f42c9b45daf878f89f2048e47d6a69ff0211","size":779540,"data":"","first_seen":"2026-06-30T17:37:51.789388Z","last_seen":"2026-07-12T23:01:26.865035Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"v3.1","filename":"https://fonts-css2-sans.b-cdn.net/index-3731bmtv859.js line 1 \u003e Function","line_number":3,"column_number":2051848},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj43 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.7581904746718939] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj44 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.783890165233e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj45 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj107 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj108 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj109 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj110 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj111 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj112 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj113 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj114 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj115 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj116 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj117 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj179 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj180 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj181 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj182 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj183 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj184 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj185 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj186 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj187 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj188 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj189 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj251 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj252 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj253 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj254 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj255 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj256 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj257 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj258 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj259 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj260 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj261 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj265 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.7581904746718939] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj266 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.783890165233e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj267 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj329 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher14.process7//obj330 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj331 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj332 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj333 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj334 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj335 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj336 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj337 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj338 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher14.process7//obj339 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982}]},"http":[{"url":{"schema":"https","addr":"repegs-apyxfi.app/5dXBGOKOaP.js","fqdn":"repegs-apyxfi.app","domain":"repegs-apyxfi.app","tld":"app"},"ip":{"addr":"196.251.107.102","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:42.742Z","timestamp":1783890162742,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"repegs-apyxfi.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 19:19:54 GMT","end":"Fri, 09 Oct 2026 19:19:53 GMT"},"fingerprint":{"sha1":"90:4B:5B:08:3F:F8:08:6A:D2:91:5F:93:99:11:AB:05:80:A4:2E:43","sha256":"6B:D6:02:34:AF:5A:8B:81:F9:86:BD:9A:0B:52:8F:70:7E:22:41:EC:C1:25:8B:C0:D1:AC:06:9E:87:41:02:DD"}}},"request":{"raw":"GET /5dXBGOKOaP.js HTTP/1.1\r\nHost: repegs-apyxfi.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Sun, 12 Jul 2026 21:02:42 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 30 Jun 2026 13:39:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a43c71e-c486e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":804974,"size_decoded":209183,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e79d4c70e52ba920d68b1ad8e622bd95","sha1":"10a8bfa031b9ccaf3d2703c0bfe2e91f746ca69c","sha256":"e2fde6a6a7420492da1f9655943470bdee02110efbd3aa0725a1570e1cf40700","sha512":"d29eb7ac6618fa6fc1ec3e5c71d946d6e9294d56f8c10cd2528f2d4586eda4102bcf4f11f95ba07ae1e2d67c445ba9127b85f659b4784c07307e382e246440d8","ssdeep":"6144:WX5E9Ych5fLMttLHP6ETmfEYc/+1DP2h6Dm3vRTUbNpb4QXoZYtpL7IkQV:WXO9Vh5ASzpl7IkQV","tlshash":"720563a32381883c8b5ed1527d7ddf4ca0f46d8b8dea6868e89f1049f56d7b68ef4140","first_seen":"2026-06-30T17:37:51.740047Z","last_seen":"2026-07-12T23:01:26.842811Z","times_seen":31,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"repegs-apyxfi.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/vanilla-a524d433.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.357Z","timestamp":1783890166357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/vanilla-a524d433.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:46 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50192d-15f1\"\r\nlast-modified: Thu, 09 Jul 2026 21:57:01 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/09/2026 22:08:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9f206cb831f1800bc5b8f2650c6ccf79\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5617,"size_decoded":3555,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3750)","md5":"4969575c75181110cbdc633bb7727682","sha1":"e8dde53790ceb1b191e0244b13974d4544a96749","sha256":"4ef69cf1cbebf4cd3e511de09298e18f63248af091557d6722db017b7a5a1a56","sha512":"25d5208a37afdb1951ce79c1cdfc8c71d83db4968726fe20fc0751ff24f0fce334ade5ad0c7691cfc635c73928b53b9f0e17830aea090b24709adcc7f54f489c","ssdeep":"96:wNxSpBMEo4B20RY0B1WCigGZ6qY49EW9tM6TiuvnZb/GnD6GO+wyqVlYI9q8+hAn:wNxSoz4B2mY+Wb6d8S6TiufED6GbTOlv","tlshash":"7cc1e99475d771387f9589c6583e4433ba593823342dd460f1ae8d292f0e587c13ef6a","first_seen":"2026-01-02T19:16:12.734093Z","last_seen":"2026-07-12T21:03:25.750679Z","times_seen":176,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/waitForCallsStatus-50930dc7.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.364Z","timestamp":1783890166364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/waitForCallsStatus-50930dc7.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:46 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50192e-a2c6\"\r\nlast-modified: Thu, 09 Jul 2026 21:57:02 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/09/2026 22:08:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e6fb0fa433562e4603879bd9cc9340b3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":41670,"size_decoded":15184,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23600)","md5":"7f86836ce504fd46e628e880020754cd","sha1":"f36e6933809fd6bcad627edfc014b32357180d2c","sha256":"529860e5f146953aba1741485cb1210176423e3954b2d3be22c85766d44017c1","sha512":"c6bcddd0ef9e1909b6e1c4fe6de32bfda17a574e7e2f46d72a1847103656766c96d3bc01e82ff9255970bc64db8dcc0c0979c1f3af207918d5b2212121274620","ssdeep":"768:MPFJm34YSu7vFmzqwECaEJbn8QwMBuqDgi3LDwT9LvAjW7s3hOl/dPzL7WnUaF9A:MP3mopEwBE+k8wVlUo","tlshash":"3013f96573d570a18782b5f820a70001f5386dd5b84d90ecb2ace9973eebc18c6e7e39","first_seen":"2026-07-09T22:10:07.019023Z","last_seen":"2026-07-12T21:03:25.751477Z","times_seen":3,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/hashTypedData-6bbf20f4.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.367Z","timestamp":1783890166367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/hashTypedData-6bbf20f4.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:46 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50190a-10c2\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:26 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 585\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/09/2026 22:08:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 00380869e2924894cbfa73ebc86a82dd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4290,"size_decoded":2820,"mime_type":"application/javascript","magic":"data","md5":"8525ec0e30cb8ad90f23b4d7667438fb","sha1":"cff460b1940ff24361dc888d3553c817bd24c3ca","sha256":"70d3c8c529dd0283b9e588287f5a0f18588a471bec5a552026f662df63d4003c","sha512":"adf2c5719664b6c49eda7b06f59c1cee0ce85f079bc4eb54d691100c08ee4257e0c4872889eaa6b8a81e8bb935e87d1070713617d1b3d827653afe2637e3d827","ssdeep":"96:sBb/EknhWyp2xv8KtEZkFUz5oeKeKkKhSTlWtEhsLvXL46sGoWyPw:sl/9nh3SvMz5oex9DlWtEhIXLrszY","tlshash":"a991128c71a5f5b42ecd09e8e0e72101e6e4ac11f47488e3f1ec65f325a296da57a72c","first_seen":"2026-07-09T22:10:07.104374Z","last_seen":"2026-07-12T21:03:25.752991Z","times_seen":3,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.16.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:43.325Z","timestamp":1783890163325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/ethers@6.16.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:43 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 158543\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 6.16.0\r\nx-jsd-version-type: version\r\netag: W/\"7f76f-TlwAOVM5qPT9+i7T6zeg3ACnkJs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230156-FRA, cache-bma-essb1270054-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3336073\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BkHP5vJ4Ow2lKsb7NqH7rstXj9Gw5KZTIOYWpXYeYps7nCLCi21asMYkMZV1yty3KcN7M5z6cAQMIU4bBkdHEeNgl1%2BCBP8MqU0j1beJTUwFivuCE73yGjvm8jb3R0HnlD0%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1a2fd90ed7d2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":522095,"size_decoded":159691,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"556e49c10fd81a990b6281dcdc87bcd9","sha1":"4e5c00395339a8f4fdfa2ed3eb37a0dc00a7909b","sha256":"9a85a5aa81305f85e6546452fd2093a8a68932bed3cec4f6491e4d031a90bc95","sha512":"7e2dcc5cbe076d1c2d18053dda25b46c21f667367c1b28d13a2b489c507dbf8500a9f083328f1e54d417647ea8ff79cba9b7a97c9a1e5e35043cae9aba9861b6","ssdeep":"12288:2u8zZJf+vZGJzPfQAqa24VcpPfC1WgplCvPPko2Nz7jTO:2u8z7f+vZGJzPfQAqa2T4FAs1Nz7fO","tlshash":"dbb44cd132e3647287c618e52c650902f238f952705d44ecf66cdde26eabd8994bbf38","first_seen":"2025-12-21T04:14:54.672175Z","last_seen":"2026-07-12T23:01:26.853712Z","times_seen":371,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":6,"receive":4,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meow-rpc-mainnet.com/","fqdn":"meow-rpc-mainnet.com","domain":"meow-rpc-mainnet.com","tld":"com"},"ip":{"addr":"104.21.43.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.327Z","timestamp":1783890166327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meow-rpc-mainnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 15:56:30 GMT","end":"Wed, 09 Sep 2026 16:55:16 GMT"},"fingerprint":{"sha1":"BC:D6:57:2C:F9:40:B1:C5:9C:A2:8E:FE:60:8D:F5:B8:53:FA:17:B9","sha256":"DE:19:F7:9E:15:18:78:DC:34:34:05:50:91:CB:0C:53:50:56:08:82:4D:95:BE:D4:F9:8E:FF:94:65:BE:C5:34"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: meow-rpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Client-Transaction-ID: 2hIHuTRIT4QFI92/0eIu6eI+2njA5/qQHC/gqU79QaJa3wUxlZQf5DaZL+NCvVdMiKZSEJ+YiTKYu8JK9l1vNh5yDQs=\r\nX-HMAC-Signature: 17838901662=c\r\nX-Nonce: xPPMN4JgbsAyoVU0\r\nX-Payload-Hash: siteVisit\r\nContent-Type: application/json\r\nReferer: https://repegs-apyxfi.app/\r\nContent-Length: 2247\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2247,"data":"{\"jsonrpc\":\"2.0\",\"id\":268,\"method\":\"eth_call\",\"params\":[{\"data\":\"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\",\"from\":\"0x1c2dd4fc6c3ba0dd7e4156849f917aa3e0fbb610\",\"to\":\"0xe36cf3d1345c2d0af98514f15fcef46d9dc4d43f\"}]}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:47 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \"\"\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eqTmzd8BqKMHoMBNqNcuY5ZuoyNKij%2BywaE8Rzpw5h0TSUJ3ZT5SfiGpFrjjfe24CIUJHbiVAO9Bo3bFsZPMSLb4efEoKkJTKK88EorSjeGTASaX469%2BzIytmGFPcWh3faKKjK9phg%3D%3D\"}]}\r\ncf-ray: a1a2fda6ed2a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85,"size_decoded":1094,"mime_type":"application/json","magic":"JSON text data","md5":"537286b03ad2cdf343b3448762f09b98","sha1":"76747ddb5ca54d17ec98e05efbab72af8c6d9332","sha256":"977b0b678f3eff387d4606daeb991698d1e08101c7bbf5da5489b940d4bc1059","sha512":"fc2bf735a75550a0b05ac1538d0876d858968c231a3de046ec8d31ccd4d8650899995338a1fbf256b635c05b2bc8cf2a3b1cbbf6ca32b90d17731dd2767ea828","ssdeep":"","tlshash":"78a0120308043b847f0b0044342115040701c18c649701807bc0c24e91054846a45162","first_seen":"2026-07-12T21:03:25.756609Z","last_seen":"2026-07-12T21:03:25.756609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/secp256k1-faaf71c2.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.365Z","timestamp":1783890166365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/secp256k1-faaf71c2.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:46 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a501929-8955\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:57 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/09/2026 22:08:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a789a2adf0c3515e60b72e669a2776e4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":35157,"size_decoded":15923,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35156)","md5":"00b2a1553079b769cdb0f1c740a2294d","sha1":"b9acc92c0c398a2d5140ca28ad8d05a48ec1b9f8","sha256":"b8f52f01c9989fd40b6bcdfb10c4e2bb1e2205350d7f6b0af970bb4f2bdcc454","sha512":"c451dbb1e06003f5809e91d558f2823194984e4713b96c9eeced451b7f21091b9164dd6a19a9ff99042a3dc1e2b9b82b4fe5d977b58865ff73294dafcc1c97fb","ssdeep":"768:s+qWy9oCX0XkPbiCAb168K/JkYaiqVVvmRoNwiz5RdUgDq34L2lR2KaYkm2XKFtS:Tl9163MNq3+UbhB+Kt+p4VoIbA","tlshash":"1af2e84422d1747293fa28d005725102f675ec64b1cf8c90e59c8dbb3ef74a98ab6e3d","first_seen":"2026-07-09T22:10:07.038592Z","last_seen":"2026-07-12T21:03:25.758783Z","times_seen":3,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/WebCryptoP256-30d9af46.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.368Z","timestamp":1783890166368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/WebCryptoP256-30d9af46.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:46 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50192f-18af6\"\r\nlast-modified: Thu, 09 Jul 2026 21:57:03 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/09/2026 22:08:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ca3e1157f36a2f26b47c44d88f2062db\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":101110,"size_decoded":34032,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (25222)","md5":"919de8000fb179a9e65809362b8b8c57","sha1":"fd8061b623bcba4f7a2b226e2e12bed6df451a77","sha256":"4c2fc69edd92f2477755fe8fcbc24ae4e8f79338cea6e7dff1d6448aabcec315","sha512":"91726a7f785dbcbe8a18470fcfd39b857332daf19cc93e8932a1f24154629ce165be285f60b3b6e3db3261d6f9117c785243f9cbc2166ab944ed45d60a32fac5","ssdeep":"3072:D+d4Zd4nd4Dd4Dd4PpuE0pKVTsEfndAk2B4uJF0ccsjo1o8D:Xpf0pKVTsEfnF2qAF0Cjoi8D","tlshash":"06a30a806196b4a94ef375e955138001f470ec6174dd8481b2ecd9bb3eee88987ebf39","first_seen":"2026-07-09T22:10:07.092122Z","last_seen":"2026-07-12T21:03:25.765233Z","times_seen":3,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meow-rpc-mainnet.com/","fqdn":"meow-rpc-mainnet.com","domain":"meow-rpc-mainnet.com","tld":"com"},"ip":{"addr":"104.21.43.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.330Z","timestamp":1783890166330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meow-rpc-mainnet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Jun 2026 15:56:30 GMT","end":"Wed, 09 Sep 2026 16:55:16 GMT"},"fingerprint":{"sha1":"BC:D6:57:2C:F9:40:B1:C5:9C:A2:8E:FE:60:8D:F5:B8:53:FA:17:B9","sha256":"DE:19:F7:9E:15:18:78:DC:34:34:05:50:91:CB:0C:53:50:56:08:82:4D:95:BE:D4:F9:8E:FF:94:65:BE:C5:34"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: meow-rpc-mainnet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,user-agent,x-client-transaction-id,x-hmac-signature,x-nonce,x-payload-hash\r\nReferer: https://repegs-apyxfi.app/\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Sun, 12 Jul 2026 21:02:46 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, X-Client-Transaction-ID, X-HMAC-Signature, X-Nonce, X-Payload-Hash, Referer, Sec-Ch-Ua, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Platform, User-Agent, Cache\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVd4C7dTDNJNBmiPPBsnsHuz6sn2fmcYY59YedkxwMN4Nd35dmTloieC1hvv3O4QjUxkouNDBAt8swsuxfuYtWYxCmvMUdWWYr%2BfHOL2Uq0eqwrhoc4e7NwEOhGKGOhJ7ymhX1DzDA%3D%3D\"}]}\r\ncf-ray: a1a2fda3af69120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":852,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T16:17:51.856095Z","times_seen":17216432,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":514,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-0b64b1a4.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.356Z","timestamp":1783890166356,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-0b64b1a4.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:46 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50190b-3a7dd\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:27 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 585\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/09/2026 22:08:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e0159977ab2bcada46e2ba903e3bd701\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":239581,"size_decoded":80741,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8b16a811668ed723475af5d403b28cea","sha1":"3038ace8fa2a3dd39be4f3937c2b5e61a93d27b5","sha256":"1b83a9204afc2342fd998aa1799e699dcccfdf13d7a8f67edc77eb4f37186c00","sha512":"e8109c8af20de029811fdcca140349a5d5a08411a887ec0a6422a58da49ab6eb34235605ad99cc58d89f2c7100e047b27e08a036d6df82e8a2a66e4e22738fdc","ssdeep":"6144:CvIqk8ruUV8qeg5NDypZKrCsdLcOrbGQiRuDhT:OIa4qDDNBcCbGc","tlshash":"ba346c84b2947178cbe644e5a0373202a2357d05f4c9c47cf6bd9edb1ea89895723b3e","first_seen":"2026-07-09T22:10:07.016267Z","last_seen":"2026-07-12T21:03:25.771291Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.sei-pacific.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.sei-pacific.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"130.61.118.103","port":443,"asn":31898,"as":"ORACLE-BMC-31898","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:43.514Z","timestamp":1783890163514,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.sei-pacific.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://repegs-apyxfi.app\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: QAQ546HpPgQFM7GnCZ9zWw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T16:17:51.856095Z","times_seen":17216432,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/hooks.module-dd6ad649.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.360Z","timestamp":1783890166360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/hooks.module-dd6ad649.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:46 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50190a-3bfd\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:26 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/09/2026 22:08:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b715dd7da6ceb9c729a8abdbab3cb150\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15357,"size_decoded":7661,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15356)","md5":"e738a91efda645df6c05215968c73cdf","sha1":"591b0b9436b3fea68b89554ae55babd6bc58aa71","sha256":"04a81f7864b13e02bb550bf5ef1e51998ccdafc578012145ef7a105156bee12b","sha512":"ff3b697b36f0e08e23b4fba384dd0959becb1fd678e2212b5a9eee2e31b65b7cbe7171263d2c324b5771e7453e85573df0fc7ec26fb1582893bae2ed18e13f46","ssdeep":"384:a+ZSEWrpbLLsAWFogygj5yyBfUjgUsaGU+ZaQ:Ferpu2ibfYgUFmR","tlshash":"2462e8f839b4746043ea787261bf690bb7b65c1bac8c94a09606e4da3fb040c5157fec","first_seen":"2025-09-20T14:27:23.100129Z","last_seen":"2026-07-12T21:03:25.773751Z","times_seen":182,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://lb.drpc.live/sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac","fqdn":"lb.drpc.live","domain":"drpc.live","tld":"live"},"ip":{"addr":"185.26.10.103","port":443,"asn":396356,"as":"LATITUDE-SH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:43.492Z","timestamp":1783890163492,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /sei/Aoe93by_JkeckEU8l2jSNPY9NAh1as4R8LHSEklbR4ac HTTP/1.1\r\nHost: lb.drpc.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://repegs-apyxfi.app\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: jD9kOOEqjzZ7uWiXiY5VWA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T16:17:51.856095Z","times_seen":17216432,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"repegs-apyxfi.app/","fqdn":"repegs-apyxfi.app","domain":"repegs-apyxfi.app","tld":"app"},"ip":{"addr":"196.251.107.102","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:43.338Z","timestamp":1783890163338,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"repegs-apyxfi.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 19:19:54 GMT","end":"Fri, 09 Oct 2026 19:19:53 GMT"},"fingerprint":{"sha1":"90:4B:5B:08:3F:F8:08:6A:D2:91:5F:93:99:11:AB:05:80:A4:2E:43","sha256":"6B:D6:02:34:AF:5A:8B:81:F9:86:BD:9A:0B:52:8F:70:7E:22:41:EC:C1:25:8B:C0:D1:AC:06:9E:87:41:02:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: repegs-apyxfi.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Sun, 12 Jul 2026 21:02:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 08 Jun 2026 10:00:56 GMT\r\nETag: \"6341ef-653bb16286600-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":261012,"size_decoded":196530,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (56305)","md5":"e76fc7b3183d2f824b7161a21e3319aa","sha1":"f1c775f53eff3cdda086901b283b736293589680","sha256":"c7e48b416559a2c2e171a853c594f8ef7ae10d8d2976cfccf13586cf871249b0","sha512":"f190575ed3a7888925bea973ba482d694e117682f634802cfae8fa654bb70c4f99b50640384ce4a25e037e598879450507430db6255f35e755b59504b44394a5","ssdeep":"6144:ElGfQDwkG4hKobwGAFf9VFolGfQDwkG4hKobwGAFfC:zWZG4h7bwrX9WZG4h7bwrC","tlshash":"a64402b9a87cfc2d980c4d45f630ab6d0d20d1e760c6f0453adf394d77a9892e5ee488","first_seen":"2026-07-12T21:03:25.777252Z","last_seen":"2026-07-12T21:03:25.777252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"repegs-apyxfi.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://evm-ws.sei-apis.com/","fqdn":"evm-ws.sei-apis.com","domain":"sei-apis.com","tld":"com"},"ip":{"addr":"172.66.165.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:43.482Z","timestamp":1783890163482,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: evm-ws.sei-apis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://repegs-apyxfi.app\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Ei71Lcw7xolH1jbmK4XoOQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T16:17:51.856095Z","times_seen":17216432,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/localBatchGatewayRequest-d1999229.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.363Z","timestamp":1783890166363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/localBatchGatewayRequest-d1999229.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:46 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a501912-6f5\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:34 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/09/2026 22:08:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b78dcf0737234a804f6e2521f633cb44\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1781,"size_decoded":1849,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1780)","md5":"7d88eeffb214c5d2b6f3dc73f85541df","sha1":"0b22de7fe208c93d95c2eaceebde9def561aff29","sha256":"dbd244922a1351aa4764b5cb8eaf6f8a7a86ecb24bd9e58ff897c7748fb50c97","sha512":"23e8b40a51e06048ab451d727a21068e917e3f5c446395077a03506fff9d4954008c791dd5432e53d3a3e3f1f942de2dd6d86a33b7bb546dd5118d705d4b3f88","ssdeep":"","tlshash":"cb3151c8b609aa32e4af2932640fe55494312945a82d80b1d94f35f79f315c5aaafd1c","first_seen":"2026-07-09T22:10:07.058194Z","last_seen":"2026-07-12T21:03:25.779093Z","times_seen":3,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/parseSignature-636aa378.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:46.361Z","timestamp":1783890166361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/parseSignature-636aa378.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://repegs-apyxfi.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:02:46 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a501916-8d0a\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:38 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/09/2026 22:08:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f932a057ae60ed0a2d62963a1c99efa6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36106,"size_decoded":14394,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32522)","md5":"12d3f7b322228366c870da5d4eba33a1","sha1":"0c64599666d8621c4fc574c282dd7a4a95b8fc98","sha256":"f2c3d436ba59839208ab83da55c92b47a6ca1b537eca728225b17a44c7981ea7","sha512":"67c4645b4324a73489b8426fc9ffe8d38af62816d84483f1eeb2a1c76a99d95fbc078064c749a6c4a65e0d65c5b71ca1e4a00759ccd9bc873b090d5d8b623ecc","ssdeep":"768:+JvPndqOMYbr4og+vxQg+hUD7fnaDRJDOkPYXHmyN9KuTS5HiDwf3LXwMwp4Ys0v:+3NEogBL4G10Pu+hcnXb11a","tlshash":"09f22b88b5b9b07193546894d05b6202a228fdd9f40e80d1f36ecd7b2ff944cd9e5a3e","first_seen":"2026-07-09T22:10:07.026029Z","last_seen":"2026-07-12T21:03:25.781387Z","times_seen":3,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://side-still-sky.megaeth-mainnet.quiknode.pro/33b9c3d0862e8dddb88b3efd2737305bd754fbf0","fqdn":"side-still-sky.megaeth-mainnet.quiknode.pro","domain":"quiknode.pro","tld":"pro"},"ip":{"addr":"208.115.202.150","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:43.530Z","timestamp":1783890163530,"http_version":"HTTP/1.1","security_state":"secure","security_info":null,"request":{"raw":"GET /33b9c3d0862e8dddb88b3efd2737305bd754fbf0 HTTP/1.1\r\nHost: side-still-sky.megaeth-mainnet.quiknode.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://repegs-apyxfi.app\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: GnToLsw9ePJlavUoLDSOAg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T16:17:51.856095Z","times_seen":17216432,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"repegs-apyxfi.app/","fqdn":"repegs-apyxfi.app","domain":"repegs-apyxfi.app","tld":"app"},"ip":{"addr":"196.251.107.102","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:02:42.261Z","timestamp":1783890162261,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"repegs-apyxfi.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 19:19:54 GMT","end":"Fri, 09 Oct 2026 19:19:53 GMT"},"fingerprint":{"sha1":"90:4B:5B:08:3F:F8:08:6A:D2:91:5F:93:99:11:AB:05:80:A4:2E:43","sha256":"6B:D6:02:34:AF:5A:8B:81:F9:86:BD:9A:0B:52:8F:70:7E:22:41:EC:C1:25:8B:C0:D1:AC:06:9E:87:41:02:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: repegs-apyxfi.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Sun, 12 Jul 2026 21:02:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 08 Jun 2026 10:00:56 GMT\r\nETag: \"6341ef-653bb16286600-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6504943,"size_decoded":4749555,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (56305)","md5":"9146578a0ec881fa272552d6c41ef75d","sha1":"bb6cce0caa6bb9595a3ea1e5ae0f9ae0a112236d","sha256":"41e7f0e118cf6e520640d41e800164f027c623118a8f1a781ee8aa29fb587d74","sha512":"4ef05bcb4878568cfadb44dfcad1009e5bc60e9fe4f9668bf55233b09ed46742860c35429058398b18cd44c14e8e7e293ef6d185b179ea170bff5ccbec415a84","ssdeep":"24576:zDx79Dx7WLIUozlD5fKa2hSqX/d9DCEO4Y:ELIUIfMhxpY","tlshash":"3d25be2ab4b699762d2770ba53ee610d7235b083d819ded9becc1210cfc53f9ad62344","first_seen":"2026-06-07T23:58:03.437425Z","last_seen":"2026-07-12T21:03:25.782579Z","times_seen":50,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":63,"connect":31,"send":0,"wait":60,"receive":256,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"repegs-apyxfi.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"repegs-apyxfi.app/","fqdn":"repegs-apyxfi.app","domain":"repegs-apyxfi.app","tld":"app"},"ip":{"addr":"196.251.107.102","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:42.744Z","timestamp":1783890162744,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"repegs-apyxfi.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 19:19:54 GMT","end":"Fri, 09 Oct 2026 19:19:53 GMT"},"fingerprint":{"sha1":"90:4B:5B:08:3F:F8:08:6A:D2:91:5F:93:99:11:AB:05:80:A4:2E:43","sha256":"6B:D6:02:34:AF:5A:8B:81:F9:86:BD:9A:0B:52:8F:70:7E:22:41:EC:C1:25:8B:C0:D1:AC:06:9E:87:41:02:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: repegs-apyxfi.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://repegs-apyxfi.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Sun, 12 Jul 2026 21:02:42 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 08 Jun 2026 10:00:56 GMT\r\nETag: \"6341ef-653bb16286600-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6504943,"size_decoded":4749555,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (56305)","md5":"9146578a0ec881fa272552d6c41ef75d","sha1":"bb6cce0caa6bb9595a3ea1e5ae0f9ae0a112236d","sha256":"41e7f0e118cf6e520640d41e800164f027c623118a8f1a781ee8aa29fb587d74","sha512":"4ef05bcb4878568cfadb44dfcad1009e5bc60e9fe4f9668bf55233b09ed46742860c35429058398b18cd44c14e8e7e293ef6d185b179ea170bff5ccbec415a84","ssdeep":"24576:zDx79Dx7WLIUozlD5fKa2hSqX/d9DCEO4Y:ELIUIfMhxpY","tlshash":"3d25be2ab4b699762d2770ba53ee610d7235b083d819ded9becc1210cfc53f9ad62344","first_seen":"2026-06-07T23:58:03.437425Z","last_seen":"2026-07-12T21:03:25.782579Z","times_seen":50,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":67,"receive":248,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"repegs-apyxfi.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"repegs-apyxfi.app/","fqdn":"repegs-apyxfi.app","domain":"repegs-apyxfi.app","tld":"app"},"ip":{"addr":"196.251.107.102","port":443,"asn":37684,"as":"ANGANI-AS","country":"Seychelles","country_code":"SC"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://repegs-apyxfi.app/","date":"2026-07-12T21:02:43.332Z","timestamp":1783890163332,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"repegs-apyxfi.app","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 11 Jul 2026 19:19:54 GMT","end":"Fri, 09 Oct 2026 19:19:53 GMT"},"fingerprint":{"sha1":"90:4B:5B:08:3F:F8:08:6A:D2:91:5F:93:99:11:AB:05:80:A4:2E:43","sha256":"6B:D6:02:34:AF:5A:8B:81:F9:86:BD:9A:0B:52:8F:70:7E:22:41:EC:C1:25:8B:C0:D1:AC:06:9E:87:41:02:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: repegs-apyxfi.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://repegs-apyxfi.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Sun, 12 Jul 2026 21:02:43 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 08 Jun 2026 10:00:56 GMT\r\nETag: \"6341ef-653bb16286600-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6504943,"size_decoded":4749555,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (56305)","md5":"9146578a0ec881fa272552d6c41ef75d","sha1":"bb6cce0caa6bb9595a3ea1e5ae0f9ae0a112236d","sha256":"41e7f0e118cf6e520640d41e800164f027c623118a8f1a781ee8aa29fb587d74","sha512":"4ef05bcb4878568cfadb44dfcad1009e5bc60e9fe4f9668bf55233b09ed46742860c35429058398b18cd44c14e8e7e293ef6d185b179ea170bff5ccbec415a84","ssdeep":"24576:zDx79Dx7WLIUozlD5fKa2hSqX/d9DCEO4Y:ELIUIfMhxpY","tlshash":"3d25be2ab4b699762d2770ba53ee610d7235b083d819ded9becc1210cfc53f9ad62344","first_seen":"2026-06-07T23:58:03.437425Z","last_seen":"2026-07-12T21:03:25.782579Z","times_seen":50,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"repegs-apyxfi.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}