{"report_id":"4aee6695-6fc0-4f1e-adf3-e1d1b45c6031","version":6,"status":"done","tags":[],"date":"2026-04-02T15:14:37Z","url":{"schema":"https","addr":"fun-7362.live/","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"172.67.220.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"fun-7362.live/","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"title":"FUMBL — See what you left on the table","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T01:57:16.352677Z","times_seen":17828564,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"fun-7362.live/","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"172.67.220.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-07T15:14:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-02T15:14:15Z","timestamp":1775142855,"ip_dst":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":59840,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)","source":"{\"timestamp\":\"2026-04-02T15:14:15.776766+0000\",\"flow_id\":1711366356797487,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":59840,\"dest_ip\":\"8.8.8.8\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047866,\"rev\":4,\"signature\":\"ET INFO Observed Google DNS over HTTPS Domain (dns .google in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"8.8.8.8\",\"port\":443},\"target\":{\"ip\":\"172.18.0.6\",\"port\":59840},\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_07\"],\"deployment\":[\"Perimeter\"],\"former_sid\":[\"2851058\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_10_05\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"DoH\"],\"updated_at\":[\"2023_10_05\"]}},\"tls\":{\"sni\":\"dns.google\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":912,\"bytes_toclient\":4652,\"start\":\"2026-04-02T15:14:15.722991+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-02T15:14:15Z","timestamp":1775142855,"ip_dst":{"addr":"104.16.249.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":34198,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare DNS over HTTPS Domain (cloudflare-dns .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-02T15:14:15.834296+0000\",\"flow_id\":1098654912325536,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":34198,\"dest_ip\":\"104.16.249.249\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027695,\"rev\":5,\"signature\":\"ET INFO Observed Cloudflare DNS over HTTPS Domain (cloudflare-dns .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_07_09\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2024_04_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"DoH\"],\"updated_at\":[\"2023_10_05\"]}},\"tls\":{\"sni\":\"cloudflare-dns.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3273,\"start\":\"2026-04-02T15:14:15.829344+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-02","alert":"Hunting_JS_WebAssembly","trigger":"auth-gateway-5934.vercel.app/solana?id=69ba5e65cb7c56f8e07f0e48\u0026bundle=1","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fun-7362.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"cloudflare-dns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"dns.google","ip":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2018-04-16","domain_rank":158,"first_seen":"2018-10-26T18:11:46Z","last_seen":"2026-03-27T09:02:59.307201Z","alert_count":0,"request_count":1,"received_data":805,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-29T22:20:07.848058Z","alert_count":0,"request_count":1,"received_data":17070,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cloudflare-dns.com","ip":{"addr":"104.16.249.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-28","domain_rank":112,"first_seen":"2015-04-09T01:00:28Z","last_seen":"2026-03-31T19:54:45.937907Z","alert_count":1,"request_count":1,"received_data":524,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"auth-gateway-5934.vercel.app","ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-01T17:55:32.488215Z","last_seen":"2026-04-01T17:55:32.488215Z","alert_count":1,"request_count":14,"received_data":3307770,"sent_data":7523,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"fun-7362.live","ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-02T14:43:51.973353Z","last_seen":"2026-04-02T14:43:51.973353Z","alert_count":7,"request_count":7,"received_data":447415,"sent_data":2981,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"assets.coingecko.com","ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":509273,"first_seen":"2017-10-11T16:24:34Z","last_seen":"2026-04-02T14:43:52.492078Z","alert_count":0,"request_count":4,"received_data":8312,"sent_data":1853,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":4,"received_data":119924,"sent_data":2295,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.coingecko.com","ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-03-27T20:46:48.047543Z","alert_count":0,"request_count":1,"received_data":1303,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-29T22:32:58.732232Z","alert_count":0,"request_count":1,"received_data":306552,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"fun-7362.live/noir.js","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c851fb5453c506ac6f42fdab35b4c35","sha1":"94a1e900b12e9059ad7cb5e88f3aae08f25b228b","sha256":"6ce477db6fc926e37c493b54488432108f9d81c245d448005dce2d511a1bbbc0","sha512":"3ec77790f4497b05b8531ea5793f63955f4f4a733d76f17e2fef9ad7e1cbe21a4d0f36328896ff546a1a1794a6ec4ed1b19bfbe650f883a0433cdae9adbb10ee","ssdeep":"1536:xMZGg2gPKeO3v4BEnbkMKslM/omB5BQAQzT0UvXOsI58FtrtpkwG+4gFxigqXbJc:iMgieOfTnoMkk1NvtDFMxLy","tlshash":"1f534cabcf4f3d568f701a4613ee1cc8062d5bcb64d204dd5a0eb2ce825aa7714d89ed","size":66023,"data":"","first_seen":"2026-04-02T14:43:57.28286Z","last_seen":"2026-04-02T15:14:43.04867Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5e1cf20cbc4826d10f301db2f1960a57","sha1":"1fe83c5fcb2bc822204356c349bb65d5c67cdeb1","sha256":"7c71b3397c8e0950488ea47dcdad1806c1eb1305d9cd1d0b22f5434d3e09b0a8","sha512":"49c13a99401df0e26cf1d9ac17c06f20de7da7ef54dbf21c82380bd778534aa60104738da482caf28174541a1aa620230432294313904a076505f17bff1e139e","ssdeep":"1536:ZI23bazER3VEZxp86taz5/8yN2eweQAxlpk5:+23eAR3qH86IN/8yOeQkk5","tlshash":"405309497b932336aa23617f67bf766c703690079402c960f9ad87408f91f56227a7fc","size":63323,"data":"","first_seen":"2026-04-02T14:43:57.291322Z","last_seen":"2026-04-02T15:14:43.068034Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/evm?id=69ba5524272cff261fa58535\u0026bundle=1","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de2b3a198860876418e306eee1832d34","sha1":"e5b7127d3028bea7e35627f26576c1820f5b6c5a","sha256":"7b428da8ff27950f8d7ba45ef679db37856a6d87f8129532ff9ce07991408689","sha512":"c5f11913d3ee0dd78b6f14a0895fd704d55646817b76da1b94f6ca046e77d88b9d75b758f4503f29181cc85915883a02c0e0d30e24e306743f23e34c9820732b","ssdeep":"49152:b5tqHHLdOkDjBHsxabj2720AFMJ2WE8xcrmbdXtrmA2qmzbL5D6pNFVSpJc9664Z:b0L9tHI2WE8xcrCmUmtiNS","tlshash":"e8a57cb173a1b07603d782d950a61100f335a859740e80bcfbace8ef6f959ca957af35","size":2192807,"data":"","first_seen":"2026-04-02T15:14:43.068992Z","last_seen":"2026-04-02T15:14:43.068992Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/evm-noir.js","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4cb341a54f7f134f070aeacdab47bca","sha1":"4af5c289bb3965c2095efdfd7feaed74a6cb8745","sha256":"a8da590c120768e6bf277df13141fc8e7340cd3372e1917cd50adfa04c67c3a9","sha512":"3df06ebb78250d5f2ed5a441a7a3c4e6dc1983ccc2d6bb526d74d9b7e00210c112929f6889db4e84c59247da830bc0b74dbcc114853206869a7fe048b0cefc57","ssdeep":"1536:4zfeMknX3a6ylth0AekhKXL/okqiQzTbNv5hPX1zXbXh9DZuDTemFHk9RjYOJOlx:+YX3by6YqGzfbk5kIOmx","tlshash":"d3834d7acf5f3d828f54170666fe1ccd0a2d9f8664c3448d5a0af2ca829f67718c85e9","size":84539,"data":"","first_seen":"2026-04-02T14:43:57.276084Z","last_seen":"2026-04-02T15:14:43.040793Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b67e85494b1246a7af1ddb649f4a8cad","sha1":"c0608474674049fad6fd256e5d6341946148d4a1","sha256":"3ea6204d8ab934633c432d9e60921da89004ce52bcb7e96d8b497d833edd5731","sha512":"b984dea1099cd7b55c1a97a7035e6ed131ba847a89fcb98f2f93c908b259ce42b866002e9d91ffc76466eb25a5bb92e1c35891ea81053d4cd54190101052cc05","ssdeep":"768:ZqCpKfjEZxt1y8gWbtDMc8yN2ea8kqweQAxZ3MCqqk9:Z8jEZxO8BV8yN2eweQAxlRk9","tlshash":"5a234a09bba31335aa23607f1b7fa66c713990075406c914f9ad9350afa0f46163bbfd","size":49436,"data":"","first_seen":"2026-04-02T14:43:57.284264Z","last_seen":"2026-04-02T15:14:43.070688Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/script.js","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca9d634a69745c209306c036e7d5a9ba","sha1":"d6d3eab16228be751fdf148abe26f9073a9a2a91","sha256":"b406c1e3b94ee062a7a98286e86688b375f326cefc888dad4dc5c6d9e64cfec6","sha512":"478311f42ff9eb590fd1d82c84d7b3d90665c06a9d64e755070b1cb7a20391a6a3d542937818b443f15e87f015cb2cd90c388fc115f23f67bf3d53264990be10","ssdeep":"192:vUfv2PN52wwGu8j+t7pGPWwTq8q8avqFvL8ERyeVLs2s1NwPs2Q1yyeCsHSHXGub:82NDRnPhy93iiiiRaPabGny","tlshash":"bb722e6ab9f73972a07730ffabbf9548365020830904dd087c5cd510efa5a698bb6dd8","size":17198,"data":"","first_seen":"2026-04-02T14:43:57.277915Z","last_seen":"2026-04-02T15:14:43.059301Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bodymovin/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-10T18:52:23.100941Z","times_seen":2337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/solana?id=69ba5e65cb7c56f8e07f0e48\u0026bundle=1","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbe1c11c00b7e50aabce91189c579fe8","sha1":"73f3436288b25b89f8acf1df9d6052ca343e7cde","sha256":"e40a4984a110ee16cb622495fb5c1668cd83668c4ffccc4d8e76b9ae985d039e","sha512":"f2afee09f8b0f86c934f545b5e064f9d0a982a2a19406e7415980a47f65c10d8139a3a1db0268f6a61ce4fc08481e6ef3802e4b838ed79ab0fdcd96256d99c8f","ssdeep":"24576:SDbRSjEjRz8kfiViQh1VT6dgOnTiBWJWSbW5Q:2RdxipDT6yOTiBWJWSf","tlshash":"36355b5173a1b072439719e910772005f37aac983809407cfbace8ef7f95999963af78","size":1099542,"data":"","first_seen":"2026-04-02T14:43:57.293845Z","last_seen":"2026-04-02T15:14:43.071533Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-02","alert":"Hunting_JS_WebAssembly","trigger":"auth-gateway-5934.vercel.app/solana?id=69ba5e65cb7c56f8e07f0e48\u0026bundle=1","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/solana?id=69ba5e65cb7c56f8e07f0e48\u0026bundle=1","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:17.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /solana?id=69ba5e65cb7c56f8e07f0e48\u0026bundle=1 HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: no-cache\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Thu, 02 Apr 2026 15:14:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lhCgmSjR5sdRsHomMRrFMe6Qac7ck7YiS6CzMRnaseMUuaffFRnXrGKP%2FT%2FERqdgJTFeUgICk36Xt4%2BKHGPZebNBtqEFZponbSI3358cfqJGth9R9K09albJaS1cy7mumMZET1Mo5%2FEbAxx6WzhOrcWfA6XQExhxVA%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin,Accept-Encoding\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::z74z5-1775142857718-b1857e8a68e6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1099542,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65223)","md5":"f3613394b866d6fec677a02f260c7d77","sha1":"f122baa4b573cd8b52cf59cd4900341eba69056d","sha256":"2ff19a0c7f5a6fdfe55b06c41f744f4234d6bd5ee84fa6db09a606083f429971","sha512":"0fc1587a9871259f763b4861100e484b1872ece6804a7c564fe13ee5a02887c423bba6c4a9aa6eb513de307ff325e5a3d418b6527263592062da02d8e3964ff3","ssdeep":"24576:SDbRSjEjRz8kfiViQh1VT6dgOnTiBWJWSbW5J:2RdxipDT6yOTiBWJWSy","tlshash":"41256c5173a1b072439729e900772006f37aac983809407cfb9ce8ef7f95599967af78","first_seen":"2026-04-02T14:43:57.280747Z","last_seen":"2026-04-02T15:14:43.028649Z","times_seen":3,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-02","alert":"Hunting_JS_WebAssembly","trigger":"auth-gateway-5934.vercel.app/solana?id=69ba5e65cb7c56f8e07f0e48\u0026bundle=1","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v2/binary","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:19.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"POST /api/v2/binary HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fun-7362.live/\r\nContent-Type: application/octet-stream\r\nX-Session-Id: fdabb191cdd7c11ad2e6ae7e4e7f47ed\r\nX-Config-Id: 69ba5e65cb7c56f8e07f0e48\r\nContent-Length: 111\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Thu, 02 Apr 2026 15:14:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESDzRJXhESxoDbT9TDy4HiRrlziuiY2WhDtxXz0lxTXDeVVuwCzd1H2Z9eOaXvQ6cOEoleF%2B47DlSNSVX7IBCTuiy9SREXwdgETUrRYFWFEgrHXiocfdTayQFpYyF0j4Jn1e70VGeomrF2BKYPfQslEw7BVH2SmbHA%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin,Accept-Encoding\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::z74z5-1775142859003-9887bae959d6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1071,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"5bc985fef68448f79bd2c6f5e2ceaacd","sha1":"80502bb0344547169dfc8906d124c3a91a544180","sha256":"cabc3fa736b8009d321f98e5673d71ae993d8c22bb4d9d7201f01099f1b6033b","sha512":"4167aa524a816de8e7961689eee57771fd5d7aab218e04c1155a28bb5807852c94590b58ec7d62222a692b2a6517cda892eea698b6d9b3f5bc144d521f0067fb","ssdeep":"","tlshash":"bd1175221fdcc251de98a9fd759cbc011953f17350859a355a5da86264b1802fdbf0a8","first_seen":"2026-04-02T15:14:43.030045Z","last_seen":"2026-04-02T15:14:43.030045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/styles.css","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fun-7362.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 08:20:35 GMT","end":"Sat, 27 Jun 2026 08:20:34 GMT"},"fingerprint":{"sha1":"D0:55:87:83:81:37:D2:51:12:93:49:A5:7D:14:60:EA:A4:E4:46:1A","sha256":"26:36:85:81:81:D7:4A:F2:10:1B:D3:09:58:50:FC:BD:26:E9:0B:05:6C:78:FE:5B:9D:05:AC:78:70:E6:67:4C"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: fun-7362.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 23:38:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1849\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69bc88e6-69ec\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0GuDW5KLZgyaumpGWnY9hEGMEdAgEXS4c%2BHwn1hL9JyQV8jJs779A3jy7EDbT5AlLOrFX%2B7fkVENVVvzR6iXx2yY2PQh4khN8JOFvOogLcP%2BD%2FGgBW2U7HKRXjixpd%2Fi\"}]}\r\ncf-ray: 9e60c83fea05569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27116,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"efd102235aa61f5f9aa5f1addffe1f6f","sha1":"f7b38e981fe7137e09221d01106956746aaebe7e","sha256":"0719fb2f25dba67ac890a7661a2e06a058a63e5d51d4d0f61324cbb0b8ea1626","sha512":"1084659b6addb433d7847dcbfd59abee3aaddf87e83d82b88a041c15cc0ec752a1abc943bc0135f40c477f5f24a3916a0314bb6bec43ea5c969ed0a26ca2ad26","ssdeep":"768:dmsj6wf9gn/tKduEc5xGcVp0HgdKvCuzoiJKFJqcIHXGsBxl:dmsj6wlgn/tKdprUp0HgdKKuzoiAScIj","tlshash":"84c27748672c24582c1ff559b6579fb8730ca4098c0ecb7ca6ef187cafc52a46473b99","first_seen":"2026-04-02T14:43:57.259493Z","last_seen":"2026-04-02T15:14:43.033088Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fun-7362.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bodymovin/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/bodymovin/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 63677\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659c95a0-f8bd\"\r\nlast-modified: Tue, 09 Jan 2024 01:38:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 135706\r\nexpires: Tue, 23 Mar 2027 15:14:15 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=un5DkLOMojgELF3KxLIw9Q01HJs8fdW1IupYy1AX%2FZSGqUwDXikRpoELzerXmaUHptiINcga6Fl9qogZXhc8zL9pfnJYwLQ5E5h8xcVDB1962scCBl5v9nfpCflM6YVLiv0eS8Kc\"}]}\r\ncf-ray: 9e60c840397fb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305543,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-08-10T18:52:23.100941Z","times_seen":2337,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":32,"dns":0,"connect":1,"send":0,"wait":8,"receive":6,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/tappy-tap.json","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fun-7362.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 08:20:35 GMT","end":"Sat, 27 Jun 2026 08:20:34 GMT"},"fingerprint":{"sha1":"D0:55:87:83:81:37:D2:51:12:93:49:A5:7D:14:60:EA:A4:E4:46:1A","sha256":"26:36:85:81:81:D7:4A:F2:10:1B:D3:09:58:50:FC:BD:26:E9:0B:05:6C:78:FE:5B:9D:05:AC:78:70:E6:67:4C"}}},"request":{"raw":"GET /tappy-tap.json HTTP/1.1\r\nHost: fun-7362.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 15:14:16 GMT\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 23:38:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69bc88e7-381bb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=il3fSyBRj0Q4ey6P7KYn06DLrjxzCI0htK8UjVvnoN0QpYex8ktm5PEpftjn4%2FW2eCQiO8CIDkAeMQSpNy8VDZFOTUH6w4Jyjfy3stshZTQKpR4OIzJ%2FmenqEHBoEhKp\"}]}\r\ncf-ray: 9e60c841aa37569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229819,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fde8d263453e91e7dcb28eb4b1966395","sha1":"b40c921c8eba8e6f8fe3a72a751d89393e494bc5","sha256":"a72952b63b0e4410cb449cffbd9f3969a3aa52a186886d79c79831fb2bc502ad","sha512":"e037d1460f0150c6b5ba75625b8b96e0547f91d6084d40f8d091a92f68c67f4a2004045c8190ace71b7a732bb6cda5a2d9b1eca1e17f3b796db09fafbfba6245","ssdeep":"384:Koj1w1yHsuM8qcVhAo5k9tCYl8iHOJc3m2iMqSM/oTFAlCH8e8MaMlRA45kN9yYW:0uwcVhAoK9tN3oeQMlRA4KN9dXG","tlshash":"c6248e28cabb0c52b4496b7918ba064499b586d74cfd3d44bf3c994d8f0f08e0b766de","first_seen":"2026-04-02T14:43:57.255292Z","last_seen":"2026-04-21T09:24:33.213658Z","times_seen":10,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fun-7362.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v1/config/mode?id=69ba5e65cb7c56f8e07f0e48","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:16.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /api/v1/config/mode?id=69ba5e65cb7c56f8e07f0e48 HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fun-7362.live/\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Thu, 02 Apr 2026 15:14:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VnLzNBT9i1JUy%2B568nTrxLvO7m8pcp66j4E23MwEVEcUE1%2FtGXQvWhVDW5tgbrkaXC6GsbHNeoXyCG2QpTDTCWEmYWfMOTYBm0MyR0w5TkgPZzAe3%2BW%2FIOdf34%2BmSDFtQMlRYiNZjPN%2Fa3ob5w3zdRwWcQf4ZWuVA%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 58\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::r9hgs-1775142856165-a4409767c88d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":37,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8570d8ddb8f624549f3625bb77a5909c","sha1":"f342acbf128029f64e56b87ce78bd68260842dad","sha256":"b6bf97b203bb62e407127b2661c1af45aa73bad6f9b62f58584e9d8f8648ba5c","sha512":"49bafb40e44fe9a193a88183887422b1dbf74ea0f4d73fef92765df259565647c71f0cdd4f0cd778af9c8cedbfd0ce38b811de1f534697ba20cdfa682fdec5ab","ssdeep":"","tlshash":"6d8004c03dc51c45044141cd0554014415340011500c743c44157500505d7305004c5d","first_seen":"2026-03-23T15:48:03.994072Z","last_seen":"2026-04-02T15:14:43.036179Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/evm?id=69ba5524272cff261fa58535\u0026bundle=1","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:17.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /evm?id=69ba5524272cff261fa58535\u0026bundle=1 HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: no-cache\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob: wss:; frame-ancestors *\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Thu, 02 Apr 2026 15:14:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKjpbeCVAYmZRGSyTM95WNqe%2FK8aHiPEE0G%2BV%2BNxOIw7CB%2BABeeotTAfwrB99C2ye5yybat3rnnzTaJKKf869R7AFkkXkXiv%2B00KkDmmEqfGVVmb0isJaMSgBoeL80dhCdxtF%2FsGcx45FNZFyK7l7JCYiQo%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin,Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::rqnkr-1775142857612-0b02f6300fbb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2192807,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65019)","md5":"c864fb49095ef47810054e8419424bbd","sha1":"2eaf2918239754b820732f0ae492bdc6b2f98dd1","sha256":"fd9f6b9c9d2b400414b5b05725ef70f4fedcd88ec744323f8b359413b4617e3f","sha512":"e924d821850c823a7346c8ec62e2a27c757754a1ffb86f9eee8904b69e623a92155ddbd698218035d577ce84d90c5eff2ba9d5d4a0c4ec183d844069d16a74fd","ssdeep":"24576:bvBtqLzPPLduhwFDjBHsxabj2720AFMY+2WE8xcrmbdXtda:b5tqHHLdOkDjBHsxabj2720AFMJ2WE8I","tlshash":"23256bb173b1b57603d783d984660101e2349859700e84bcfbaca9ebaf949cb953ef35","first_seen":"2026-04-02T15:14:43.037397Z","last_seen":"2026-04-02T15:14:43.037397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v1/config","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:18.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"OPTIONS /api/v1/config HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-client-source,x-config-id\r\nReferer: https://fun-7362.live/\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Thu, 02 Apr 2026 15:14:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zLXuHv3WMVkpW9ImFHzAdLJ0tk6WSLvRqb9ObiSAw53LkmY3UZNY1c5iVtTFYbnwklGDoTXG6sXVGkw%2FWLvlX7pyPP37X5xzoA%2BJwsBcc0YsQhEocSr6hpeIclYOzKgyaKzanBiZTGBVnVYWhit5MuK2Ku8%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::64vbj-1775142858854-98c98e9bcdc0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T01:57:16.352677Z","times_seen":17828564,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v2/binary","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:18.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"OPTIONS /api/v2/binary HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-config-id,x-session-id\r\nReferer: https://fun-7362.live/\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Thu, 02 Apr 2026 15:14:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RrXSwBbBuEsnQuvU5RrVr6Ied4y2aSf8fKDJeAIjBd22cTgwMCkq%2BZbi9Ssq0dR9HjDbJ58nWHtu4hmi7Wje4BT1ifQ9IfjxZysHJO1VJr0IxgftQNp08wx9i1nl8abI7Wmp%2FJp5JlwdezIc24JBnms5sxwZVeQOiw%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::z74z5-1775142858909-f4931e4ba594\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T01:57:16.352677Z","times_seen":17828564,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/evm-noir.js","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fun-7362.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 08:20:35 GMT","end":"Sat, 27 Jun 2026 08:20:34 GMT"},"fingerprint":{"sha1":"D0:55:87:83:81:37:D2:51:12:93:49:A5:7D:14:60:EA:A4:E4:46:1A","sha256":"26:36:85:81:81:D7:4A:F2:10:1B:D3:09:58:50:FC:BD:26:E9:0B:05:6C:78:FE:5B:9D:05:AC:78:70:E6:67:4C"}}},"request":{"raw":"GET /evm-noir.js HTTP/1.1\r\nHost: fun-7362.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 23:38:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1849\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69bc88e0-14a3b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6687EirFeTI3d%2BfCX2Zrf%2FZei2BuACVY81CQu6bLasFUdzw5Ia%2B08AemmP2gwT3fm3e3%2BN5SpcGlfFT22WpViWgoEYeh9D7Je0%2FpMzgo6qbVN1MZRh0ufzSracxLv2I\"}]}\r\ncf-ray: 9e60c83fda04569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84539,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f4cb341a54f7f134f070aeacdab47bca","sha1":"4af5c289bb3965c2095efdfd7feaed74a6cb8745","sha256":"a8da590c120768e6bf277df13141fc8e7340cd3372e1917cd50adfa04c67c3a9","sha512":"3df06ebb78250d5f2ed5a441a7a3c4e6dc1983ccc2d6bb526d74d9b7e00210c112929f6889db4e84c59247da830bc0b74dbcc114853206869a7fe048b0cefc57","ssdeep":"1536:4zfeMknX3a6ylth0AekhKXL/okqiQzTbNv5hPX1zXbXh9DZuDTemFHk9RjYOJOlx:+YX3by6YqGzfbk5kIOmx","tlshash":"d3834d7acf5f3d828f54170666fe1ccd0a2d9f8664c3448d5a0af2ca829f67718c85e9","first_seen":"2026-04-02T14:43:57.276084Z","last_seen":"2026-04-02T15:14:43.040793Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fun-7362.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/favicon.ico","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:16.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fun-7362.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 08:20:35 GMT","end":"Sat, 27 Jun 2026 08:20:34 GMT"},"fingerprint":{"sha1":"D0:55:87:83:81:37:D2:51:12:93:49:A5:7D:14:60:EA:A4:E4:46:1A","sha256":"26:36:85:81:81:D7:4A:F2:10:1B:D3:09:58:50:FC:BD:26:E9:0B:05:6C:78:FE:5B:9D:05:AC:78:70:E6:67:4C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: fun-7362.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 15:14:16 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Thu, 19 Mar 2026 23:38:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1849\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69bc88e1-253a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dy2IsJDtkt55ivNv6PXjFju8VfqFuJ%2BfcuPobwDLrMg8K4pLW%2BsprcMmw0nBXUUCFuGUV71p6tdxMFpbxALFvOo3%2Fs1RCgOKelEF2jbdgcqmN6gOe7ecLwEb39Ar92ng\"}]}\r\ncf-ray: 9e60c8445a5c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9530,"size_decoded":0,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"d75ac439a700fc6b89ede343b991a82b","sha1":"0c1f6d4c97567dc466fec265ed44f90f57dbd9e8","sha256":"2f5e335d697608758703727614d2861615a367ecb9927265bdfde9f374dce820","sha512":"bae868d7ece856e59f6f55f14910a2b5c2af7b8655c46b7354e300705d33cdcb24f1335b274461754aaf458ff4d0ae9ef694b0292f8c071e2464c0ab37536189","ssdeep":"192:LSOuTxFIa4a8v5niy5WtDENYa8FxZImS+tkxvi:GOmxFIa8vlpwhqYa8FDIF+tUvi","tlshash":"1312f593cc085553aa3423bd79531fbe21ae3e08a6020bf726312ce6f874d748d4f968","first_seen":"2026-02-13T03:15:33.501936Z","last_seen":"2026-04-02T15:14:43.042494Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fun-7362.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/28766/small/base.jpg","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:42:21 GMT","end":"Thu, 28 May 2026 15:42:20 GMT"},"fingerprint":{"sha1":"C9:35:3C:67:F9:7B:6C:1A:75:01:2F:53:91:3A:BF:0C:5C:83:65:82","sha256":"B5:C6:F7:D5:1D:B0:DB:20:3C:D0:97:30:1E:49:F9:7D:91:DA:73:A1:80:3F:51:D8:F0:4B:97:4A:2E:AB:B2:77"}}},"request":{"raw":"GET /coins/images/28766/small/base.jpg HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: application/xml\r\nx-amz-request-id: 1MBX18X4JZ1C3FTP\r\nx-amz-id-2: xp1oFXwcHnZD0IQ/DAgORbSgqrMN5pK5lNIYhuGQaFCN1TCht953Wb9/w0SHnY8abThHq67tuA7BpSQt9PGg+VsddQ7wS6Wf\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e60c8403a60723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T01:57:16.352677Z","times_seen":17828564,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 21:17:26 GMT\r\nexpires: Sat, 27 Mar 2027 21:17:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 496610\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-11T00:46:56.179146Z","times_seen":12572,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Mar 2026 01:53:05 GMT\r\nexpires: Sun, 28 Mar 2027 01:53:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 480071\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-08-10T23:14:08.327991Z","times_seen":27068,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":91,"dns":1,"connect":7,"send":0,"wait":8,"receive":2,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 21:17:26 GMT\r\nexpires: Sat, 27 Mar 2027 21:17:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 496610\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-11T00:46:56.179146Z","times_seen":12572,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":161,"dns":5,"connect":24,"send":0,"wait":11,"receive":5,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v1/config","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:18.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /api/v1/config HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fun-7362.live/\r\nX-Config-Id: 69ba5524272cff261fa58535\r\nX-Client-Source: Perpetual-Client\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob: wss:; frame-ancestors *\r\ncontent-type: application/json\r\ndate: Thu, 02 Apr 2026 15:14:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JoRjhP%2BJLq%2BAPFkc4usg4TatVIjAHrriYKNqXPXxjqPTW%2FBzQs8%2FKHwAbU50DQGDD8qgOjlscWzoWu4RuGcVw9IJ5Ei4ORfK1E74ABS77oQRzHPn6QbZh0NwcidIzfxLDkFoeaucL9CzUcknWKv4MEWGAJQ%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin,Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 58\r\nx-ratelimit-reset: 59\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::64vbj-1775142858966-520a65ff056e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":906,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1a7acdf6565e504a5841cb0f18070689","sha1":"e65c080e155e2c61694c388ab459e22edfccee63","sha256":"0a462e54e64dd4886e58f233738dc39f1ac4292fb811cc6d52d4aa2a8f89b183","sha512":"dd0d1834e52f8e51d2e20ea3c10d43e60bb901d943fcf08cd701bfc17c681b7a5cc2b3e207d9b7dacdc52add30f4c427c13166d07e0f2bfdd5bae16afd22bc83","ssdeep":"","tlshash":"f2119c12423c1d3b060657d364090b666de20762a3ed28f9d59dcd1b82cbe64e3659eb","first_seen":"2026-04-02T15:14:43.045622Z","last_seen":"2026-04-02T15:14:43.045622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v1/visit?source=fun-7362.live\u0026wallets=","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:19.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /api/v1/visit?source=fun-7362.live\u0026wallets= HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fun-7362.live/\r\nX-Config-Id: 69ba5524272cff261fa58535\r\nX-Client-Source: Perpetual-Client\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-security-policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob: wss:; frame-ancestors *\r\ncontent-type: application/json\r\ndate: Thu, 02 Apr 2026 15:14:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTX8F69%2FcOrXz48b5M0edsdzswWaLJovH1644AwZxUHh5OPzeXEzhp0zQ%2B3I5Dw1JNqD%2FNMFdx86bonQqFFJcU6B5JI8G6Vl%2B8A8RtTPeZgFQEq4SsYkgMzZIlnPfqs17U8xcjKsbF83gemjO%2BD1OWNa6rA%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 57\r\nx-ratelimit-reset: 59\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::2jtrw-1775142859071-fa06d2999cb0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cff36d12c93e610d6868e486d3e555a1","sha1":"a73969f25475eff0ed30937756c2f434fbdb042c","sha256":"9409cf52dfe8ea94df613871e612657491e6eaa4cf65574e5df9739af42e39d5","sha512":"2721d3ce489b8df549e53e09df4860f34b74910ee9ffb1ccac7d7be27e5ddebdb7a92a237a6aea52ecca3161a0d945a32fef8ec3b3b6b0be6a224c460fbe7857","ssdeep":"","tlshash":"c090041001043c345f510701341177503df4ddf1544d7053501f703c0115dc1d05f307","first_seen":"2026-03-20T13:13:34.015138Z","last_seen":"2026-07-03T12:24:00.528444Z","times_seen":20,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/noir.js","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fun-7362.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 08:20:35 GMT","end":"Sat, 27 Jun 2026 08:20:34 GMT"},"fingerprint":{"sha1":"D0:55:87:83:81:37:D2:51:12:93:49:A5:7D:14:60:EA:A4:E4:46:1A","sha256":"26:36:85:81:81:D7:4A:F2:10:1B:D3:09:58:50:FC:BD:26:E9:0B:05:6C:78:FE:5B:9D:05:AC:78:70:E6:67:4C"}}},"request":{"raw":"GET /noir.js HTTP/1.1\r\nHost: fun-7362.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 19 Mar 2026 23:38:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1849\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69bc88e4-101e7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wWz0tl0WLT9gM5dBV0qognH6Qw%2BAOb42tH7fb2rouiyOIxfgszM4SgNGOytuqqZIAv1JPPw44oy5qjsvKg4k9SaUbz2apBhwSDFP%2F4zMJFvqJucGmdhdGXf7CiDCmkv\"}]}\r\ncf-ray: 9e60c83fda03569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2c851fb5453c506ac6f42fdab35b4c35","sha1":"94a1e900b12e9059ad7cb5e88f3aae08f25b228b","sha256":"6ce477db6fc926e37c493b54488432108f9d81c245d448005dce2d511a1bbbc0","sha512":"3ec77790f4497b05b8531ea5793f63955f4f4a733d76f17e2fef9ad7e1cbe21a4d0f36328896ff546a1a1794a6ec4ed1b19bfbe650f883a0433cdae9adbb10ee","ssdeep":"1536:xMZGg2gPKeO3v4BEnbkMKslM/omB5BQAQzT0UvXOsI58FtrtpkwG+4gFxigqXbJc:iMgieOfTnoMkk1NvtDFMxLy","tlshash":"1f534cabcf4f3d568f701a4613ee1cc8062d5bcb64d204dd5a0eb2ce825aa7714d89ed","first_seen":"2026-04-02T14:43:57.28286Z","last_seen":"2026-04-02T15:14:43.04867Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fun-7362.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=ethereum,binancecoin,solana\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 07 Mar 2026 16:39:57 GMT","end":"Fri, 05 Jun 2026 17:39:55 GMT"},"fingerprint":{"sha1":"B1:44:A5:9B:AC:F3:25:52:00:21:91:75:61:8B:17:93:85:F4:78:C4","sha256":"E0:56:40:D8:85:96:53:52:4F:90:29:79:2C:CF:17:88:F0:D7:07:24:3B:53:CE:49:85:97:D9:4A:B3:F6:97:4A"}}},"request":{"raw":"GET /api/v3/simple/price?ids=ethereum,binancecoin,solana\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fun-7362.live/\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:14:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"42173fc80ca8cf5d168f82c666278851\"\r\nx-request-id: b0326646-71d4-4fc1-9741-ba505df929c9\r\nx-runtime: 0.002320\r\nalternate-protocol: 443:npn-spdy/2\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=15724800; includeSubdomains\r\ncf-cache-status: EXPIRED\r\ncf-ray: 9e60c841dd7a568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"901b92a099b5c357b9e2ed0dad88126b","sha1":"11b9069758d9612ca9446655c436fe3b852f8eb8","sha256":"b5391284c31608b12c7acc7244907c711189e5e4518d866f7cd6d61baca3afff","sha512":"580c421a26e0f60f8388b8db976eb4f8b565005660577b4b810296e6aefba4587886d1bc2dfed770681071ec7fda04bc7398da06a6a43807e83640191ee5d4e7","ssdeep":"","tlshash":"aea0118000a008b30e0c08aa8c282382ca0300b8800a030e0aace0c20e0ebac08000e8","first_seen":"2026-04-02T15:14:43.049632Z","last_seen":"2026-04-02T15:14:43.049632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":23,"dns":6,"connect":1,"send":0,"wait":150,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/279/small/ethereum.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:42:21 GMT","end":"Thu, 28 May 2026 15:42:20 GMT"},"fingerprint":{"sha1":"C9:35:3C:67:F9:7B:6C:1A:75:01:2F:53:91:3A:BF:0C:5C:83:65:82","sha256":"B5:C6:F7:D5:1D:B0:DB:20:3C:D0:97:30:1E:49:F9:7D:91:DA:73:A1:80:3F:51:D8:F0:4B:97:4A:2E:AB:B2:77"}}},"request":{"raw":"GET /coins/images/279/small/ethereum.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1270\r\nx-amz-id-2: h2HwvHpad4AlnJAM2TFRHp31p+5C64fygGRs32/V4sp/QWoEJYxdhOiHumDCuFZm9i+Qc0Lqc2s=\r\nx-amz-request-id: 6ZHZ2B79QDEAF84T\r\nlast-modified: Tue, 21 Jul 2020 16:28:02 GMT\r\netag: \"19758c6da516f95d9fad2a210c525ee7\"\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\ncf-polished: ok, orig_size=1887\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 433927\r\nexpires: Fri, 02 Apr 2027 15:14:15 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9e60c8403a57723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"f52e634c0834e397b29ba51bed76dfa1","sha1":"aa7d07b6fba337e24431de2fbbf155f1ed5aa39d","sha256":"b90012bba7d1ac4b56879543de44b7af3af8079c16f3913499030bc8e770c3c8","sha512":"910bfb01fd632b3d466485a288f970444efffd16ff76e97a6a9b6f1919a7f01a9912c50eda67d84e19926f36b323d10ac964272d33d0cebfe326cc4fbbe88d07","ssdeep":"","tlshash":"2f21c8929b55a0adc0952f5e1a2b9ca0fe1d7268db19784c306c8a5ce286e41a127ba4","first_seen":"2025-08-04T07:19:09.615541Z","last_seen":"2026-07-27T12:33:54.341156Z","times_seen":319,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":35,"dns":4,"connect":1,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dns.google/resolve?name=_r.chrome-extension-da0e5-bc.com\u0026type=TXT","fqdn":"dns.google","domain":"dns.google","tld":"google"},"ip":{"addr":"8.8.8.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns.google","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:38:27 GMT","end":"Mon, 01 Jun 2026 08:38:26 GMT"},"fingerprint":{"sha1":"DF:6F:4D:3F:9E:84:0C:AF:37:97:1F:91:34:CB:31:3B:71:DA:C7:F8","sha256":"DC:CA:5E:CB:57:5C:11:53:4C:4C:18:EB:D8:37:47:DB:DD:FD:0D:3E:1E:4C:65:B4:DB:DD:3F:72:21:C3:64:2F"}}},"request":{"raw":"GET /resolve?name=_r.chrome-extension-da0e5-bc.com\u0026type=TXT HTTP/1.1\r\nHost: dns.google\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/dns-json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fun-7362.live/\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\ndate: Thu, 02 Apr 2026 15:14:16 GMT\r\nexpires: Thu, 02 Apr 2026 15:14:16 GMT\r\ncache-control: private, max-age=60\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: gzip\r\nserver: HTTP server (unknown)\r\ncontent-length: 201\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":287,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"61e16ba77e8ff0537a8e5a61a2c5e22d","sha1":"b7036c940bc0ef9c6b18790bc7b8e38ee4dc6e4f","sha256":"2ad1c5b751a3d0b061076a70a5afed7d504290dbc901350ff381bfb72405eb04","sha512":"39d5cb840f03a6afa17639e2a84d7735e7e5364aad49135fdae7498a9263edb334883d4aa2dfd5aed34a537a9161673c879c4fe6cc31edd2470e2da41e86fbef","ssdeep":"","tlshash":"fcd0cd84914440a976176754c44b09469f6c12b277acbd5587441e54e7cb245d455327","first_seen":"2026-04-02T15:14:43.053311Z","last_seen":"2026-04-02T15:14:43.053311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":295,"dns":3,"connect":21,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v2/handshake","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:18.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"POST /api/v2/handshake HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fun-7362.live/\r\nContent-Type: application/octet-stream\r\nContent-Length: 71\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Thu, 02 Apr 2026 15:14:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbQTuhXNEvKr63AYjtKLP9Kq2DF%2B76Z0zQiqaWI8aA3ivIw0Q6I3aiZj3TisM%2B8y3MlzYLgdFMMl4vTH5NnJk2wBrSgQUmPAKMotVlHAI1zK4E1kELn1bU2AYLCjnpQIFyLBkiMxyfH7vGhAEfW8H96GUPIWD1tUpw%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 57\r\nx-ratelimit-reset: 59\r\nx-session-id: fdabb191cdd7c11ad2e6ae7e4e7f47ed\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::2jtrw-1775142858548-d48425161a3b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"b325167fa8250cd613d05f4743f8eef3","sha1":"29e7dca4b328e52734a3c76798148a67df285959","sha256":"88341e9c6148a5a845604e6f8fbdc551b128e37ec6d84e28946b20c05d2dd9b1","sha512":"0eb85e4fa05e4aa37e0dab0569efe4ab10fe02087bbd5097d908f728c79dedf316c41c5013493d17aad0224ade33152a90f4bff1cb846369f36272ad82640b46","ssdeep":"","tlshash":"c4a022f03382c030c88fe82b203b08cbe8aba820003c8e02c0003300cccae000aa32f0","first_seen":"2026-04-02T15:14:43.055285Z","last_seen":"2026-04-02T15:14:43.055285Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v2/binary","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:19.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"POST /api/v2/binary HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fun-7362.live/\r\nContent-Type: application/octet-stream\r\nX-Session-Id: fdabb191cdd7c11ad2e6ae7e4e7f47ed\r\nX-Config-Id: 69ba5e65cb7c56f8e07f0e48\r\nContent-Length: 175\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Thu, 02 Apr 2026 15:14:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8jdhbmPvMxoo0Go8ZvfkVkCDtx3zNAeQ7o9Yvwf44Z9cA%2BQyxwml%2BgZ08qA%2Fb1YTCpG9zf7%2BCQoTlSgPgh75cjzmn6PxWh0vbfLfk0LfTIFOt%2FQxhEFRb4wR6gEuenrLfFoCmE4ZJ4JEx3y54ZROgHC42BdJDgV6A%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 58\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::z74z5-1775142859211-392ebc304737\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"bc1a419b8c216d08e29f2dcebbccb70e","sha1":"293c167615daa90e848099f30b7d16ebe1af85aa","sha256":"7b9724aba8d91adf3c4844a9a0e8d9b845bba45799ddcb4be97e5cbb2ecdb32f","sha512":"92976bed6f1e9680dd12e494a63fde4fad1ffce1cc6c0b961d8c7b094183fd9e56df301ca1da72f387ebb735cb7d7f60fd0e0c5bad791e7f3e1e3d3aaad3ccd5","ssdeep":"","tlshash":"6ab01208e713d0c8c890577e590556101662e90d50c08707a4390040901371da8510f4","first_seen":"2026-04-02T15:14:43.056744Z","last_seen":"2026-04-02T15:14:43.056744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600;700\u0026family=Space+Grotesk:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:40 GMT","end":"Mon, 01 Jun 2026 08:37:39 GMT"},"fingerprint":{"sha1":"5F:99:6E:26:2A:3A:DA:FF:7F:0D:EE:C5:8B:2A:01:AE:28:26:AD:C4","sha256":"2B:88:E7:79:70:E5:E9:DE:0E:A9:0A:B8:F1:F5:C6:D6:10:77:F0:C9:0F:E6:2A:13:A3:D6:08:F9:89:A3:60:E8"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@400;500;600;700\u0026family=Space+Grotesk:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 02 Apr 2026 15:14:15 GMT\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16384,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a1c250c711932994768b2deada970a18","sha1":"0fa592c1b2a5910d2e274909d44861ff8b37f63b","sha256":"a8d366300d67d927238f43900fff502b0a628062f9753add28fe0491823d0db2","sha512":"6fcb6343c730ba4bf54557116b4457e74d8dffe99993f84d627463c904eb03e7c0140cf8dd61c616629a18f23023bc09a58dcb51c498e6f80ffb679a9e3b5eb3","ssdeep":"192:uG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCFGbep3g5XxWcGGDZx/GiZC4GRZfRG4ZYiB:fOGC6CmOZKDgRt","tlshash":"8372ede1001a9404eb572cc633cebe36bd8ea1166085d9b9dfff18989daac72133475d","first_seen":"2026-01-17T18:35:25.643696Z","last_seen":"2026-07-20T03:35:56.767293Z","times_seen":30,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":150,"dns":0,"connect":8,"send":0,"wait":20,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/script.js","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fun-7362.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 08:20:35 GMT","end":"Sat, 27 Jun 2026 08:20:34 GMT"},"fingerprint":{"sha1":"D0:55:87:83:81:37:D2:51:12:93:49:A5:7D:14:60:EA:A4:E4:46:1A","sha256":"26:36:85:81:81:D7:4A:F2:10:1B:D3:09:58:50:FC:BD:26:E9:0B:05:6C:78:FE:5B:9D:05:AC:78:70:E6:67:4C"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: fun-7362.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 19 Mar 2026 23:38:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1849\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69bc88e5-432e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Th72TdlZ5%2BU%2BvxVfLR3TepeaABnB0M7aiy8avOgHmxSkUCbPC2RB%2FPwoi2h%2Br2Osyuiv3pnTqlM4XDWY%2BvhxYaV8mnky9C%2FJ2G39GqP05n7v%2FlOa%2BYCS1NJ%2F8B%2BRfwIe\"}]}\r\ncf-ray: 9e60c8400a07569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ca9d634a69745c209306c036e7d5a9ba","sha1":"d6d3eab16228be751fdf148abe26f9073a9a2a91","sha256":"b406c1e3b94ee062a7a98286e86688b375f326cefc888dad4dc5c6d9e64cfec6","sha512":"478311f42ff9eb590fd1d82c84d7b3d90665c06a9d64e755070b1cb7a20391a6a3d542937818b443f15e87f015cb2cd90c388fc115f23f67bf3d53264990be10","ssdeep":"192:vUfv2PN52wwGu8j+t7pGPWwTq8q8avqFvL8ERyeVLs2s1NwPs2Q1yyeCsHSHXGub:82NDRnPhy93iiiiRaPabGny","tlshash":"bb722e6ab9f73972a07730ffabbf9548365020830904dd087c5cd510efa5a698bb6dd8","first_seen":"2026-04-02T14:43:57.277915Z","last_seen":"2026-04-02T15:14:43.059301Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fun-7362.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 21:17:26 GMT\r\nexpires: Sat, 27 Mar 2027 21:17:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nage: 496610\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-08-11T00:46:56.179146Z","times_seen":12572,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":164,"dns":5,"connect":22,"send":0,"wait":11,"receive":5,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v1/config/mode?id=69ba5524272cff261fa58535","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /api/v1/config/mode?id=69ba5524272cff261fa58535 HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fun-7362.live/\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Thu, 02 Apr 2026 15:14:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90ZSWFWX2uOIzmN1KADJc%2FO6QumJRNytdS36IryxStFcBcdHuRhwXtcHeCCwRbVP0dp0%2BaWaOUxwBbUg25hIMOS0eGNqybRQ6WVTuSP5WkcS3IKIfs23D%2BDf5rPUYK4y6WnjLzWu4xZYambLme7tg4tFnmSTxwgQ1Q%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::2jtrw-1775142856057-a3efaf11bd71\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c8f6d4a8ef9ae91ac1a5dc6f47e08797","sha1":"69fb74e16ce344201838873d3ada5e8adf3d7f57","sha256":"0f4b3362b31919e25522b1547e533badb9616bccfb99eae37e5f2b2a04669287","sha512":"1313e2fdec4837f88f4a58824e5c9088398df4b1ad101348ebf4fa3740c266dce40b317a43795a3336835838c92fcdeaad69d6e5c1b2e6bd9bfe8135d4a9736b","ssdeep":"","tlshash":"aa8000cc338a0088000282c8880880080a280030b00ea02c800a3e0ce0ae8a0c028cab","first_seen":"2026-03-23T15:24:17.613435Z","last_seen":"2026-05-05T22:04:55.762806Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1632,"timings":{"blocked":54,"dns":12,"connect":1,"send":0,"wait":1522,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v2/handshake","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:18.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"OPTIONS /api/v2/handshake HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://fun-7362.live/\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Thu, 02 Apr 2026 15:14:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2F4IPH3WNZSu0OOqzaculunco%2FuZvZ0WJdCDwMiy%2FVkZU4DrbY6RXS2HqLIWUrclij9dGmac82IMSM61%2FdoF6lbxq5mLcBTg%2BDxgyak4FPEvfiK5aOkZPIg%2BOuoTW3nOLa%2F4BlUGoTlmVPeDFzFhvEvOhMFHOret6Q%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::64vbj-1775142858414-931213539632\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T01:57:16.352677Z","times_seen":17828564,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v1/visit?source=fun-7362.live\u0026wallets=","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:18.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"OPTIONS /api/v1/visit?source=fun-7362.live\u0026wallets= HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-client-source,x-config-id\r\nReferer: https://fun-7362.live/\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Thu, 02 Apr 2026 15:14:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVwI3pROrbppZejNpnBac8plW%2FkQdSBMOpKJCTFU05d3KCAyZU6qva5szvVf7Sb1EvWwMOGSvbD1NlW3RpboWKM7DbbUm6sbqzxfgMw8FXMwO%2F50%2B84kzFcORFq1YgOnmTPPMcZsFCV5vT0m21z8WNsijcM%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::2jtrw-1775142858856-d81636d1c52e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T01:57:16.352677Z","times_seen":17828564,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-gateway-5934.vercel.app/api/v2/binary","fqdn":"auth-gateway-5934.vercel.app","domain":"auth-gateway-5934.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:19.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"OPTIONS /api/v2/binary HTTP/1.1\r\nHost: auth-gateway-5934.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-config-id,x-session-id\r\nReferer: https://fun-7362.live/\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ndate: Thu, 02 Apr 2026 15:14:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ca%2BHk1zJyv63B%2Bce1xou3npRn4pC8sRsca6TnQAnZBWbTp9ev68Uh%2BGBpRDaHDJKJtxW0EXsPC6pBLpGymJeR%2BcWk3b75OvaTDb05dIgi%2BlaNsiXNaWPJwv%2B38vYHCp5vcSvli08fAIRWBDsSRPAHpQ2svL7GLWsdA%3D%3D\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::z74z5-1775142859104-e4bb39acb31e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T01:57:16.352677Z","times_seen":17828564,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fun-7362.live/","fqdn":"fun-7362.live","domain":"fun-7362.live","tld":"live"},"ip":{"addr":"104.21.24.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-02T15:14:15.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fun-7362.live","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 08:20:35 GMT","end":"Sat, 27 Jun 2026 08:20:34 GMT"},"fingerprint":{"sha1":"D0:55:87:83:81:37:D2:51:12:93:49:A5:7D:14:60:EA:A4:E4:46:1A","sha256":"26:36:85:81:81:D7:4A:F2:10:1B:D3:09:58:50:FC:BD:26:E9:0B:05:6C:78:FE:5B:9D:05:AC:78:70:E6:67:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: fun-7362.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Mar 2026 23:42:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UVbZL5I3le%2F7gmXP8vpxBMHK1V%2F1AfRukqOs3jBUhRYx%2FCpZKMCHMl4HqK4PHClJd2gOo0NVofFRYWmvxr6Tr2x4hM0QmiBlBkXV9GspqIsBXBjNim5JYfK%2FjV17SM%2Bi\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e60c83dce6a56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":8479,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"778c3612793cba6e5c3b0c1a14f9465c","sha1":"5f4c372fe631d03a2c249c5dddfc89f8476226d5","sha256":"9bc0279aff840a5ece003a6ae9c561d9ec66eb3498179c5810eac53f99678c56","sha512":"9027e885f97169c74e17791d998e829b09751178381a63a6f9690ba14f3a95d71d03e318523ca5c75eca29cb6c0cbc10ce6b7fedcfb8fdc54989e75a8f41b7bd","ssdeep":"192:o3PMSi3ey3UubRxGEGKsG6GIYPR/X4fQ0t:y0SCeSUQRxGEGKsG6Ggt","tlshash":"d9020fa478f83573420fa0dbf9a2ae152d81a693c7091204b5bcc6dacff7c85cb57495","first_seen":"2026-04-02T14:43:57.270559Z","last_seen":"2026-04-02T15:14:43.060785Z","times_seen":3,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":33,"dns":22,"connect":1,"send":0,"wait":104,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"fun-7362.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/825/small/bnb-icon2_2x.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:42:21 GMT","end":"Thu, 28 May 2026 15:42:20 GMT"},"fingerprint":{"sha1":"C9:35:3C:67:F9:7B:6C:1A:75:01:2F:53:91:3A:BF:0C:5C:83:65:82","sha256":"B5:C6:F7:D5:1D:B0:DB:20:3C:D0:97:30:1E:49:F9:7D:91:DA:73:A1:80:3F:51:D8:F0:4B:97:4A:2E:AB:B2:77"}}},"request":{"raw":"GET /coins/images/825/small/bnb-icon2_2x.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 2169\r\nx-amz-id-2: ydBK+H8lcluTF8t9NkIxp+vz084zXyKc5M29ViKQN0sCdiy5OwnGs8rWmPh2BosWQOqqvz0yz9M=\r\nx-amz-request-id: CED74JS7W0QBM4NT\r\nlast-modified: Wed, 16 Feb 2022 02:50:52 GMT\r\netag: \"39e39ca433ebda412a810fd724075584\"\r\nx-amz-version-id: v33bpgYG6.VLwv9VTOSZhRGSlcErU9GS\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\ncf-polished: ok, orig_size=3237\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 235402\r\nexpires: Fri, 02 Apr 2027 15:14:15 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9e60c8403a5e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a49b015f30960a738910c4d5c324e946","sha1":"f349162ace7d8cd19f8813d687fa9252a957c49e","sha256":"c30830ce6f2e28ebf687b66d0ff20635ddef6fe74dd05105c22e38c3c53f659d","sha512":"15321ee8f20eab6a8dab648be007bd35da6c5fee3ec96c9cb7291fff1a195c43e94e5ae6e0aa7a2f7e6f664555b59a75468e2b78912d2d223f98e4b93313a234","ssdeep":"","tlshash":"94410cd99672aa55c8ae1c4707fa10d5e67851ad8a6a71142cfa80fe001d189cb68963","first_seen":"2026-01-26T10:29:16.25839Z","last_seen":"2026-07-28T04:58:41.974058Z","times_seen":219,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/4128/small/solana.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Feb 2026 15:42:21 GMT","end":"Thu, 28 May 2026 15:42:20 GMT"},"fingerprint":{"sha1":"C9:35:3C:67:F9:7B:6C:1A:75:01:2F:53:91:3A:BF:0C:5C:83:65:82","sha256":"B5:C6:F7:D5:1D:B0:DB:20:3C:D0:97:30:1E:49:F9:7D:91:DA:73:A1:80:3F:51:D8:F0:4B:97:4A:2E:AB:B2:77"}}},"request":{"raw":"GET /coins/images/4128/small/solana.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fun-7362.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1620\r\nx-amz-id-2: zrJQrzWK6TXupd8NPzGdeO09QgAXyu1fVYwPt17gvAoKK1cWMwQAu8RZJ9ovFNQHqf1CRit1iWA=\r\nx-amz-request-id: 8J611MVZBGQM8TF5\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Jun 2024 04:02:38 GMT\r\netag: \"9f6644b0f146e9c7cad0c5b20b506082\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: cnRoe6CaxjUACi2X2EWAhiEsPtVd4cYj\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2225\r\nvary: accept, accept-encoding\r\nage: 83370\r\nexpires: Fri, 02 Apr 2027 15:14:15 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9e60c8403a65723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1620,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"0d3701ba5ad5381b2108c66b049ff364","sha1":"46109db153328c75efb9b43778d016fb4299fd39","sha256":"167bfe79b1b99143b7502bafc0918a47776d617f618a83d1a37879d843f1424a","sha512":"a3cebf200cb7ea831a38713e3198dd07a45bdd8a05664ffcf85419559abdc49c00dc7fd10515081071f679481cc5f8786ec70b844f53a9c4ddcd7cd5515ec41e","ssdeep":"","tlshash":"8b310af53196a45051ffffb03b4680e4a7aee6a7033253a9f933a8152517093489c319","first_seen":"2025-08-04T07:19:09.610937Z","last_seen":"2026-07-29T04:58:12.548099Z","times_seen":305,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflare-dns.com/dns-query?name=_r.chrome-extension-da0e5-bc.com\u0026type=TXT","fqdn":"cloudflare-dns.com","domain":"cloudflare-dns.com","tld":"com"},"ip":{"addr":"104.16.249.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://fun-7362.live/","date":"2026-04-02T15:14:15.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare-dns.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"SSL.com SSL Intermediate CA ECC R2","organization":"SSL Corp"},"validity":{"start":"Wed, 31 Dec 2025 19:20:01 GMT","end":"Mon, 21 Dec 2026 19:20:01 GMT"},"fingerprint":{"sha1":"F8:86:35:01:72:60:D4:0B:9E:B4:17:BE:E7:37:37:91:1B:63:0E:59","sha256":"E3:B0:28:26:78:9D:65:3D:22:4D:3E:DA:CB:E4:E8:77:CB:72:86:FC:4C:92:26:72:F6:22:67:41:CA:57:AD:65"}}},"request":{"raw":"GET /dns-query?name=_r.chrome-extension-da0e5-bc.com\u0026type=TXT HTTP/1.1\r\nHost: cloudflare-dns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/dns-json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://fun-7362.live/\r\nOrigin: https://fun-7362.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: cloudflare\r\ndate: Thu, 02 Apr 2026 15:14:15 GMT\r\ncontent-type: application/dns-json\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-length: 248\r\ncf-ray: 9e60c8411be70b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248,"size_decoded":0,"mime_type":"application/dns-json","magic":"JSON text data","md5":"9750ab2faa765c4801fe860d856fce40","sha1":"b62149482f73583c211d92e4ee7437ef759bc5ab","sha256":"cbbecff010627b75906404b36434b9e71bbdf54e54e29a40be4a3979cb88b912","sha512":"80e98b14b3bfd1278ccb59eaf848a5c4e4220c92de48cfe770eb3897571cc16da471b4dca7b1c92e5ecaa2707095d76c5cce7c6072264f919901757b5b7f9e02","ssdeep":"","tlshash":"7dd05e85a18880acb51a6744c48318479b7c22b273acbe799a442ea8e28f241d04a26b","first_seen":"2026-04-02T14:20:25.48326Z","last_seen":"2026-07-11T13:26:27.78265Z","times_seen":9,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":22,"dns":5,"connect":1,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-02","alert":"Sinkholed","trigger":"cloudflare-dns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}