{"report_id":"4c654e0c-3a1c-42de-bfaa-bd7f024a43f7","version":6,"status":"done","tags":[],"date":"2026-03-14T12:31:10Z","url":{"schema":"http","addr":"verification-trade.com","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"104.21.67.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"title":"AMLBot - Advanced Wallet Analysis","dom":{"size":18702,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2528)","md5":"ae84613df8c8e3c9d2cb1ecd291e6e25","sha1":"1814e0d4bc0ae88a8c2a148bcbc3885154308a16","sha256":"5a1a2de8870e14ede31b55509c930edadcef7ed1dbadee343920cec83dac4b0d","sha512":"2458208f8fdd66988f8b1b28356dcb24cdadc812b8bca556067857df4251eb49c65051a505cbda7791b78ab15e03a4497d63022fab2aaec1ed328cd1f458d080","ssdeep":"192:CVK4M9LWK05cb6beuKdYEw5s6Y6FyJbDUd3lwevc+eIPKzm9ST6wZ2IxdmfR7EIB:17MCDrT62fxdShNB","tlshash":"3082e42d9be30116a01399a9abf743553738c403ca0ec9a97b9d6314cfc75c9a8e771e","dom_hash":"domhashd176afba12a9e90467b615fb2351f493","first_seen":"2026-03-14T12:31:16.792877Z","last_seen":"2026-03-25T15:36:23.350923Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"verification-trade.com","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"104.21.67.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T12:31:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"verification-trade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"verification-trade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wallet.tg","ip":{"addr":"45.196.29.100","port":443,"asn":21859,"as":"ZEN-ECN","country":"Philippines","country_code":"PH"},"domain_registered":"2023-09-25","domain_rank":62080,"first_seen":"2020-01-17T23:26:36Z","last_seen":"2026-03-14T08:28:35.122089Z","alert_count":0,"request_count":1,"received_data":25817,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tonhub.com","ip":{"addr":"172.67.73.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-27","domain_rank":39539,"first_seen":"2015-09-27T02:20:45Z","last_seen":"2026-03-14T08:28:35.896923Z","alert_count":0,"request_count":1,"received_data":70182,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"deal-work.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":12376,"sent_data":4290,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.gatedataimg.com","ip":{"addr":"3.164.230.91","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-06-22","domain_rank":1518807,"first_seen":"2024-10-15T18:58:58.853052Z","last_seen":"2026-03-14T08:28:34.319988Z","alert_count":0,"request_count":1,"received_data":8548,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fintopio.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-12-05","domain_rank":363276,"first_seen":"2023-04-10T20:03:08Z","last_seen":"2025-09-16T10:55:34.034206Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.pvcliping.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-03-07","domain_rank":1545203,"first_seen":"2020-04-26T05:25:14Z","last_seen":"2026-03-14T08:28:35.586022Z","alert_count":0,"request_count":1,"received_data":1399,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.okx.com","ip":{"addr":"65.9.46.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2001-07-03","domain_rank":459285,"first_seen":"2022-12-01T01:12:01Z","last_seen":"2026-03-14T08:28:35.899135Z","alert_count":0,"request_count":2,"received_data":13620,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"verification-trade.com","ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":8,"request_count":4,"received_data":907610,"sent_data":1840,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"public.bnbstatic.com","ip":{"addr":"3.164.240.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2018-03-27","domain_rank":355007,"first_seen":"2020-11-23T08:17:23Z","last_seen":"2026-03-13T03:17:37.366693Z","alert_count":0,"request_count":1,"received_data":3915,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.binance.com","ip":{"addr":"65.9.46.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":10443,"first_seen":"2017-06-24T14:56:56Z","last_seen":"2026-03-13T08:09:17.623433Z","alert_count":0,"request_count":1,"received_data":584,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"wallet.ton.org","ip":{"addr":"104.26.14.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-11-13","domain_rank":654858,"first_seen":"2023-12-21T09:52:39Z","last_seen":"2026-03-14T08:28:35.134516Z","alert_count":0,"request_count":1,"received_data":6408,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"img.bitgetimg.com","ip":{"addr":"65.9.46.102","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2021-05-18","domain_rank":1433117,"first_seen":"2022-11-16T14:43:35Z","last_seen":"2026-03-14T08:28:32.685166Z","alert_count":0,"request_count":1,"received_data":2984,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tonkeeper.com","ip":{"addr":"104.26.3.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-08-20","domain_rank":36988,"first_seen":"2021-08-24T23:38:14Z","last_seen":"2026-03-14T08:28:33.866252Z","alert_count":0,"request_count":1,"received_data":2067,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.tobiwallet.app","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-01-23","domain_rank":1452188,"first_seen":"2024-10-26T08:36:50Z","last_seen":"2025-08-06T06:31:51.65049Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":453,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xtonwallet.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-06","domain_rank":60292,"first_seen":"2022-12-10T21:12:16Z","last_seen":"2026-03-14T08:28:33.689169Z","alert_count":0,"request_count":1,"received_data":8756,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]},{"fqdn":"static.mytonwallet.io","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-03-28","domain_rank":785922,"first_seen":"2024-07-22T10:39:01Z","last_seen":"2026-03-14T08:28:33.244574Z","alert_count":0,"request_count":1,"received_data":5479,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-03-11T17:32:07.6312Z","alert_count":0,"request_count":5,"received_data":202208,"sent_data":2491,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-03T16:07:08.651625Z","times_seen":236987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-03T16:07:08.651625Z","times_seen":236987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-03T16:07:08.651625Z","times_seen":236987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-03T16:28:09.838977Z","times_seen":737443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/icq-drainer.js?v=122.0.7","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"49b1790a544e0a9ee19021759b197985","sha1":"73c685179a3409b574ea57e5d31648de627faaa2","sha256":"1518834c9463017df5d95b65fb6981971a5afb2b24d04b67c5a17071b342782d","sha512":"278a1391691622ffe251199e1bcd31ac9e9c8a9ea309fd2b3c057e223054f2e48085b6525a3bf3afe8d878c19aedd5ff2141ee794ff9ef0053f53924e74dd422","ssdeep":"6144:JocORu90mzL19pz7UoVZtsEb+7hZ9wvtMj/aM2oEVY85tPBtd6VI/E7UkQ7wibKX:Joc70oVZtWIMT6O85ZIRHqyxqjV5M4s","tlshash":"1f053ad67381b161139b42d9843f0405f3395daa140e246cf7a8ecea7e78988d1b7fb9","size":859081,"data":"","first_seen":"2026-03-14T12:31:16.817814Z","last_seen":"2026-03-25T15:36:23.36729Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-03T16:07:08.651625Z","times_seen":236987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-03T16:28:09.838977Z","times_seen":737443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-03T16:28:09.838977Z","times_seen":737443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-03T16:28:09.838977Z","times_seen":737443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1568e96ffcbe219406a9fd9b548fe84","sha1":"11726d5a6e7df7c91e3f027d284014458af19673","sha256":"16be7fa227007c224760ffc78e4b9067e2b349d79042dc19b7e7fd04e0f1a35e","sha512":"3f92bfebd1d48314c5ff28f17d0c30e1a0653ee49597626d62e6a9f822a2b68770262862a86b2c8f138ad5bdc3a097360bb751c216c7f0d2f2eb2eca73e9085a","ssdeep":"","tlshash":"ca7000020a8a2200202002ee2200e2008a302002a0acc220a002000238a828c02883ab","size":23,"data":"","first_seen":"2025-09-08T03:49:16.09016Z","last_seen":"2026-05-02T06:11:26.285779Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-03T16:07:08.651625Z","times_seen":236987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-03T16:07:08.651625Z","times_seen":236987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-03T16:28:09.838977Z","times_seen":737443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cba4ab48f6f270411a1e10e4997e12ab","sha1":"b170c06cd844f2e6a6caf5c5e2bc63e9d83d2ea7","sha256":"01d4f221d7b03dcfc09771f09659f4ba91cc2d83b665a5af5852b556fa8ae19b","sha512":"80584f4094febb9707df89ecc37fb64d722f360d6e93be122e14dd3c74d738c8ca94863ca839d2c25154a86f6879c4a7db698f72fbd7999bfcbca995167280f9","ssdeep":"","tlshash":"12d02e2141d80632202b700c8a0cea0cb1af08375a26ea427a894791bfa211ad03a2d0","size":252,"data":"","first_seen":"2025-09-08T03:49:16.09127Z","last_seen":"2026-03-25T15:36:23.371054Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-03T16:28:09.838977Z","times_seen":737443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"deal-work.xyz/ton-connect/wallets","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"GET /ton-connect/wallets HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://verification-trade.com/\r\nOrigin: https://verification-trade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"1c30-jfKmdNGkht2aoFjNSVyMg1Tf2SY\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGeehyylAok2tXZ%2FoRH9%2BT74SBk1szjVjjQ0moSCECE%2FP9TVlM2jRyzWOUTk%2FMFn%2FX6kXTXBxSH6VLIUUR0GtqK57e9pKDx9rOy%2FtI8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dc34ab7a848f351-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7216,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fb0712c515f219b44768e46e87555cf0","sha1":"8df2a674d1a486dd9aa058cd495c8c8354dfd926","sha256":"56e4e057249d56250862b0b74c59aadcf6f4633b9f8ac876d5f36c36af9a3e04","sha512":"ca39ce3656e7a1bacadf2c609bd0bf1d756b6c16d96da36570e03163d00fc5727d6e6f3b3217db9a32f96b1f0db1fd0416b251eaf89ee07ecd0a3b8bb0e0b756","ssdeep":"96:uhg6SHGgaqGVcHRGHsShJCeTHNFiYIyzCFSx539MHAyAw8IEWNXNw:fHla0+ssnzN00CITzL","tlshash":"26e19cab13e88e2e275053d6288f3e6dd206218fcdc0eca9d714dc9882bd7e5115779e","first_seen":"2025-12-04T05:06:33.476667Z","last_seen":"2026-03-25T15:36:23.357314Z","times_seen":4,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pvcliping.com/web/public_image/SafePal_x288.png","fqdn":"s.pvcliping.com","domain":"pvcliping.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a257abe1.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 17:28:56 GMT","end":"Wed, 27 May 2026 18:28:50 GMT"},"fingerprint":{"sha1":"EE:AE:7E:61:DA:99:47:C3:CE:E6:9E:84:42:14:14:11:5F:B9:9B:E2","sha256":"E2:B8:22:FE:03:DD:3C:FE:DE:88:09:85:FC:33:F4:65:BB:4C:3A:E7:32:AD:50:B1:33:D8:FE:08:FE:92:56:8A"}}},"request":{"raw":"GET /web/public_image/SafePal_x288.png HTTP/1.1\r\nHost: s.pvcliping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 735\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yvCzGF6IY888vbgjFuF6N3oTOAeNmUanCrmOEIXt1iStp7e7FyVCKE8a%2B6XN6KBPlex5CHG3IrdIhwbwm9raruVam28ezEx0ysxNy2GS3Q%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"0538634f954d877d5ed633b704fc475d\"\r\nlast-modified: Fri, 19 Dec 2025 03:14:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 47338\r\ncache-control: max-age=86400\r\ncf-ray: 9dc34ab90cf2de91-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 4-bit colormap, non-interlaced","md5":"0538634f954d877d5ed633b704fc475d","sha1":"97cf8e669eafa065d964a577c7f58af15d7555ac","sha256":"2173dbf44e5b986d15cb52b206af9e85e2dcc4808aebd6f7f29fdb5949f5fa4a","sha512":"a8d4a748977b04a6e5e2a6cc205822a9286cd2c0c8d0330d83bb8ea7debe5e8460d2a62910c9be688b67e1c33444d31c111022993b3b91ebebb2c51b3d6af696","ssdeep":"","tlshash":"430160f4cece0801853f8c215418a4c8e940c28fa06ac7330db4cc1a61c9c90a93f512","first_seen":"2024-06-30T12:44:46Z","last_seen":"2026-07-29T17:03:54.748878Z","times_seen":1069,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":29,"connect":10,"send":0,"wait":24,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.okx.com/cdn/assets/imgs/2411/8BE1A4A434D8F58A.png","fqdn":"static.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"65.9.46.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okx.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D2:38:2A:1F:20:84:68:74:CD:DC:50:00:85:1B:2D:8A:98:5D:3F","sha256":"E1:BB:9A:FD:D6:9E:AA:06:56:F1:DA:CB:1C:4C:5A:B4:B8:42:10:39:55:0A:7B:77:CF:2D:CE:80:B0:08:9F:E5"}}},"request":{"raw":"GET /cdn/assets/imgs/2411/8BE1A4A434D8F58A.png HTTP/1.1\r\nHost: static.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 9949\r\nserver: Tengine\r\nx-oss-server-side-encryption: AES256\r\nx-oss-cdn-auth: success\r\ndate: Thu, 08 Jan 2026 09:08:01 GMT\r\nx-oss-request-id: 695F73F11000003532D518A7\r\nx-oss-storage-class: Standard\r\nx-oss-object-type: Normal\r\nx-oss-server-time: 22\r\ncontent-md5: 6Vkf3wo0Ww+UGzt1OfkwKQ==\r\naccept-ranges: bytes\r\nvia: ens-cache21.l2de4[211,219,304-0,H], ens-cache23.l2de4[220,0], ens-cache11.de13[222,222,200-0,H], ens-cache6.de13[224,0], 1.1 700671cc10acea065425b8871c537de8.cloudfront.net (CloudFront)\r\nx-oss-hash-crc64ecma: 12924123756059949631\r\netag: \"E9591FDF0A345B0F941B3B7539F93029\"\r\nlast-modified: Tue, 05 Nov 2024 14:25:18 GMT\r\nali-swift-global-savetime: 1767863281\r\nx-swift-savetime: Thu, 08 Jan 2026 09:08:01 GMT\r\nx-swift-cachetime: 3600\r\ncache-control: public,max-age=31536000\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: a3b53a9a17678632814612303e\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: Ak8baJkXY6XSubWrBGW7n1ZfdBiH-WKEHUGzbvbEruIQw6hAvv8HoQ==\r\nage: 5628168\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"e9591fdf0a345b0f941b3b7539f93029","sha1":"e02d4eaf76c848f97015b5ad68cfc3bd8d933d81","sha256":"25cf7ad2b8096da84a50cc694883fb1ba05803607fbb4f38d0fa2b78c3562244","sha512":"8979e2df797dedb9d545f0621c1411e3ab1f003e64844bb97ff436987bffd9371c3a27672a39e0a748357d095eb5477f13e9f6347cd7b37d31abdaa0cd148953","ssdeep":"192:EhWkElo67DLxVTx/H3Gbglet2fdj7UEQVX4G7NW16dhwNv5nO/J4J:EhWkyV7NGbZMVj4EwNW1KyN2J4J","tlshash":"b522afe0c2500d6bc46d09879fb3b4130a59f9b5ed8c74c0c6fb33ad8f5519e0195e8a","first_seen":"2024-12-02T10:58:55.332433Z","last_seen":"2026-06-28T15:09:18.494513Z","times_seen":365,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":141,"dns":65,"connect":14,"send":0,"wait":13,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/bybit-web3/bybit-web3.github.io/main/docs/images/bybit-logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /bybit-web3/bybit-web3.github.io/main/docs/images/bybit-logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"fc957d79a09dde604efa1186e885a97f7669a52fb3c2aba4aa522c6e91518c42\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 3398:1A513D:FB1B7:12F9E8:69B23042\r\naccept-ranges: bytes\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 4\r\nx-timer: S1773491450.730618,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 0dba473936dde9634ad153ad6ccae757c208ba23\r\nexpires: Sat, 14 Mar 2026 12:35:49 GMT\r\nsource-age: 130\r\ncontent-length: 8225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":8225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"5e0935c6eab1c5511a9e7feb27fe30db","sha1":"fe638d9a82f782f9b59151ce2f26680af422f1c4","sha256":"8033687342c3375ab3b21208a4af4ff5f272ad9fef15c9d8d79cbb3c8c147724","sha512":"656df1b4b4a5b19aef528e0d8b0060fd34cf2a8da79a2d3e9ee5e059212952aadbd13dc62c6ee77b862b3025b620a8d5aa8d9de80ec65e69f8ff6bf26c15f112","ssdeep":"192:wSpdi9sODYBglLjsbytX9qunUm9ES61gIbJri8vM:Xp//mnsS9qunUbS66IVE","tlshash":"5c025c9f64ed5438fab30a4a365e043d468f3b552c664d738da5bb97a1783c40c47b32","first_seen":"2024-09-08T13:18:12Z","last_seen":"2026-07-27T15:10:52.862812Z","times_seen":655,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":19,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/favicon.ico","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-trade.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 13:28:28 GMT","end":"Thu, 04 Jun 2026 13:28:27 GMT"},"fingerprint":{"sha1":"15:0A:B2:45:77:31:D4:26:04:3B:75:FD:A3:76:8A:F1:00:88:E9:A7","sha256":"9D:98:EF:1C:86:15:39:D9:5B:68:5B:14:A4:71:27:4F:FB:7C:C3:0A:0F:EF:6B:54:30:AB:1F:61:34:D0:0A:89"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: verification-trade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4S1YYAeNRRM1z5GqS7o59h8Y9zqdvQbokB1rdNXOCwSMVg0sq294gM1N1RvxA0nVWEBrbAVLqBAx02J7wyxEmpHc0K8qT1fgEkMUwE1Kxuj0j%2BUSzk%3D\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34ab549c2e9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"78849cccd9ec52846ca5577abee5e79b","sha1":"e912d99855699ebc2d0ea366e60569bb642801f2","sha256":"423f2bc2ab941f978f0145b3df8a814d86c9b5f9df81b15059e08af0c90a1102","sha512":"794a6f35f08d7035e0f62f45b6b51af94ff3a1aecff2ae6ae0d7111ea53c4357123e4ea26f5888b4b1a8f93cc2af285db388bee4119e47881cf0a9736cc76872","ssdeep":"","tlshash":"ced0ebdf8043638b4812016078c120c2274c12fab43a85e82dc2d88712d857ecfcba8c","first_seen":"2026-03-14T12:31:16.803336Z","last_seen":"2026-03-14T12:47:20.810556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"verification-trade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"verification-trade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/tracker/iso","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"GET /tracker/iso HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Full-URL: https://verification-trade.com/\r\nX-Wallet-Name: ton\r\nx-nonce: baf71eeb76f1fd18a43c34ffbd03c0aa\r\nx-signature: f6c67b92c06d5f81e077b86262f9b746e04f8bdcf30157db72e7374148595aa6\r\nx-drainer: 5Wn0YD\r\nOrigin: https://verification-trade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"11-uYsXJ3CId9A6avA5R4/fIP7VP+Y\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lmg%2BDqQJEEmlaQhl%2B4KLl0JcJsngSqm6eAfL3KoPUurvks1LdMW%2BDg%2FzIowq9On%2FpZbV7R42%2FBT2it6hqveVqnsLxVDx7EinlcNMujg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34ab75fa3f351-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bffddac39537afc19d111fef12f86c3b","sha1":"b98b1727708877d03a6af039478fdf20fed53fe6","sha256":"64a85c336f4638fe26cf8a82ae665a0288e30999dbaa24a6868210902ceb95b3","sha512":"d7ecd4a4f48eb791e13844c859d06f466a7ad615ca2339afb01d10c4353b82f393df429343eed464bc28b525b9452e38a41cc1ff787c419201ce409f8cce0a53","ssdeep":"","tlshash":"a360000002880c0202028000888a000200ab8080808a20208880220080000080000280","first_seen":"2024-10-04T10:16:58.918962Z","last_seen":"2026-06-07T22:21:05.344591Z","times_seen":24,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public.bnbstatic.com/static/binance-w3w/ton-provider/binancew3w.png","fqdn":"public.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"3.164.240.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:AF:F8:16:BA:38:D3:92:CC:06:D0:21:3C:49:7F:84:25:DA:57:2F","sha256":"E5:53:5A:4D:15:73:C1:86:18:5C:67:94:60:62:42:8A:A9:EA:B6:AA:81:2B:BF:13:0E:E8:60:83:1F:BD:5A:92"}}},"request":{"raw":"GET /static/binance-w3w/ton-provider/binancew3w.png HTTP/1.1\r\nHost: public.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3327\r\nlast-modified: Tue, 24 Sep 2024 17:31:20 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Wed, 11 Mar 2026 07:25:20 GMT\r\ncache-control: public, max-age=604800\r\netag: \"5a11a30728446ef34ac8014d50ec00f7\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 cfc62e0b84c9c493a10eb6aef6aad512.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: VPjTf6pQCZLl2dWO5xA_jHKnRJDlavisjneKQ0wUvEp4e-C53HiuQA==\r\nage: 277529\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"5a11a30728446ef34ac8014d50ec00f7","sha1":"1db62c52214cbc93f970d9555d83e4efdb8830c5","sha256":"807e8174dace81c78fc32dbfcf20bba9317bb6502a47c6697245abeb5edc13b9","sha512":"d6d37e34d98f3ad1aef0c87cdd8abc1acaf1bbbee1317cf87edb67c3c8d194ff45ba65ac3d4b47146db0a71cb1278191ead2ef36bf19c47933e35e1ac1e57c89","ssdeep":"","tlshash":"db61f7d41d4b02f2626b3811167b743e9835c4227e58bb6e32a1bf9b8354a391cad792","first_seen":"2024-10-08T20:51:51Z","last_seen":"2026-07-27T15:10:52.886387Z","times_seen":660,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":71,"dns":14,"connect":15,"send":0,"wait":11,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/hot-dao/media/main/logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /hot-dao/media/main/logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"1de198e102f5ad105bd6b35fdbcc11433afb16c250a55372b26bd0d56ee7d629\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 35A4:141F:F4E5A:121061:69AA2D26\r\naccept-ranges: bytes\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1773491450.742014,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 4d84e8b8e7a0d2924a0f0497b234694c3c19022b\r\nexpires: Sat, 14 Mar 2026 12:35:49 GMT\r\nsource-age: 7\r\ncontent-length: 54702\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":54702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"a127d8a6a542f1a60214ad74673a47a9","sha1":"5979dfa3ced667400d5269b14962f316d9783353","sha256":"102a1096653e51db8911e8bc6250d50871e237429d977267cb265870332c99f9","sha512":"0521b5924984dbb1b318dcdb722feb9e5d569cf50315c3bbb14977659e421ac43baf402d2123efcfade09b88bc5251a3eebb0db5bf20c8848110bb8d7b77a04a","ssdeep":"1536:KsKssThL7syFw6VqKiHFOSkUn8TjkV2cur4Q3AI:KtsslL7sshiHFO5fTjkV2cukQ3AI","tlshash":"e93301d6195349becd3119ead03f0a1cd5981bc2183a6797d8cc34ceeb8229573deda8","first_seen":"2024-08-22T02:48:25Z","last_seen":"2026-07-27T15:10:52.887435Z","times_seen":660,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":3,"connect":45,"send":0,"wait":36,"receive":13,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.binance.com/favicon.ico","fqdn":"www.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"65.9.46.17","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 202 Accepted\r\nserver: CloudFront\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-length: 0\r\nx-amzn-waf-action: challenge\r\ncache-control: no-store, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: OPTIONS,GET,POST\r\naccess-control-expose-headers: x-amzn-waf-action\r\nx-cache: Error from cloudfront\r\nvia: 1.1 079d0a29fa76c3721f14a4132ec9e372.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: kt44mI6ccaSPz2TzK59dSYMDduRBrbze9EFLAn6wjeg1KsnHUEeBkA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T16:30:16.639858Z","times_seen":17692840,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":61,"dns":2,"connect":16,"send":0,"wait":21,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T12:30:48.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-trade.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 13:28:28 GMT","end":"Thu, 04 Jun 2026 13:28:27 GMT"},"fingerprint":{"sha1":"15:0A:B2:45:77:31:D4:26:04:3B:75:FD:A3:76:8A:F1:00:88:E9:A7","sha256":"9D:98:EF:1C:86:15:39:D9:5B:68:5B:14:A4:71:27:4F:FB:7C:C3:0A:0F:EF:6B:54:30:AB:1F:61:34:D0:0A:89"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: verification-trade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 06 Mar 2026 14:26:10 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EAd1u9t2Z3FM%2BQEnF3VAyU8H5tBZCp%2B1Wc9YAuqmG6EUCPt5gZaOTQOkTFr5DbMWkrWyGRDE3Z%2B8wthvRpnk4fxw9qwsU4piuZyGrcVxVjWBUh%2FaYXk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dc34ab19c5aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13842,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a52c236f71c321d72600a681cf08f43c","sha1":"d767d9f2bb673c0ab0ecf7862ac70bfd864d1859","sha256":"6bcc7b7aed9e2bb301f1de6b7fb34efc82dec99f22a4a07324e461b6dc2dad9b","sha512":"8c7815430fcb1e50cd90830fa5695b7c8548d911fcbedbca142eb94397d5f6510416c2a3a8825ee8b957b2ef6f31d6fbefd5511217ed8ca6cd60e8c095833552","ssdeep":"192:ogK4M9LWK05cb6beuKdYEw5s6Y6FyJbDUom9VR6wZ2RxdmHD:67XsR62GxdM","tlshash":"9052821d9af301566457a0b96be753947b78d003c90ec8287bdda254cfcaac4a8e374e","first_seen":"2026-03-14T12:31:16.81027Z","last_seen":"2026-03-25T15:36:23.355328Z","times_seen":3,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":37,"dns":10,"connect":8,"send":0,"wait":80,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"verification-trade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"verification-trade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.gatedataimg.com/prd-ordinal-imgs/036f07bb8730716e/gateio-0925.png","fqdn":"img.gatedataimg.com","domain":"gatedataimg.com","tld":"com"},"ip":{"addr":"3.164.230.91","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gatedataimg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 18 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1C:48:16:DB:08:C5:1B:E0:A2:1B:DD:F2:6B:FD:E0:EE:04:68:A3:B3","sha256":"8B:13:3F:8A:48:DD:77:D7:34:A7:65:5A:70:FA:17:CD:E3:C1:1A:DB:1D:08:A3:BC:C4:07:AF:3E:DA:9F:66:94"}}},"request":{"raw":"GET /prd-ordinal-imgs/036f07bb8730716e/gateio-0925.png HTTP/1.1\r\nHost: img.gatedataimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 8030\r\nlast-modified: Wed, 25 Sep 2024 03:59:03 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 14 Mar 2026 02:35:09 GMT\r\netag: \"f97807ae7ba8f30ccf818e0a427a0f3c\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e3d4442c9380e0f8994d148c9677eac4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: iwXXt3CW2eFcyxbGEkVwSCWN_98JjulqrkR7b9lY1zmMvGczykT1yQ==\r\nage: 35749\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"f97807ae7ba8f30ccf818e0a427a0f3c","sha1":"f27822f62c669f0cc0c8ce0dc75936bb59d72c64","sha256":"8c2e6fc90600c3ab7c3d1c974a33113b08715852ec04de8d244a35a884a1261d","sha512":"85b38689a484a831975b3b06548c6e3bdb65f03ac1bdc17fe5b02a572c906dee3c98171369523fb62ad00373b4ceea46b7227c23c73119aa59e22950ae22fa75","ssdeep":"192:wS+8nMurZ7v0Z2j3IFQVHvtAmnbVQE+y5hX1Mkdoavj6bNX75QQW:XCurZwu3IlmOE+cOQjWr5QQW","tlshash":"f5f1d0c2c4665c8d3aa5485fbf634321b9837b37588fafdda881246d1080780b30f345","first_seen":"2024-10-08T20:51:52Z","last_seen":"2026-07-27T15:10:52.90396Z","times_seen":653,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":25,"dns":27,"connect":12,"send":0,"wait":13,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/tracker/iso","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"OPTIONS /tracker/iso HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\nReferer: https://verification-trade.com/\r\nOrigin: https://verification-trade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Utzq6Ex3%2BOIF4PICxE3IfS9ZotXjxkpP4k1uHqzvlohQqPGV%2FMbTmqxBfeZQ1AV0ihiiluy8D3P8fIYvPy9tLpk2Jp0MoqFM6s%2BYu1A%3D\"}]}\r\ncf-ray: 9dc34ab71e9edd81-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T16:30:16.639858Z","times_seen":17692840,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonkeeper.com/assets/tonconnect-icon.png","fqdn":"tonkeeper.com","domain":"tonkeeper.com","tld":"com"},"ip":{"addr":"104.26.3.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonkeeper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Feb 2026 03:33:40 GMT","end":"Wed, 20 May 2026 04:33:32 GMT"},"fingerprint":{"sha1":"05:C7:C2:5E:02:7D:1F:E1:24:1B:29:02:78:12:D2:DE:E3:DD:63:96","sha256":"8E:ED:CA:81:74:4F:5F:05:FD:0F:28:83:9B:E8:1F:CE:16:AB:EE:7A:B1:FB:79:69:58:83:23:01:E5:E8:1F:B2"}}},"request":{"raw":"GET /assets/tonconnect-icon.png HTTP/1.1\r\nHost: tonkeeper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 1284\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fdb53285ee469cb1c827e9dc50218e17\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEPqnBnXQuwXPuoeiHZcLw%2BgUdBo9GBxK8iT%2BiP48bOxi7C3Un2IRdQh4kzwwEJ%2FZI2txJt8zvuH%2Fuv%2BR%2BlmqXZGzDOG4YBFHhCf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncf-ray: 9dc34ab899eb8a18-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"cba93fd4ef01e8b6a839f321b198e6ef","sha1":"cd425ede89e3ced40f919bd9bf2867153f528e68","sha256":"b7e60fdb63fa58ac414061aec15fbe1db8d0c822fce3c379d90004ebec3fb1e9","sha512":"57223145df0dbe2ac141e408851155593552c1ae82880721326c21a633b263b8235c76afb910d91cf2fcae4ceda09c72693bbe68d88bbc394bb76aedcd9a74a0","ssdeep":"","tlshash":"ae218a03c579e3175e9b15b2552a1fc35c93a8b00dc6158fec459dcd5649c8bc71128b","first_seen":"2025-04-26T05:32:18.028477Z","last_seen":"2026-07-29T17:03:54.75821Z","times_seen":988,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":60,"dns":11,"connect":8,"send":0,"wait":25,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.tg/images/logo-288.png","fqdn":"wallet.tg","domain":"wallet.tg","tld":"tg"},"ip":{"addr":"45.196.29.100","port":443,"asn":21859,"as":"ZEN-ECN","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wallet.tg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 08:23:48 GMT","end":"Fri, 24 Apr 2026 09:23:36 GMT"},"fingerprint":{"sha1":"61:0F:BB:78:FB:A2:96:FE:1B:8C:BC:E1:2B:FC:F6:54:2B:E3:B8:76","sha256":"B1:41:98:37:A1:64:AC:7B:DC:EF:D6:02:91:0A:36:95:55:90:20:C3:F0:66:CE:D8:02:D4:9D:ED:A4:F2:B9:43"}}},"request":{"raw":"GET /images/logo-288.png HTTP/1.1\r\nHost: wallet.tg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 24341\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self';  connect-src 'self' https://sentry.walletbot.me;  script-src 'self' 'unsafe-eval' 'unsafe-inline';  style-src 'self' 'unsafe-inline';  img-src 'self' blob: data:;  media-src 'self';  font-src 'self';  object-src 'none';  base-uri 'self';  form-action 'self';  frame-src 'none';  frame-ancestors 'none';  upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 11:24:27 GMT\r\netag: W/\"5f15-19cbdbdedf8\"\r\nage: 3413\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nset-cookie: __cf_bm=ephJA7IVXUZAO4tahrYUxne84u_jfvCE6IDmYHT5.h8-1773491449.66548-1.0.1.1-ij8ErLSCP79.GIFmB1hP5FaZCXhGyTEt595c7vvAnmWDNGYNUc20zWe1EPza_cnYEa2voMoQs65RcNF65aL.YBjMLSfNMKIBxB8FjhdiEYuflcAYdRLnBovQRwFefaWp; HttpOnly; Secure; Path=/; Domain=wallet.tg; Expires=Sat, 14 Mar 2026 13:00:49 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1aW9NhHse1laRPvG4ndJuHZl8L1OEFP0thhlYimGyrKZASamvYpjWXN%2BE9ZHRTJFgV3o4aeKXHaMlwobLoA%2FNeZrQMKWSJ1A\"}]}\r\nserver: cloudflare\r\ncf-ray: 9dc34ab86e91a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"ea821489af4c2e485a86112942971907","sha1":"3fb8aab37a0bc8a4394c296adf2249f1ad494faf","sha256":"6c30dcf8baf07a22361167e8dc7e8152274db474fadf9eea0a1e7bcd9a24df9e","sha512":"c56226380bc790cd2426d8ba38acd67e52a7247302e653646c37d7809a229d6ffc085a1030de216392c51ba5c90ea6b27d43ae3700236abbadfe18f8c5b052dd","ssdeep":"384:U6Mamo5oPY3GXjRKfmka0+sGGoc5Km3ow/745k5o1RH1kL4DcfXSPG0u/Whpr:UlamvPKGXj+mF0TG3c53Yw/745wo1o4R","tlshash":"41b2e1c9968bd133bc4a5d4865985e39c6282c363d13d6056f1b72b88bf380e91d8ed9","first_seen":"2024-04-21T23:23:38Z","last_seen":"2026-07-29T17:03:54.746967Z","times_seen":835,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":32,"dns":12,"connect":1,"send":0,"wait":29,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/tracker/visit","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"GET /tracker/visit HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Full-URL: https://verification-trade.com/\r\nX-Wallet-Name: ton\r\nx-nonce: 39b372dd2b36e45167c9c86d55f26907\r\nx-signature: fef129e896a283658de1b94fb6eb044bbeaf2ac14f875aef4005e0a1817b3a44\r\nx-drainer: 5Wn0YD\r\nOrigin: https://verification-trade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nx-ratelimit-limit-visit: 1\r\nx-ratelimit-remaining-visit: 0\r\nx-ratelimit-reset-visit: 60\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r97pIC%2F7M2YUbcjgMuxiUD4KTZZ7nJ81w4gJJl7NBIsVDAaYwqOembg10knent60o4%2FGhpCmb7elAZszPT0vWsZwyleMdawI%2BKe4HeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34ab85a5ef351-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T16:30:16.639858Z","times_seen":17692840,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.ton.org/assets/ui/qr-logo.png","fqdn":"wallet.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"104.26.14.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ton.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 30 Jan 2026 13:12:51 GMT","end":"Thu, 30 Apr 2026 14:12:34 GMT"},"fingerprint":{"sha1":"BC:E7:8C:89:32:62:5B:93:4D:B9:81:53:ED:09:7D:8A:73:B5:5F:07","sha256":"68:D5:76:BA:3E:7C:A5:8D:C0:18:D3:48:82:05:FA:86:27:A2:DF:90:81:B5:F1:C3:4C:54:76:E0:97:A6:66:E9"}}},"request":{"raw":"GET /assets/ui/qr-logo.png HTTP/1.1\r\nHost: wallet.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 5386\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 01 Sep 2025 14:05:27 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"68b5a827-150a\"\r\nexpires: Sat, 14 Mar 2026 12:10:13 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 3538:192D0B:B8C5DB:BB4DFD:69B54DCD\r\naccept-ranges: bytes\r\nx-fastly-request-id: 4106f70824b233a14da5e53321602990e90b404d\r\nvia: 1.1 varnish\r\nx-served-by: cache-fra-etou8220051-FRA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1773489613.480822,VS0,VE100\r\nvary: Accept-Encoding\r\nage: 35\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EFzvPb3fY0jKeJRrrKyc7qcSbjnpHoecmYr2HwWu1Z6rcRjDaqEYaRiMRmGEfsExXcfuEjUfa0GVUONYGD3KCdzQI0ry%2Bbd49pQxAbQ%3D\"}]}\r\ncf-ray: 9dc34ab95decc8cb-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"bd4264d4c32c16d646517faf4462e5be","sha1":"df6493d70355759579c8941728747814ac5f081d","sha256":"6da4766fae3c3ba2cb931c8b3485461fddc96d6244cdc45fdb800e70e0e1a0ec","sha512":"1e63fc6f27b609bf8386333b3a535cc0a08c18594681c6344ea96dda3582ed5bb85f1bbb53f0f7c9d6b7659ec61a14c8da6b13d5f30a556779b2ebb6a39a40ce","ssdeep":"96:HzmLnGewr7Elc/cd0sNz13DX8DxS6fzuenbEdUApFXnEVMNlW75wm+o:HyDyrkbRzJDMDxREbFXgMrAw8","tlshash":"38b18e5f3da8d243ab5c913f455cc44e3201cc857a8c4a1176acc64f606a2628feea1f","first_seen":"2025-03-22T03:47:07.763738Z","last_seen":"2026-07-29T17:03:54.750148Z","times_seen":1011,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":62,"dns":2,"connect":16,"send":0,"wait":14,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/icq-drainer.js?v=122.0.7","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:48.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-trade.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 13:28:28 GMT","end":"Thu, 04 Jun 2026 13:28:27 GMT"},"fingerprint":{"sha1":"15:0A:B2:45:77:31:D4:26:04:3B:75:FD:A3:76:8A:F1:00:88:E9:A7","sha256":"9D:98:EF:1C:86:15:39:D9:5B:68:5B:14:A4:71:27:4F:FB:7C:C3:0A:0F:EF:6B:54:30:AB:1F:61:34:D0:0A:89"}}},"request":{"raw":"GET /icq-drainer.js?v=122.0.7 HTTP/1.1\r\nHost: verification-trade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 12:30:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 06 Mar 2026 14:26:10 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69aae402-d1bc9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBA1LIEGmyaTWM6X9dMJ7DsrRLhTokETCd2Um6giKKg9Fbe%2FrMZ6jkuIIKIIr50l6le8K0flTkY62Pk5rwW6U5iqb%2FTM%2BkOxi7StBNN4Yl9MacEh5RY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34ab2e927e9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859081,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44466)","md5":"49b1790a544e0a9ee19021759b197985","sha1":"73c685179a3409b574ea57e5d31648de627faaa2","sha256":"1518834c9463017df5d95b65fb6981971a5afb2b24d04b67c5a17071b342782d","sha512":"278a1391691622ffe251199e1bcd31ac9e9c8a9ea309fd2b3c057e223054f2e48085b6525a3bf3afe8d878c19aedd5ff2141ee794ff9ef0053f53924e74dd422","ssdeep":"6144:JocORu90mzL19pz7UoVZtsEb+7hZ9wvtMj/aM2oEVY85tPBtd6VI/E7UkQ7wibKX:Joc70oVZtWIMT6O85ZIRHqyxqjV5M4s","tlshash":"1f053ad67381b161139b42d9843f0405f3395daa140e246cf7a8ecea7e78988d1b7fb9","first_seen":"2026-03-14T12:31:16.817814Z","last_seen":"2026-03-25T15:36:23.36729Z","times_seen":3,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"verification-trade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"verification-trade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/drainers","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"OPTIONS /drainers HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\nReferer: https://verification-trade.com/\r\nOrigin: https://verification-trade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfRYx1%2FY4wR28YoLAHtW8z%2FKWWnkTqmkweaR5DnrvPkIwMpGjKkQW6KvlvmDjs1NNgash9PIiP%2Bk%2Fg3iUjs00uJQwUB%2BItfZSriMJAs%3D\"}]}\r\ncf-ray: 9dc34ab66d12dd81-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T16:30:16.639858Z","times_seen":17692840,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":85,"dns":56,"connect":8,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/drainers","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"GET /drainers HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Full-URL: https://verification-trade.com/\r\nX-Wallet-Name: ton\r\nx-nonce: 003ceedc5b679031a21eb69a21ef9792\r\nx-signature: 9e5da29e72f3274ee024b082ee8476b89c4677e3704861150ded63f7a8a23ebc\r\nx-drainer: 5Wn0YD\r\nOrigin: https://verification-trade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"123-8HPd+9DyrAEfXxCjhWtjN2iKymY\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gLk0PmtDcqF1dQDLO7KdOQkVf%2BSmLE98syJJU6%2F75jWUyIcy%2BzJJGgT7i%2FJJQt%2FIqMJvkwF7uA0tkVcr8fWFixgz1lDsZka8nTH1Q2k%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9dc34ab6de0bdd81-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":291,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84149caa518436c8cb8d3e0b08939d0c","sha1":"f073ddfbd0f2ac011f5f10a3856b6337688aca66","sha256":"d57f4cfeedd92a441c24a8bd37863809d3b27326d8ad78e14deeee1b56682f32","sha512":"2d5d1054a6525ae51a88b8f2799e1f530cfebe82b18bb3cd73b6d5c0eacc713668d0bc7ce772ed85b8383f8ef654ceab9f5cc7e31d6ea413527c770b7aceb098","ssdeep":"","tlshash":"35d0c297ce1c80b88d0a334e143b3e825abca6338005222cb049452152716df2073807","first_seen":"2025-09-08T03:49:16.060743Z","last_seen":"2026-03-25T15:36:23.355933Z","times_seen":5,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/OpenProduct/openmask-extension/main/public/openmask-logo-288.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /OpenProduct/openmask-extension/main/public/openmask-logo-288.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"3bd3143ce8353aa8b9d4296ec4a937b1000cf8fc46a68e40afc9cb03a4030555\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: EFF4:332BE1:A0565B:B2F8F8:69AA230E\r\naccept-ranges: bytes\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 6477\r\nx-timer: S1773491450.791726,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 2c0dbf460b3e81a12135d6b684e1ee60229b3d6e\r\nexpires: Sat, 14 Mar 2026 12:35:49 GMT\r\nsource-age: 17\r\ncontent-length: 6912\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":6912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"01781f31a294a7f938b3465853c3c415","sha1":"1bd08a5089fea9a6fb60fdecd76d6442167d9830","sha256":"25ef6e0912f90e0adea8597b19554aa1518521e6cf0a88cfaec303808cf4d4b8","sha512":"c6cf1a428835fb81d444169095fb143ef8aece980d9ce0e06f53e98a1f40c03c554efd9b53f5ef56d983711bc59e2f26a44f87e694c512db551e1bd082b96140","ssdeep":"96:7c3GRYpoQxCYkE/FESncoi3MaINhe42kPHVOMjoRKnpdY+o4QfuVg7w6Wgcl2JCx:7DYi9oFnp9ame4zYApM4QGV56WgSCojv","tlshash":"7ae129a8e70ca7b5c9689537a5205db2ccc2064c7b785a00d0eff895b6b7c77e03612b","first_seen":"2024-04-21T23:23:38Z","last_seen":"2026-07-27T15:10:52.888301Z","times_seen":686,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deal-work.xyz/tracker/visit","fqdn":"deal-work.xyz","domain":"deal-work.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deal-work.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:43:50 GMT","end":"Sat, 25 Apr 2026 15:41:13 GMT"},"fingerprint":{"sha1":"CF:D8:66:1C:48:39:1D:0E:FA:E0:D8:96:67:CA:FC:F5:18:CC:B7:F1","sha256":"F6:D1:E4:2B:0D:6C:87:00:F6:FD:C0:74:67:A0:87:6E:42:09:B6:D2:34:14:EC:F4:ED:29:D3:23:08:6B:E7:F1"}}},"request":{"raw":"OPTIONS /tracker/visit HTTP/1.1\r\nHost: deal-work.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\nReferer: https://verification-trade.com/\r\nOrigin: https://verification-trade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: x-drainer,x-full-url,x-nonce,x-signature,x-wallet-name\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPe%2BYVXgo7cRpPQZVAPek1mwnYGfDxMtzdlM7xI7S5k0G6uzWOIMCQo4hAYObcKpKRd34v5H%2F9kJXG8GxdbLWEG1KepdyboroToTUIc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34ab7c894f351-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T16:30:16.639858Z","times_seen":17692840,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/bitgetwallet/download/refs/heads/main/logo/png/bitget_wallet_logo_288_mini.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /bitgetwallet/download/refs/heads/main/logo/png/bitget_wallet_logo_288_mini.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"21792ff74f93cbcc3638c79fdc840caad35cf662774736d4a072349237457db3\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 7DF8:1324BE:44BA0F:4DB5A9:69AF670B\r\naccept-ranges: bytes\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 4\r\nx-timer: S1773491450.730845,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 54d251a61ec960a7bb032ced54e96a82d09f44ca\r\nexpires: Sat, 14 Mar 2026 12:35:49 GMT\r\nsource-age: 130\r\ncontent-length: 2656\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"c0453148d4a154472838f9795b345ad4","sha1":"a43a21ecba07f3e71ff525c91a1da9a120019d05","sha256":"98e4edb321f929be72c57efb3149f476057255631db59ea3003167c0ab4138c6","sha512":"952c63573241b0a1944760dda12218a3ad7b35eb8a08d29df3a224b08b931dd2fe39bf00d43695e263dd8fbbda17e5bede9b7bfbb0c2cfaa4c25d6b819cfb453","ssdeep":"","tlshash":"9f51e6cfba258ee53c6ac8195c7e9c61c6ceed98784ab344c921b9c2423153c2678d97","first_seen":"2025-05-21T09:31:59.826267Z","last_seen":"2026-07-27T15:10:52.899779Z","times_seen":570,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":55,"dns":2,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.tobiwallet.app/icons/logo-288.png","fqdn":"app.tobiwallet.app","domain":"tobiwallet.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.671Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /icons/logo-288.png HTTP/1.1\r\nHost: app.tobiwallet.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T16:30:16.639858Z","times_seen":17692840,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonhub.com/tonconnect_logo.png","fqdn":"tonhub.com","domain":"tonhub.com","tld":"com"},"ip":{"addr":"172.67.73.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 05:16:33 GMT","end":"Sat, 09 May 2026 06:16:21 GMT"},"fingerprint":{"sha1":"A0:6C:6D:2C:53:CF:6D:A1:C9:01:62:95:B8:6A:98:20:4D:6B:83:FF","sha256":"19:61:E9:07:31:8F:31:FA:74:FC:A8:A7:BC:56:96:B9:EA:4A:56:B4:E5:CD:F2:EF:12:24:D2:0F:D6:0C:DF:7B"}}},"request":{"raw":"GET /tonconnect_logo.png HTTP/1.1\r\nHost: tonhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 69267\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"tonconnect_logo.png\"\r\netag: \"aafd05d9de4af75985d1b39589517d53\"\r\nlast-modified: Wed, 09 Jul 2025 13:14:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /tonconnect_logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::57p4m-1753485404594-425e82e961d1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 206442\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZMYmLwT%2Brr5X8HmFT5yPzPttw5mbDudlSpnTRagLEGxZrerPZJOKGOF%2BUjzJKmNFtyp5bNdIDdTTRJ3V3ZPFfzMkxRKvK8%2Fdw%3D%3D\"}]}\r\ncf-ray: 9dc34ab8c875e0de-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":69267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"aafd05d9de4af75985d1b39589517d53","sha1":"4a55ca19e919bee7bc4a3fd4240c47b8a75f0a9b","sha256":"6781d3a7cdd5d44f7083892ec03d04058bca8214da9e7f27300e9a68e5b6aff3","sha512":"3890e38e55fd770fca7f6a8afddbba3ff6a28ea52fdcf59ec956a18cfc66cf9228cca744d5b2d1a4d76730aebcac3ea746ad9a4147603b3300551b69437fc330","ssdeep":"1536:QsznNmD+76/5T4d8bbZ6CQK/WHEXhyQ+X+:QsDN6n5cgtrQICEXhyhO","tlshash":"c563025cb32bc9197193341250729e49096bcb09710feb8fe7a590e2e7360b979260e7","first_seen":"2024-04-21T23:23:39Z","last_seen":"2026-07-27T15:10:52.879715Z","times_seen":689,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":82,"dns":13,"connect":10,"send":0,"wait":18,"receive":10,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fintopio.com/tonconnect-icon.png","fqdn":"fintopio.com","domain":"fintopio.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.657Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /tonconnect-icon.png HTTP/1.1\r\nHost: fintopio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T16:30:16.639858Z","times_seen":17692840,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.okx.com/cdn/assets/imgs/247/58E63FEA47A2B7D7.png","fqdn":"static.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"65.9.46.31","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okx.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D2:38:2A:1F:20:84:68:74:CD:DC:50:00:85:1B:2D:8A:98:5D:3F","sha256":"E1:BB:9A:FD:D6:9E:AA:06:56:F1:DA:CB:1C:4C:5A:B4:B8:42:10:39:55:0A:7B:77:CF:2D:CE:80:B0:08:9F:E5"}}},"request":{"raw":"GET /cdn/assets/imgs/247/58E63FEA47A2B7D7.png HTTP/1.1\r\nHost: static.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1481\r\nserver: Tengine\r\nx-oss-server-side-encryption: AES256\r\ndate: Wed, 20 Aug 2025 12:06:13 GMT\r\nx-oss-hash-crc64ecma: 2315367713013820641\r\nx-oss-cdn-auth: success\r\nx-oss-request-id: 68A5BA351F19783834F5E93A\r\netag: \"C72D04242C776739DC65B00DBDCAFFD1\"\r\nx-oss-storage-class: Standard\r\nx-oss-server-time: 20\r\nx-oss-object-type: Normal\r\ncontent-md5: xy0EJCx3ZzncZbANvcr/0Q==\r\nlast-modified: Mon, 08 Jul 2024 09:10:25 GMT\r\naccept-ranges: bytes\r\nvia: ens-cache7.l2de3[272,272,200-0,M], ens-cache12.l2de3[274,0], ens-cache5.de13[276,276,200-0,M], ens-cache6.de13[280,0], 1.1 700671cc10acea065425b8871c537de8.cloudfront.net (CloudFront)\r\nali-swift-global-savetime: 1755691573\r\nx-swift-savetime: Wed, 20 Aug 2025 12:06:13 GMT\r\nx-swift-cachetime: 3600\r\ncache-control: public,max-age=31536000\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: a3b53a9a17556915731972462e\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: LbtRj7NXPRnbvG8WMUgCI5PEIuKEbn1s0gHvZwbh4v6JICg9owMwaQ==\r\nage: 17799876\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 270, 8-bit colormap, non-interlaced","md5":"c72d04242c776739dc65b00dbdcaffd1","sha1":"63100f059745133569fae6f2d882c27aba01b524","sha256":"18f089d08eec3be12ebbfaf98d8e3706141d1a0ced66e01d81f9ea053d643b3b","sha512":"8125a45c50652872bc8939c168452f2b8796a36ce6800c17add4d30c4819829171058be3b83a77598c649b1cec5c6890ad95cfbe793d0b797362c4e577ac6692","ssdeep":"","tlshash":"7631b41433e0c816f62d597cf00751ab9c22d14e1bc083a635e1e39ee4aad34f34d89e","first_seen":"2024-07-27T14:53:59Z","last_seen":"2026-06-28T15:09:18.446737Z","times_seen":429,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":60,"connect":14,"send":0,"wait":15,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/delab-team/manifests-images/main/WalletAvatar.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.109.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /delab-team/manifests-images/main/WalletAvatar.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"8dbb8cf969074110c12c47e9e303ff0e0ce7e7f65699b681d502c8cb9ec6f330\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 48F4:C8046:3F3A16:47C017:69AF62B9\r\naccept-ranges: bytes\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: HIT\r\nx-cache-hits: 6\r\nx-timer: S1773491450.733822,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 51ed8772eea17d95879398e92f96fb37cc6cf21f\r\nexpires: Sat, 14 Mar 2026 12:35:49 GMT\r\nsource-age: 171\r\ncontent-length: 125350\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":125350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit grayscale, non-interlaced","md5":"76785cabe454661186dde236a5e887be","sha1":"037a3fdb5a329176006e067a17047146157568cf","sha256":"3f7399ef75d19d2278cfe2b9a7bc1fb8d396de9f28806f60e730f1734a2fa015","sha512":"2607fd9ddbea4a129920a047de7b9000bdbb407dc42e965811c0b329e785bf4f15bc46e2e083de823393311edf1a17f09eb4fc69ef99d2f98921d92c69717f7f","ssdeep":"3072:iM1uQX3BaDEhqwF4zkUDGxdeac82lyg5iv16yXYRHK:qG3wwq2kGXeac82wg5mFMHK","tlshash":"94c31292da37fbd1f6741640f125ba6a4533427a0507a39f8a6f82ed508878f29f1dc3","first_seen":"2024-12-14T03:28:29.072761Z","last_seen":"2026-07-27T15:10:52.87242Z","times_seen":650,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":24,"receive":23,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtonwallet.com/assets/img/icon-256-back.png","fqdn":"xtonwallet.com","domain":"xtonwallet.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtonwallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 20:09:50 GMT","end":"Sun, 24 May 2026 21:08:30 GMT"},"fingerprint":{"sha1":"3E:92:3E:36:5A:17:35:D1:F8:84:87:AB:40:FC:45:B7:70:E4:0A:81","sha256":"B7:4A:FD:D7:CF:30:B9:49:AE:D9:9B:C5:EA:C5:9A:CE:56:FF:3F:62:3B:00:25:95:83:60:7B:58:5C:70:CA:06"}}},"request":{"raw":"GET /assets/img/icon-256-back.png HTTP/1.1\r\nHost: xtonwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 7747\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Apr 2023 15:34:09 GMT\r\naccess-control-allow-origin: *\r\netag: \"643037f1-1e43\"\r\nexpires: Thu, 12 Mar 2026 23:47:13 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 6746:23B14E:4BA96:580E3:6878AB6A\r\naccept-ranges: bytes\r\nage: 107\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1753238934.941937,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 8daa25d9a7df9911583634e312b45a5503d25e67\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XCbTT%2BQKMDSbvTB4OD8%2BXKhHnxXsHzuPILrYMN9O9SwlMV7Thl9ook3bM%2By%2FQ1SCr4PGX8kJiyaNjLi6y3WTWUDtr5mejdiVlbqnb1JV\"}]}\r\ncf-ray: 9dc34ab95afb9ade-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":7747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"0983df3ca4f09d3d163cc00073d732da","sha1":"eae458b0b90c8b7c54fa7ee30a19262b4f6d322b","sha256":"ace8dd194c4e421b91d44669bab890974dc28265a1196dd41c48c70abe8debc0","sha512":"7dc6ce1455e78d1bfd4e749b8735e63add6d245a19b7f8010e13c643ac12f24f68545a6f615251a9fc85badfb7f1037b10fa133013141adfc4f91155f5e2cec5","ssdeep":"192:DHdDBqucOLMlzA79aKMgII+yIj34a7eDJCl9XMpgusjCMf7:VBq7OoNcn0wVa7eDJCl9XM/TW","tlshash":"10f16c34e467c40dda947244d6b305d47ed390118f97dbef5e6c5b2a2b888e38e82663","first_seen":"2024-04-21T23:23:36Z","last_seen":"2026-07-27T15:10:52.889413Z","times_seen":687,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":63,"dns":1,"connect":12,"send":0,"wait":12,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.bitgetimg.com/image/third/1731638059795.png","fqdn":"img.bitgetimg.com","domain":"bitgetimg.com","tld":"com"},"ip":{"addr":"65.9.46.102","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bitgetimg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 18 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2A:62:D8:BF:3C:71:66:A6:B8:59:AE:13:12:43:5F:AE:B0:26:0E:74","sha256":"0A:97:0D:1E:E0:C0:2A:E9:31:96:E0:5E:69:71:28:EB:EF:3C:A0:13:E5:6C:C9:18:BB:9B:00:4D:2A:DE:6E:4F"}}},"request":{"raw":"GET /image/third/1731638059795.png HTTP/1.1\r\nHost: img.bitgetimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2176\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 15 Nov 2024 02:34:20 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: kTM.fRny3dTfee6kRzxAx9r5poaeak4k\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 14 Mar 2026 11:46:14 GMT\r\ncache-control: public, max-age=2592000;\r\netag: \"66f9465dab82cfa9e91c008cbbd83649\"\r\nvia: 1.1 f9ed88582707ec58c61e5c95a41d4ada.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2676\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: TMXXs_IlKCldEvKbxc3bgEnR5_JucA0y7HjgCZEwJlyUy6NGGPlpUg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"66f9465dab82cfa9e91c008cbbd83649","sha1":"1b5637ff897b66c739fe9988075114d834924582","sha256":"ac6d46035cd7a544ecf1978702511542f56d35ca51c729551ba0da5bfc5a9176","sha512":"6aa2e1429617b91a28d51062eecadace89601888912ca88f46d5c2395136f9c3c4a21cac2afa9a2a7f4e5a0603e4654a1a07df910544b1b59bfa25e8f6450729","ssdeep":"","tlshash":"2041dde95a824bf1340a315246797a3fe420c4603916be1f65403fafdf96a794d9c6cc","first_seen":"2024-12-02T10:58:55.343769Z","last_seen":"2026-07-27T15:10:52.904932Z","times_seen":649,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":40,"dns":3,"connect":15,"send":0,"wait":41,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.mytonwallet.io/icon-256.png","fqdn":"static.mytonwallet.io","domain":"mytonwallet.io","tld":"io"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:49.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.mytonwallet.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 04:24:32 GMT","end":"Tue, 19 May 2026 05:07:23 GMT"},"fingerprint":{"sha1":"2B:07:22:0F:75:A2:28:48:BF:FA:E2:04:DC:60:AD:86:6B:A6:BA:9F","sha256":"3D:CA:61:56:88:84:C5:8A:C2:2B:7A:E1:CD:C9:91:9F:1C:DB:10:7B:66:C3:3D:42:3B:8C:CB:FC:32:18:16:64"}}},"request":{"raw":"GET /icon-256.png HTTP/1.1\r\nHost: static.mytonwallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:30:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 4757\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2c065393c462dd7b5b4a94a114b8f4ee\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GOS7bJKUrihkRXxOxyZDZBwwxBPRAHG9N1a%2FYXWevBnO2QpCceEAe%2BZNSHjeo088X%2FfodL2Kq6ml9MGxrCS10AS0%2B3WLWx5Cvo%2BC0fE3V9lkvkUNsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9dc34ab8cb011f50-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"9c99a1956e242fb70baded72541ffd92","sha1":"082f808542c3fb82616e0c72e8eafd0c520531c1","sha256":"01b23585151ba32129c7ea121bb156f4064f6f3234c7e543bc660b775fe54871","sha512":"9fa1a9f1f077ee0092ec5d57a346693cfd2bd1575b3d2d99d411402ad659793313e50bac91118c39ce0d949e1d28de958a1aa214fbd1f8fa9de14881c7c75393","ssdeep":"96:LSyBAvitJVte8Ir4md9tjbJ/6sojcynHwHYqiebuHU:LSyBAQfU8IEmvtjbQxjCZPu0","tlshash":"d8a18d6913a62f00e0be22f33b88a2048767738344716b0b6e69200f3e1cf9501eb1f1","first_seen":"2025-04-19T14:12:50.877844Z","last_seen":"2026-06-28T15:09:18.446084Z","times_seen":931,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":79,"dns":13,"connect":8,"send":0,"wait":29,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-trade.com/icq-drainer.css?v=111.0.4","fqdn":"verification-trade.com","domain":"verification-trade.com","tld":"com"},"ip":{"addr":"172.67.183.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://verification-trade.com/","date":"2026-03-14T12:30:48.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-trade.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 13:28:28 GMT","end":"Thu, 04 Jun 2026 13:28:27 GMT"},"fingerprint":{"sha1":"15:0A:B2:45:77:31:D4:26:04:3B:75:FD:A3:76:8A:F1:00:88:E9:A7","sha256":"9D:98:EF:1C:86:15:39:D9:5B:68:5B:14:A4:71:27:4F:FB:7C:C3:0A:0F:EF:6B:54:30:AB:1F:61:34:D0:0A:89"}}},"request":{"raw":"GET /icq-drainer.css?v=111.0.4 HTTP/1.1\r\nHost: verification-trade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://verification-trade.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Mar 2026 12:30:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 14:26:10 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"69aae402-7c1f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLWXTx9hZTF3BHsr%2FXZkUm0HnelXgzQgYHJyvkxDpn3XsptATqin4PEaAU8RLCxvvSXo1O7Z79RDG%2B1eiJPWr%2BMaqaoNXp84SiM%2Be1Xf16lcfnIprLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34ab2e926e9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31775,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (31775), with no line terminators","md5":"680a90d4058d937add448567916348bc","sha1":"1ad2dc050b62559eeb0b869486c00af768d0de8e","sha256":"573023f328f974e40f18425d880c49de6ea75afb14fce1748c9b55254834a8bc","sha512":"8f1ccc8a3372bac57a8bf76ac9993138e0a7dcd77284244bb33ea6304ea00552a12a2c80f2b36059a3920927728d540b18d62e6beaffe980c51bd5f8c941a8df","ssdeep":"192:F7w3TY5MVka7JXea7JXek7JXeS7JXedVEni2iYi1iiiZi2iYi1iiiXsMX+zzhLNl:dwkmFnh1lsMM9Dr3YhgeJCknl1ThsP","tlshash":"ece263056529917e6c13a8e9c3ccb88d7518b0d09c3f59fa7f6250226bc37f82eda719","first_seen":"2024-12-13T22:54:00.977989Z","last_seen":"2026-04-18T21:10:36.824025Z","times_seen":11,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"verification-trade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"verification-trade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}