{"report_id":"4c681d8d-2289-46db-8e75-4aee9cd8084e","version":6,"status":"done","tags":[],"date":"2026-04-10T14:31:59Z","url":{"schema":"http","addr":"domain-phrase.cfd","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":0,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"domain-phrase.cfd/","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"title":"BNB Wallet — Secure Crypto Wallet","dom":{"size":110861,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8208)","md5":"9389a55643e1741fbe1fa1cbf331e031","sha1":"512848b4c38ea484ce26bc0b214b9caa16418b14","sha256":"76cc53e63453d64ebfe15f7e1f1934405a4734f7eb68eeb4cf2df262a4b8f862","sha512":"384925f6c11dbe68b09d2e219393135023a30dc952a22f1420c9d4501fdc530f0a45fe985849e120c9140bb9a01f9b22f2187edb9958c21009e4bb257003cf57","ssdeep":"1536:8lo9nGFEnuIVY1Gzs4agH0kic7mbRpS9tRzJH6z:8li+M8R","tlshash":"cab319b463f152fae043d3e5e5218676799964a7e6038768f3fc0e91af87c9ccc42492","dom_hash":"domhash29c333e396a935ec57435d51868d9e2c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"domain-phrase.cfd","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":0,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T14:31:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"domain-phrase.cfd","ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-04-08","domain_rank":0,"first_seen":"2026-04-10T13:54:17.003129Z","last_seen":"2026-04-10T13:54:17.003129Z","alert_count":0,"request_count":25,"received_data":1283309,"sent_data":11422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.binance.com","ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-04-08T12:12:27.449459Z","alert_count":0,"request_count":2,"received_data":6211,"sent_data":1062,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"domain-phrase.cfd/opener.js","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"626f102d503e6c1fa82f9030873fb044","sha1":"5e9b6f5ac49392cbf9556702e6921ff79955d16a","sha256":"f3dd42f739dc3b33cf782de87e214403874b464a4ffcf8bbe54d7703272b743b","sha512":"98a7442d7449824879c86160c1ca1ec552e38e0a719781d769db7a6bf29b5ba1be94a7387f568977e913a01c62d2fc1e6183ae802b99cb4bf0660c6879a06947","ssdeep":"768:Tgu/tk4n0Nki0kGOHicaVzK9EbeasQjx4XDsw9AWtna5kosRJYLC6G5Nf/tWGdNA:TgH/0kic7mbRpS9tRzJH6ylWGxO","tlshash":"b65319dd27f463f4e417e7f6d9234456ba0a24f7aa428774f3bc9e04ab62498c845cc2","size":61834,"data":"","first_seen":"2025-07-31T16:18:58.312379Z","last_seen":"2026-04-10T14:32:00.973739Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bb15469de657031e2aca36039ab9e97","sha1":"7661f7f80b9d38fe05d0e9e01d00e47e734e0a6c","sha256":"c7a4e337cf974f7642647a3f1ed9766c2095d35547fdb348e701225c78be76a3","sha512":"be1d561d194c0de9a07e189d0cc94e002908ab8820e1d87646f5c278509d2f732e7d7812960bde52e313518dec0650678f9526201979ece2efb63a6972a4deb3","ssdeep":"","tlshash":"db4131f275b3240206a7217807db62156edca0c76a10cb4a7fdc4a851ff9c2881fabdd","size":2326,"data":"","first_seen":"2026-04-07T01:03:36.596638Z","last_seen":"2026-05-30T03:46:51.800072Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/assets/js/main.js","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"13208b0f08751210c68c28f1397e1301","sha1":"7f6dd7925a938b8dc22c669c66f3329509c0095c","sha256":"d3b3ce64b8c153817bf1d43af3ff56361dab898b6b7df0b709919aebceb6d2a8","sha512":"e5b54118832e1bea8ff17e730e434be8c7c7fcc996408d8edfc2d91f819bcca326e770046824dc908b4164ecea43f25ea91beae88c18f11d7ad60e6ff995be94","ssdeep":"96:RFFuZVXoDXWXU3MAbGJ3gqAbGQAbGRcLUQDqAHsZokii7eyAM7fCfCp58ZTGSOGL:yVXozWX4fIyiAcIU3s7iiayAM7f6a58R","tlshash":"3ca13220bf54075813878eeb330b74d4e1779ca67a41448ea13c6d5dba22606fbe767c","size":4776,"data":"","first_seen":"2026-04-07T01:03:36.569179Z","last_seen":"2026-05-30T03:46:51.797371Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":true,"md5":"436515d77da9511c1337cc6923d58553","sha1":"3168a537cb606f97c52ea27b3bcc134bcd4a5c5c","sha256":"01d74d6225e861b24d1af36ed9d47f4e382e586aa2eb541560ba2eab6fb1f4ec","sha512":"581478df6d6f89dd94f9978e61fb3fc6de2edc275846b7fa698464b497d5c0ac6954ae9c6966fe212189ae99a6ce3c867eac92d7c45d161f07927abfddc11979","ssdeep":"","tlshash":"f111f25433a341a1e652476aab47261c2435f3033f13dedcb94e42084fdea9ce1faac8","size":863,"data":"","first_seen":"2026-04-07T01:03:36.59978Z","last_seen":"2026-05-30T03:46:51.80143Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/opener.js","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"626f102d503e6c1fa82f9030873fb044","sha1":"5e9b6f5ac49392cbf9556702e6921ff79955d16a","sha256":"f3dd42f739dc3b33cf782de87e214403874b464a4ffcf8bbe54d7703272b743b","sha512":"98a7442d7449824879c86160c1ca1ec552e38e0a719781d769db7a6bf29b5ba1be94a7387f568977e913a01c62d2fc1e6183ae802b99cb4bf0660c6879a06947","ssdeep":"768:Tgu/tk4n0Nki0kGOHicaVzK9EbeasQjx4XDsw9AWtna5kosRJYLC6G5Nf/tWGdNA:TgH/0kic7mbRpS9tRzJH6ylWGxO","tlshash":"b65319dd27f463f4e417e7f6d9234456ba0a24f7aa428774f3bc9e04ab62498c845cc2","size":61834,"data":"","first_seen":"2025-07-31T16:18:58.312379Z","last_seen":"2026-04-10T14:32:00.973739Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"domain-phrase.cfd/assets/images/aiwallet-logo.svg","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /assets/images/aiwallet-logo.svg HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 26514\r\nLast-Modified: Fri, 13 Mar 2026 00:04:42 GMT\r\nConnection: keep-alive\r\nETag: \"69b3549a-6792\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26514,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37b6a85887060c2ba54d6c1f768122d8","sha1":"0643090b68960f995d7b4343c66501f94d472d5b","sha256":"a4ab4d1d15ecb9d75599264c945b2439b3c4dbffcf7811a9e8454bb96171bd78","sha512":"f29c0d97230d72b5f070fb14b7c68d03f75d9a62af7a545f3620517fe1e5b4f6b828614c7522b4451d5416a27b841222239404abab024bb781848d429cdf9a0c","ssdeep":"768:XI2eVdExHZuCandr59bpD+7z+d7CrnZ3TG923R:0E5ujd1pxS+Gdy9ER","tlshash":"57c2f9d8737842f8d6ad63e4c9e2a86d3a1b35fa3b0080588b5e3ed19d2359c495dcc7","first_seen":"2026-04-07T01:03:36.593043Z","last_seen":"2026-05-30T03:46:51.782771Z","times_seen":11,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":157,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/coinbase.webp","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/coinbase.webp HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/webp\r\nContent-Length: 5788\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nConnection: keep-alive\r\nETag: \"69c42072-169c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5788,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41cda3747eadfba06880d017f222e96e","sha1":"ba99c16f6c8bb94add263500d9b19329d42c6505","sha256":"b2905215c8fd80b5fa56e8787e77d922891fc7fcf7f386b93050ade3fb0d83ae","sha512":"82d51b0f94cf9d1986ec7c93ad61a1eb4a50f9747ff860a1af64a355d85ab126e6e4668fde6390e273c49abc17a81d8c49d80e35458506ccf01024848742e8a3","ssdeep":"96:tIWZZfWLinzorwmh0o4e/XVIB5ifjutGdOthbG3Up3Ez:tIWyLinzFfAu5iKnhK3Dz","tlshash":"86c1afe3a54bd4b56d7b313aeed2d6f54cc638733c218ea671adeacd4189dbd2062004","first_seen":"2025-07-31T16:18:58.304281Z","last_seen":"2026-04-25T07:21:54.070006Z","times_seen":19,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/typhonwallet.png","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/typhonwallet.png HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c42072-a6b1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"42325f6a21d8e1018d656baf42742c2c","sha1":"2a6a31373a772732c6e7cbc270939310cc12b7c6","sha256":"953d5981bbf2c07e1008f7b5450aa57ed6a0aeeab08e53d4b6cfc8dee414689f","sha512":"5c7c0a6feed9f0f310cee8904b990591d82f3732b5a818a85874218e50a6b7ed21bcebbd9a94999c87ac3bfe1ff6eb29899b2cb3926150d97fc2b8145a823957","ssdeep":"768:H4D/gHAMB+OExbBbDWO32hyvJUcg6T8bxeReEzFI/3waFGCq9NMZGyX/qc0w:H4DYgMSxbBaO32wicXqnES/gaFGiZ9XL","tlshash":"ae13e16d5d36e9062c2b42358b8b5fb2d16304c9dafe8f3dc21485268c60d1de57a2f6","first_seen":"2025-07-31T16:18:58.297475Z","last_seen":"2026-04-25T07:21:54.04509Z","times_seen":19,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":264,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/flint.png","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/flint.png HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c42072-53a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"a8e8560ba500aa61f43b6e054cc04b36","sha1":"fc15453d4bd3a6000a77a51dc82b579cc8cadb9c","sha256":"b0ceeb876aa169695c28a8556f9d67c30aeca66ae9968e5bef80528ef6efed02","sha512":"edf1cf9c9eab46f8d0bcb2cefad94bd52f7db4dd1a9661893b1e28821561da51abc8f45a53c0504307bafc94add209f07c49877d76f1d215e3b41b092422d13f","ssdeep":"","tlshash":"3421081fc76c1d38ebdc5e6890213000863456458f224381b48da90ffedaf9f92238c5","first_seen":"2025-07-31T16:18:58.261654Z","last_seen":"2026-04-25T07:21:54.056149Z","times_seen":19,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/opener.js","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /opener.js HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 25 Mar 2026 17:40:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c41dff-f18a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61834,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (49298), with CRLF line terminators","md5":"626f102d503e6c1fa82f9030873fb044","sha1":"5e9b6f5ac49392cbf9556702e6921ff79955d16a","sha256":"f3dd42f739dc3b33cf782de87e214403874b464a4ffcf8bbe54d7703272b743b","sha512":"98a7442d7449824879c86160c1ca1ec552e38e0a719781d769db7a6bf29b5ba1be94a7387f568977e913a01c62d2fc1e6183ae802b99cb4bf0660c6879a06947","ssdeep":"768:Tgu/tk4n0Nki0kGOHicaVzK9EbeasQjx4XDsw9AWtna5kosRJYLC6G5Nf/tWGdNA:TgH/0kic7mbRpS9tRzJH6ylWGxO","tlshash":"b65319dd27f463f4e417e7f6d9234456ba0a24f7aa428774f3bc9e04ab62498c845cc2","first_seen":"2025-07-31T16:18:58.312379Z","last_seen":"2026-04-10T14:32:00.973739Z","times_seen":16,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":69,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/assets/vendor/fontawesome/css/all.min.css","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /assets/vendor/fontawesome/css/all.min.css HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 11 Mar 2026 12:40:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69b162b2-127d8\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75736,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50617)","md5":"07a04d43d67adc55c158f590a82769b8","sha1":"2d705ec01abd15d4e089244c19d9354215967c00","sha256":"315a2999dc82dad613889f30964b5fd2e874bf83604febcd7725457a98bb4347","sha512":"9cc26342e75be9130caf4f2863a6127cd9445a5d65f175aea0ec0dbed597aeb815b3c30247c019041d6d1003bea20888f77817b46d573e683e6c03f90e872148","ssdeep":"1536:dBM1MvMaMfM0teX0pEbpNG2eLZy8lkv/erkh7:yteXoEfGc8mWrk9","tlshash":"a2730d02ad84019bb4568d7f3885bf34a6f2eb28aad14595e4344d847ef28fd314fb72","first_seen":"2026-02-11T07:20:24.324566Z","last_seen":"2026-06-08T08:59:48.706027Z","times_seen":640,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":139,"dns":1,"connect":62,"send":0,"wait":117,"receive":17,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/assets/js/main.js","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 11 Mar 2026 12:40:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69b162b2-12a8\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4776), with no line terminators","md5":"13208b0f08751210c68c28f1397e1301","sha1":"7f6dd7925a938b8dc22c669c66f3329509c0095c","sha256":"d3b3ce64b8c153817bf1d43af3ff56361dab898b6b7df0b709919aebceb6d2a8","sha512":"e5b54118832e1bea8ff17e730e434be8c7c7fcc996408d8edfc2d91f819bcca326e770046824dc908b4164ecea43f25ea91beae88c18f11d7ad60e6ff995be94","ssdeep":"96:RFFuZVXoDXWXU3MAbGJ3gqAbGQAbGRcLUQDqAHsZokii7eyAM7fCfCp58ZTGSOGL:yVXozWX4fIyiAcIU3s7iiayAM7f6a58R","tlshash":"3ca13220bf54075813878eeb330b74d4e1779ca67a41448ea13c6d5dba22606fbe767c","first_seen":"2026-04-07T01:03:36.569179Z","last_seen":"2026-05-30T03:46:51.797371Z","times_seen":10,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":159,"dns":0,"connect":77,"send":0,"wait":69,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/configs.json","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/configs.json HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: application/json\r\nContent-Length: 2332\r\nConnection: keep-alive\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nETag: \"91c-64ddce8138080\"\r\nAccept-Ranges: bytes\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2332,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1fea3f717f2adde778dbf322b6f98ba2","sha1":"c1685f602fc4f2c4cc6afd998f783c2d0fcb3a69","sha256":"a33c88a742c362d8f718feffc9bf4c30b1d6ccbd2b33068a9cf74885c139eb46","sha512":"aa2ba2fc4c3bc2705005d9f677db203efc796554e6e1eec03c4eff6473c5ba93c739730a5b2c8789d900c7b8b8f27944f46847d600829e9c47dbd2d4cb1b85ff","ssdeep":"","tlshash":"c841a567db849e3b9839236668b643b7f5a5136f63050c2b3bfc594c9f72920346390a","first_seen":"2025-07-31T16:18:58.289732Z","last_seen":"2026-04-25T07:21:54.065118Z","times_seen":18,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/cryptocom.png","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/cryptocom.png HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c42072-1f8d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"0de735af6b37bae04a222602fb031e74","sha1":"7039a875e0e33bb227ab82e0e78a9319f7f36858","sha256":"b87bc0c06b082e2ce3148fb97701dffa2ec6ec00264eb9ca6015e8f65dab47a6","sha512":"7d8c942987674b427c3de1cb313e8c92417b1f62a924f919370ea7e8d160bc4eae87b6dd42e22d39216c658edf58bb57fba35f81c54957547a2e7f08b226ed61","ssdeep":"192:1tEkTftElw862NLN4yq77X1M+B8pNMKgWT6ZAcVkzMe:HvTfkwgEhBBXKPGycCzx","tlshash":"16f1bfdcdc144bd6f22f9c015928bc5eb09ba16f6508a7649b23273668b81a8210de4f","first_seen":"2025-07-31T16:18:58.305873Z","last_seen":"2026-04-25T07:21:54.067989Z","times_seen":18,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/phantom.png","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/phantom.png HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c42072-83b7\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"6af764d4be1436e1a31e155c1d3a3f07","sha1":"a3653f10bce8f8ed6474606e05b30bf943702647","sha256":"4fa7d2f462d5cd29a7206959ec4768132349da3b303551995820cabb0e4a0fbd","sha512":"053fe5d063051e9ba1e61e54591a5e7374aadc68f4939d370751396768d83ad2c1b8bff916cf6232d3a1752355c330607cbc7e3be99efca27944ea75274effd1","ssdeep":"768:Psc7Ni71AlNBYP/HvAoEuQE5ywPSHctrBLJq6IFUNyi34RInX:Zk1AlNB4wjE8wPSHWrxJq6IUsHIX","tlshash":"d6e2e01e8d832821e840087a23d997ec397b3b817d12e9320729fd2bed274f7e554597","first_seen":"2025-04-04T19:06:21.67054Z","last_seen":"2026-04-25T07:21:54.058427Z","times_seen":40,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":273,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/zerion.png","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/zerion.png HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c42072-28d0c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"837dc8014028d1bf9e4c24f732aecebe","sha1":"5bedb142ddcae467282ea54db8443ea854927c59","sha256":"2142ef80e406b0f60488d0bede350ee24a5d7447febd8bd625e9672cdb0f58aa","sha512":"2259ce1909df9c2905c52a85e905e2cfe1ecd74f337904ebba85d5b5ab30159d48ebbb5e61380ee5c8a1d02c7d0f7732b091c862df31c01048f895f1c91347e6","ssdeep":"3072:pymloANFAlziOlKkn/XEh7Y1kYBTIh7AcrNp24HsnMHNJg/tu5Jl03dTaTuSV:pymlvE5PMManXAcrNp2OsMHNJg1uW3ap","tlshash":"aff31242328bd757444c1f230e17965686ef383ab21fc8285a70d9acfda55346ff2a1c","first_seen":"2025-07-31T16:18:58.28796Z","last_seen":"2026-04-25T07:21:54.046994Z","times_seen":19,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/rainbow.png","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/rainbow.png HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c42072-1fa17\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced","md5":"866a10b70a683c18a8211e7cdac60615","sha1":"cb7d6a4fdb86b66d1f26046a9814f8a7c5fe9267","sha256":"8d4853d3888b296f8c1e54fa6febcbfe4fe478695b2753bfab2eaf3b8a839451","sha512":"269fb4402948a17200319ae0d895807612a94fe48c20e33046d5adf8a9be491915b88528364221b532d54c9b2eeddf401d8b5b936e089339469b9eb8dae4a6f5","ssdeep":"3072:uPJpoXngswJQ8y2m100N9qdYQK383ZRDkGbJcN0QOPrJe15DydA5:uDoBwJbcsYd8JRoNkrJe15X5","tlshash":"e0c3121ca33c526af5f46b028541e2cbd9fb78891e7fb878009864b70151ecbb974d6b","first_seen":"2024-03-17T05:24:49Z","last_seen":"2026-05-02T00:13:54.376618Z","times_seen":110,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/ticker/24hr?symbols=%5B%22BTCUSDT%22%2C%22ETHUSDT%22%2C%22BNBUSDT%22%2C%22SOLUSDT%22%5D","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/ticker/24hr?symbols=%5B%22BTCUSDT%22%2C%22ETHUSDT%22%2C%22BNBUSDT%22%2C%22SOLUSDT%22%5D HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://domain-phrase.cfd/\r\nOrigin: https://domain-phrase.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 681\r\ndate: Fri, 10 Apr 2026 14:31:38 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 7b3fcaf1-3156-448d-8a76-34783d36a3b5\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ac3e1d7135d19671e1860c67a45b3f70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: je9HeS6a9fdW5QJ50vNGyDRtAmeoWMMggPMBF4-2jssYGIH-3D_YZg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2182,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"03b76f77cbcfdf668eb3f32b63bca050","sha1":"5243b40d20e1554e03caf32c725e45c40429d48e","sha256":"11fbf7d1a4702b1212d084113d75f689508805eb1f1845f0db0d47d2143eff94","sha512":"8cfb44635ed5548b35171ac50ead0cf1a6764d733628073f9cc3d8d432c87d0bee5ddce147b925d123f7e6b19fee1f68c41fdaf174e3c215e1a21184a77c6c0e","ssdeep":"","tlshash":"8441a6f6e6188e88c57d4e995f86b434a4d6b116c3d98f118bee1ba205f6b3f100c381","first_seen":"2026-04-10T14:32:00.979552Z","last_seen":"2026-04-10T14:32:00.979552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":88,"dns":80,"connect":1,"send":0,"wait":245,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/opener.js","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /opener.js HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 25 Mar 2026 17:40:15 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c41dff-f18a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61834,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (49298), with CRLF line terminators","md5":"626f102d503e6c1fa82f9030873fb044","sha1":"5e9b6f5ac49392cbf9556702e6921ff79955d16a","sha256":"f3dd42f739dc3b33cf782de87e214403874b464a4ffcf8bbe54d7703272b743b","sha512":"98a7442d7449824879c86160c1ca1ec552e38e0a719781d769db7a6bf29b5ba1be94a7387f568977e913a01c62d2fc1e6183ae802b99cb4bf0660c6879a06947","ssdeep":"768:Tgu/tk4n0Nki0kGOHicaVzK9EbeasQjx4XDsw9AWtna5kosRJYLC6G5Nf/tWGdNA:TgH/0kic7mbRpS9tRzJH6ylWGxO","tlshash":"b65319dd27f463f4e417e7f6d9234456ba0a24f7aa428774f3bc9e04ab62498c845cc2","first_seen":"2025-07-31T16:18:58.312379Z","last_seen":"2026-04-10T14:32:00.973739Z","times_seen":16,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/assets/css/tailwind.bundle.css","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /assets/css/tailwind.bundle.css HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 11 Mar 2026 12:40:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69b162b2-622f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25135,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25135), with no line terminators","md5":"ff0afcc8fefe67f36315cb14bdab0079","sha1":"a0ef26938c758c9360d33266ab984b31264cfd3f","sha256":"00fd53c4c3b85b6474e9ad076ac25820bc69977c95f0c94e99de64104dd97265","sha512":"5deee2914f1c3aa5c5d685a5af73b4875e1cbf91d035646c080d6dfdd5ee9bb8909ef29ef194ac1f17a30a3da65396b613df76cedab1960a2d8536ca5855d1f3","ssdeep":"192:Y7JXYS7JXYVGw2bIrsfMXkbpDTNgRi66IHFMIwuVwwV5xJLKaSiLAm+PNpVu/HZm:GHBwZDXk/63Yaiu/HZNw","tlshash":"f4b2a74eaa51103fbc2791e5c2c5b66cb129f0c5df3a56f9ba9312006ff22fb0d66504","first_seen":"2026-04-07T01:03:36.565967Z","last_seen":"2026-05-30T03:46:51.793618Z","times_seen":11,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":137,"dns":0,"connect":62,"send":0,"wait":61,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/assets/css/styles.css","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /assets/css/styles.css HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 11 Mar 2026 15:30:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69b18a79-312e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12590,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b63d7375815bdef243725fc754132e65","sha1":"0ab543c757a2762850781c1c97579b18e36452cc","sha256":"bd16bd00dfdb0a3d0f8bdf07f83f1bcc066b5bc71420b4ddde225f3dbc4b5713","sha512":"c0aa7f455e5c554e5e30419d4c93358e951c9c83c1fa1a44c6995efa36e6eaf5f19e0b5d909e41ab1a4734910a57bc34969e700d011901bd26cdd4f6fa0f4112","ssdeep":"192:upBzjX5+cKYcAfc1L0D6mYchlK9h7fmJBzvBmpznqc3Dgi3ClqOMZR0opsI+jusE:ufXX5j0mYixoFxc+t","tlshash":"6f422064ab9b68b2b83797642bb7ca1f23fc7023d004ea2c77ee11944f861bcd452744","first_seen":"2026-04-07T01:03:36.590058Z","last_seen":"2026-05-30T03:46:51.79599Z","times_seen":11,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":145,"dns":1,"connect":75,"send":0,"wait":59,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/metamask.png","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/metamask.png HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c42072-2084e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133198,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 2048, 8-bit/color RGBA, non-interlaced","md5":"778360312c0461f038f3eba2ef5b40de","sha1":"911124d9be3957cc48bcb6c78315948cc4272403","sha256":"ab665b3a366c2da2f80b4092c9cf7367c6a1bd2a3dc002706c8527ffd994444f","sha512":"cf4f597cf898aa358bf23025fd55a97b3254195c2ec0523a5ec6684733401428022255c2b7fe456863c93c8403038b7ccbf6c81b5537346ff63717760e005bed","ssdeep":"3072:ImSd/dUBiEIdTsN1BDBGkv/DOoqJinITRAxXlTmbobH4TalFca:Ljqsp9DXDMMITRbEDjt","tlshash":"fad312fea562c361eafc26f35dc643ce47c5f1a7c353944206982144e8893b8afab715","first_seen":"2024-08-19T09:05:53Z","last_seen":"2026-06-04T10:48:29.69676Z","times_seen":42,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":162,"dns":0,"connect":0,"send":0,"wait":69,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/trustwallet.webp","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/trustwallet.webp HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11146\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nConnection: keep-alive\r\nETag: \"69c42072-2b8a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75d729cd68c40d8c513f63968fc56ba3","sha1":"19fd61443b1e233a26d11ede36b584f152e29223","sha256":"10f4c8325fe8e7ac296e886ffc66e8838a980da1da865e0b9b2bee6399c47429","sha512":"826917f257507c632a9dcff95ac4e31235391bd07297328bf7f049ef21a44eccd4c5342b163e4f8330b420a4f8f5dd60edc46b506307cd8ebaa32abfe688f545","ssdeep":"192:7CodSXLJDENToeURQSdZk/FdVHwkCrHvm+qurYIAuhXM9C:7Td0DWoxuSodhwkEmqrYINXmC","tlshash":"0932c02b7806b05a806dc7be1a296ece06b5fb1e5d2c3401619fe4d68585cfe8bc550d","first_seen":"2025-07-31T16:18:58.307194Z","last_seen":"2026-04-25T07:21:54.069023Z","times_seen":18,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/nami.png","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/nami.png HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c42072-c32a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"67c8416c5c38d8b6ae946e09647c49b3","sha1":"ac140d45cdce166ec74a2a3adea2efff9ff12775","sha256":"7944c312359b61358d31084f3e29c677c2541485c967d89bac182a13b513aa05","sha512":"010864d753844a4f0cec754a8e9c6dc412a6d950bd74beac5013346001bd78f779bb25e438e9fbddafb074c1550540a7f2d20d08ac5f4bc149ff9172f582c567","ssdeep":"1536:RJX0vKJzkf6BipjPiE0hpxTgljig9ByncfH:RJEvKJAiBSODxTgl94cfH","tlshash":"2b23f1fe9565c71acf44e0e4c0c32bb7a928952f819eceb984f2d153726c1416f43a8b","first_seen":"2025-07-31T16:18:58.278328Z","last_seen":"2026-04-25T07:21:54.063442Z","times_seen":19,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":265,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/gerowallet.png","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/gerowallet.png HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c42072-1b6fe\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGBA, non-interlaced","md5":"97807d331a90ad4c4b8c833ef96a7c56","sha1":"8c0f6102264ba01556c4d3e3279d308fbdbf8fbb","sha256":"d7bf3d72bf78123ee12a34cda72b44922c0971ae58a32cca8f9e40268e9a50d6","sha512":"3b2070fd118c5fc47fa39b596dab50b03d8a167c3ff0c71aa5a97ab057feba5b763a71fbc004669791d41f9425e73628b43988d113d74558375735ad256481c2","ssdeep":"3072:u4WUVl0tzHsEh3Yep0fc5umRIoLQTc3ldV9agPbjGJZ:u4dluM63RqKOnElL9a0yZ","tlshash":"02b312c976dac898e135b90e2718d43ade07a8870e1f650b79d3cddc67791299afc00b","first_seen":"2025-07-31T16:18:58.276736Z","last_seen":"2026-04-25T07:21:54.057238Z","times_seen":19,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":285,"dns":0,"connect":0,"send":0,"wait":61,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/assets/vendor/inter/files/inter-latin-wght-normal.woff2","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /assets/vendor/inter/files/inter-latin-wght-normal.woff2 HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/assets/vendor/inter/inter.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 48256\r\nLast-Modified: Wed, 11 Mar 2026 12:40:18 GMT\r\nConnection: keep-alive\r\nETag: \"69b162b2-bc80\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-06-08T15:07:22.885833Z","times_seen":18926,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":67,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:31:37.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 10404\r\nConnection: keep-alive\r\nLast-Modified: Wed, 25 Mar 2026 15:40:23 GMT\r\nETag: \"d0d0-64ddb160707c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53456,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1080)","md5":"a46810423ab2e5a1b0e46b451e1e3aed","sha1":"9bed91b396aca1a011bb7a4b4868948cf1b2765f","sha256":"a921921219a12d6d8e8ad50fafc08009bed78295d7363215d4c37e7a4474fb17","sha512":"a1645d63d75846e8ff463dcb2b397c6f032793c0d811d0e1f32aa95fb30dd50703de4fda895ab55fa2f74dd6687e558a8203c2bab321797ff2a240cff1612598","ssdeep":"768:met7jppojGUEnYQVE45Drs0yY1Gz/4uaW:m+ojGUEnXsZY1Gz/4q","tlshash":"7833963062f218bb909792a4a660973769f8a647d10b864c73fc06e26fcbcddcd53365","first_seen":"2026-04-08T12:27:34.631919Z","last_seen":"2026-04-10T14:32:00.988304Z","times_seen":3,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":237,"dns":97,"connect":67,"send":0,"wait":75,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/assets/vendor/inter/inter.css","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /assets/vendor/inter/inter.css HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 11 Mar 2026 12:40:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69b162b2-96e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2414,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b2a6ae284fe4a8179a05d6b4c7b428ec","sha1":"64223b7e0a3ef8320ecd112f3a3b1b97e2556127","sha256":"78d97e4cbc385b8d0f86f21f650073c149eda98423bbdc49b13a13836d81e571","sha512":"6a61edb0653db4030aade799806e2c2656dfd41d12c71d65fc7b1f70211e88767bee2bb1e23e4513c81ed2f45b0950ff505a6fdd2f26f8355b3fa1845d8cd1d0","ssdeep":"","tlshash":"5e41aca0046f290497c35c9523cf1e163c1c9442e08af77a5f391a982edbd36d366bae","first_seen":"2026-04-07T01:03:36.567307Z","last_seen":"2026-05-30T03:46:51.759108Z","times_seen":11,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":140,"dns":1,"connect":61,"send":0,"wait":60,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/fckr/icons/ronin.png","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /fckr/icons/ronin.png HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 25 Mar 2026 17:50:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69c42072-166f9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91897,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2800 x 2800, 8-bit/color RGBA, non-interlaced","md5":"8129de471e3f14ce6266f63ee321a81f","sha1":"9d7c31bcb0024bbb1c296d9e7c5ffa7fc40002c2","sha256":"3549608e2ae6543678344cab7bc5c6140481afd540b6742be0cfd88e18f679ed","sha512":"29574ac567ff227129b95cc56d63a079358022bb1fc00687a50771f91c162f62e528727cab212084d4eb3665d67304c340c16e39c93388ab2a72b3f82c2aade4","ssdeep":"1536:rIsyaGKT5cubsgHbz2MmI+zczMIOzbaYSbh4hCsKn+qWFqZmYIO:o0cubsgHb6Mf+z8OJSbaGt8nO","tlshash":"699395ab4d32a719e6734cb56cb20fe44d0db5ea3ea8be46c72526b31ccc15b1b46071","first_seen":"2025-07-31T16:18:58.271592Z","last_seen":"2026-04-25T07:21:54.071118Z","times_seen":19,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/assets/vendor/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:38.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /assets/vendor/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/assets/vendor/fontawesome/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:38 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 114740\r\nLast-Modified: Wed, 11 Mar 2026 12:40:18 GMT\r\nConnection: keep-alive\r\nETag: \"69b162b2-1c034\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114740,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 114740, version 898.256","md5":"0a74987bb59fa4a5a8e2eea68608d6f9","sha1":"79f2a488fd9c1e1f01943a196f5abf53821e04d7","sha256":"ff58a6b0a01dbce082458f6e5a58719df4e80e0c2b50f744bb5871e21eca6878","sha512":"ec8014a9438540096e4bdece6ced4d48e848516b23a2c518c34c691cb607761c92441e7ae73f5fa6a6085030a0e84d5ad809cbb1cf709b4ec94982bcdc2e1f38","ssdeep":"1536:vVz7d5z5vXXHkt13bkksuapy48cgRDEixUsH+bu9w7D/FzbmQOr+rqZa4ZHKCL8u:Nv1vXHggQDTGsxqDdmQXrEa4ZHKCLWsX","tlshash":"b6b31226718ea701c81e47c7f2ed96cfd3a6420b1897198f345e3d0237aa81a933d9d7","first_seen":"2026-02-11T07:20:24.326567Z","last_seen":"2026-06-08T08:59:48.641456Z","times_seen":553,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":132,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"domain-phrase.cfd/favicon.ico","fqdn":"domain-phrase.cfd","domain":"domain-phrase.cfd","tld":"cfd"},"ip":{"addr":"94.154.35.90","port":443,"asn":215567,"as":"Emirhan Kurt","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:39.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domain-phrase.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 23:02:44 GMT","end":"Tue, 07 Jul 2026 23:02:43 GMT"},"fingerprint":{"sha1":"6F:1E:6E:BF:3B:15:1E:A6:15:48:F5:76:A9:CE:B8:19:44:72:8F:DA","sha256":"D5:9D:1B:14:33:B5:EC:D2:ED:81:B4:55:49:10:E5:18:11:2A:5C:2B:D0:C3:A9:BA:50:92:01:E0:8D:5C:E9:F5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: domain-phrase.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://domain-phrase.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.2\r\nDate: Fri, 10 Apr 2026 14:31:39 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 280\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":280,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"eef37219921c956b91d66d651624c999","sha1":"03c929005c227509098e81cd8aca66cb8bdcfd41","sha256":"77db0fed685c5ff7c014426e964f0fe6d8edb1537a2d273441976ddc01dc26e1","sha512":"f4db7e26b14c992b6dce087c21274b69571df9efe3f68b5562da76ae1b8d5dc14d64819676b9b02b93c904e7d1a536357bab3cba1c662c8d8ba747bbaf61d145","ssdeep":"","tlshash":"d5d02bde504363974812165079c225c2268d22fab47a85a82dcad48762a867ecd9aacc","first_seen":"2026-04-10T13:54:23.72742Z","last_seen":"2026-04-10T14:32:00.990981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/ticker/24hr?symbols=%5B%22BTCUSDT%22%2C%22ETHUSDT%22%2C%22BNBUSDT%22%2C%22SOLUSDT%22%5D","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://domain-phrase.cfd/","date":"2026-04-10T14:31:48.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/ticker/24hr?symbols=%5B%22BTCUSDT%22%2C%22ETHUSDT%22%2C%22BNBUSDT%22%2C%22SOLUSDT%22%5D HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://domain-phrase.cfd/\r\nOrigin: https://domain-phrase.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 690\r\ndate: Fri, 10 Apr 2026 14:31:48 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: c8900f7e-24bb-4d50-8830-4feda97f3b35\r\nx-mbx-used-weight: 4\r\nx-mbx-used-weight-1m: 4\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ac3e1d7135d19671e1860c67a45b3f70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: kECQN1oMIl8hdKCCwzK71My_SsizYq2lgjCWdHHidHwhrwM1Fnv4QQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2183,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cb8b7d30eae5bf218e668204a1278411","sha1":"307a9cfe489a05e210ecfcf19d50cdc08b77be29","sha256":"a93c4c8a7dd80233c69ee85ff20cd756a3d7c844247cc90a10c1ee8dba0abda4","sha512":"d50aa29e762e94f69e143b94216df4f39c6f8f14fb97c74041401b5de87ca1874ecf5f5199d91f0e76107829d46ea6b19dc7b63aefd3e6a95373f9d997b7567e","ssdeep":"","tlshash":"d84173f2d76c4ed9c97c8e985b86b53495c6b14ac3c98f104bee1a9606f2f3f1518780","first_seen":"2026-04-10T14:32:00.992413Z","last_seen":"2026-04-10T14:32:00.992413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":240,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}