{"report_id":"51f7beb6-dd2f-420b-bf83-c2c11ddad1f3","version":0,"status":"done","tags":[],"date":"2026-09-17T08:36:46Z","url":{"schema":"http","addr":"aiitaapp.com/","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aiitaapp.com/","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"title":"DApp","dom":{"size":6692,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2957)","md5":"2e581e32deea42cb8a1c877682153b64","sha1":"e3e9c764f8fdbb50c1ca29711a2c28feed5a82ea","sha256":"42c62c715254f997f440679ec0929ec8d9edc97bb7870769f3bedbda60ea6100","sha512":"ee13a7b9f2016632e799c95a2f51dec1b1fae226553cd53849ea332cbbb97f6f3c06bb2ddc36c63dfacaa4aea0522a2a911d36c6aae6e205b329a40785ac570c","ssdeep":"192:Q8sW05oI4Xbyx6vtpJpYPG/R73sse7hXDOZ:Qj5SXCAtfSPG/Zy9iZ","tlshash":"cdd16547e8854106273b699d5cc3e455efa3850bce85c90eb06e34e46fa8ec684b722f","dom_hash":"domhashaa1ceb881ac4bc0cfd7744d1a1537189","first_seen":"2026-09-17T08:28:45.187264Z","last_seen":"2026-09-17T08:36:51.185184Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"aiitaapp.com/","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T08:36:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"aiitaapp.com","ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-17T08:28:41.382592Z","last_seen":"2026-09-17T08:28:41.382592Z","alert_count":17,"request_count":17,"received_data":2504904,"sent_data":7804,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-09-14T11:53:22.488478Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":595,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-09-14T07:05:48.596753Z","alert_count":0,"request_count":1,"received_data":919,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"service.yilufafafa-168168168-yiqifafafa.xyz","ip":{"addr":"104.21.34.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-07","domain_rank":0,"first_seen":"2026-08-31T11:00:48.64584Z","last_seen":"2026-09-11T12:13:13.036672Z","alert_count":0,"request_count":2,"received_data":1684,"sent_data":1232,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aiitaapp.com/assets/index-nibyPLVP.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"387212a26fed97a7fc98698cc647a7a5","sha1":"f18861e16440da820cd38a42e05fd814e94493fa","sha256":"1ec0c3e605b1f64e7d87a28c2540b084a517fb75ff5939ec04af40e574b875ba","sha512":"233ec8b45b8d71208695440dd58a6b0d61eb730787862e46d6a1583c7e571516b75b0c120c2c66c53c3eb3eab4946209920df2fe7a9fb22732b28696802667ba","ssdeep":"","tlshash":"15115ec836c9b43613669060d4afc007a22ba544142f44b0e31bf6d13d750bca61f938","size":948,"data":"","first_seen":"2025-05-01T12:02:27.006605Z","last_seen":"2026-09-17T09:28:09.962867Z","times_seen":915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/events-DQ172AOg.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6a80663ffbb4a6e247d024874a2456e","sha1":"8f64e93e4f832983754e56e37d18f16bff133b2e","sha256":"da208eb12e58611c9ebd0b6c352fc11c64f9f8c7f3f1b44a0f7f2b2c4ea83bac","sha512":"48f7a03a4fe8a76ff77d46b869eea9571d1f31e8fa0385d4d35b8c82a04f2ce0edfbc00618d3ea77f86cb3cbe6125247a3dab958bb790690bf45f39a8478768e","ssdeep":"96:5ER9ttlJTZFWHs9BEdCOoRLUlRHZGAq6vvVu1o3IMmmPaJvsVk:GTrlJTfWMDchq6tu0NPQ","tlshash":"44c153ccb38578b013e7d3abb07f520bf134a594640c5118b246ecf9696bc9e4126fb8","size":6126,"data":"","first_seen":"2024-12-25T05:30:42.59477Z","last_seen":"2026-09-17T08:36:51.206162Z","times_seen":1071,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/rainbowWallet-O26YNBMX-DUhYus-9.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"31a35ef113542c972267ac1f6215cdf6","sha1":"a3d7e6b73fb9866648ca70b77733e2159ece1802","sha256":"69c1e51351246da93a291e9b0dc3a2da57b7e275d3736e67d4bbb9657e1245f4","sha512":"98b7aef39266034b588d6dc868c35b306db9581da09d03c35fb651726fa05187fcd8fd24f471ebf9cbc6bb34005433f084ed756d6b793e3b5ad1d9eb9e751c4f","ssdeep":"96:0z+pilTNtMvi39TWtyei4p4ut6KK4tJBztP+Bw:0qpiD470sd9V","tlshash":"42b1546d96b96ceedc37e48fdc18670d8020bf17ee4449b1a999db4f1f25818b4e9140","size":5120,"data":"","first_seen":"2025-08-08T14:52:21.86834Z","last_seen":"2026-09-17T09:28:09.9716Z","times_seen":955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/index.es-BRd7Hg9S.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d14d71290a8db504bad61a043959ca65","sha1":"7c2ec30c688e41ea54296c13fbadd6703eda275d","sha256":"265c9089bada7d3a61f7fedb05a93824961a99ea863cb745c13c3e3ed0f7bc32","sha512":"e53d1b19ee2c7797734ef1664e7bf4430c8189682607a204a8cfe8827567fca04d90b5605c786a748d01e5ed20f44e0afdf2e3a91bcc7a762cad3c85ab9c38b8","ssdeep":"6144:+eiV1saqR1r+UZNxz7ltsaHLD1Wzyr6pKM8ZHlbWRD2zxNQ96eTm:+bVgzZdoyr6ozHlbWRD2o6eTm","tlshash":"54944d8072a6b07603e665d9e47a2201f2395864740cd07cfbacadefae94485873ff75","size":412828,"data":"","first_seen":"2026-07-07T05:53:57.97768Z","last_seen":"2026-09-17T08:36:51.205168Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/baseAccount-44UITRK7-CsjdbWCf.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dbc36660e4abec5e6c6f1099e91f795c","sha1":"b731b120dfcc909105abb0bcaaad937194be3d2b","sha256":"692fbca1181540ff67f6d8fefde7d8dd60b39970a4831f35fdfc712cec2745cd","sha512":"0d80c0048a1510bab812283d90d9b2ec185b9ba01dc491362b8ede0df01419a629ff9afd42a54dc6ec5f359d984e84e8b2814cbe22a9597c0fdc54318c98d66e","ssdeep":"","tlshash":"f1113dbc953468cab822d52356387788b123ede7bdb114c2e896b703ce05908654dfb0","size":902,"data":"","first_seen":"2025-10-28T19:27:38.229939Z","last_seen":"2026-09-17T09:28:09.959087Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/login-UP3DZBGS-Db_wM5oQ.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"28b65459ef616c41fcbc14d2cd2d5b6b","sha1":"86909f4bf8887dfaab1476058affbb145ba960dd","sha256":"0495b387d34305302644928b6531de715906a7792bebd23443255a5511c0b713","sha512":"fdecb6cdd43226b57fa759a6a88fc4c2506b38d4e7ed7ca28edb702c0a20b8e0890fa9f63e9b893f6a1754389ca8cd213c1ade58be385ff3525960176a01b8b6","ssdeep":"192:CQSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdOZ:e4pjZWQufLsSEBovGSjedtqPq2qSqC","tlshash":"1c32dbbca5711b5ebc73d417cb55b61990313fefad6488a8dfaab208cb9691cf5e0010","size":11995,"data":"","first_seen":"2025-06-30T17:29:04.849297Z","last_seen":"2026-09-17T09:28:09.997597Z","times_seen":1019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/index-CAjXmNdI.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d802337be649cbb38dceda50128219eb","sha1":"72703e7e1d472df251f54c20c14194da0d706c35","sha256":"69f07178a21bb4cd2fe6d501ed4bcf2d6838f51eda0250541752656e70cca93f","sha512":"1bee8a345ce589e89a4a7d307d95da35746139cd53c93f935c26ac116d88498b1480da912d3fbdc032cf5dddb83d0be7ef32a8612b12f5441689270711706a2d","ssdeep":"12288:K5Kww52FiKE2T7rLiCUASKue9BdVfLscIQPY4Lv3pmzA2ex3dguv3ta2riK4B7Ui:KMnV8V/VNp9mExv3ta2r0B7UTU5kC","tlshash":"f2354bd472a6b165439750e514ab0001f2346d6a744c84a8b6acddfe3fbacc885bbf7c","size":1155472,"data":"","first_seen":"2026-08-31T11:01:10.059658Z","last_seen":"2026-09-17T08:36:51.209143Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/safeWallet-5MNKTR5Z-D-5imDLD.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3e8cb3dba4a6d8c6798a2784126b8d7c","sha1":"ffea7b6faa623d5824667d167016877481b1d018","sha256":"aad98363e8d9aa64a1b4f634f3d39f9f47873c6b1e36a4e81b605387ece0982e","sha512":"04aad56a329e79c9105948c53d82704736546acd1af1a91da5d7701be332b6eb9f72e7054ada509f7ddab27384d6c088ab1013446a58f102a4253a84f9bcd1ce","ssdeep":"","tlshash":"1f31e07d24b06dc4983ac3b38001332e51613e7bfc39a8c5ee46603ae91a80430d8e77","size":1819,"data":"","first_seen":"2025-06-30T18:28:52.651033Z","last_seen":"2026-09-17T09:28:09.980943Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/walletConnectWallet-YHWKVTDY-D3lyiczV.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"07c75d659ccf42b0f285650d330effed","sha1":"19d69164e8b8b965c069816691c1fc636af06f75","sha256":"6fa7eb15946d4f1b38ee89dca64f3b772eac28e8903c81001dc35bd32edb5649","sha512":"f057b9ccbabd042aabcc602f3b801bb22a17905c07263e13bb305676a6143a7608ff43a4e1e16d79041cd5cd3c1f2a7a1fe6eb3a5ff1f8f2f46d46d2c75ecbae","ssdeep":"","tlshash":"1a416bef24b03cd9d43bc5639429301d61722a3bff2d5a559aab62647e65c5020d4633","size":1877,"data":"","first_seen":"2025-06-30T17:29:04.865387Z","last_seen":"2026-09-17T09:28:09.979186Z","times_seen":1003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/metaMaskWallet-SITXT2FV-BlemcphV.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8445b8e282509da5cafea9043c6d95e3","sha1":"8b2ebbfa045bbcb0f56f1286b5ddcc823368eba4","sha256":"92ff713c04a290fb50a5f2087d2fc25137db5896938ef0ab268ccfb6257b565a","sha512":"355f6528c25875c8660edc3e0b1858c8100cd769b63099dcda48b87a804737e1e623a05c41a49ce572e6172c1700e97fe025cf7480230bdeb82b03fbc41c5677","ssdeep":"96:cnPntyXlz+UaqFSRbSCGC7KwT64jP/MVINaO4G:cM0M8RbPGCGq64Ic9","tlshash":"c1020b5f16b80c99e9378c2fc285764d70b4bfc32a28e7f58aa680b58e5110577f39b0","size":8512,"data":"","first_seen":"2025-06-30T18:28:52.657268Z","last_seen":"2026-09-17T08:36:51.201208Z","times_seen":320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/assets-Q6ZU7ZJ5-P8HioiAD.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0be1e539d9c370f71c5ed19f66fb0870","sha1":"b42033f215024e2008bf0d5e032eb8b0df4cd953","sha256":"312c407a303fa7679b7eeccd85173ad7c0967df4f417c4b9e3ce05519ff3e591","sha512":"07bb4c57bd73df5ac1b0031e9d9c94be7ed97758dc07e0cda507b4fafafae3928b59ccdf403a19b3516bcd4721be0242c004c6f0408a52a707380c0b36c36dec","ssdeep":"384:ppByhqW2xs3dwktSu6foTLEQD4zrlqPqo:ppBSqQ3p8BrlqPqo","tlshash":"f8b278ada2320d497c3bed6bfa89790db0203fcb8919a4b98f61b154cbd354df2d0651","size":23619,"data":"","first_seen":"2025-06-30T17:29:04.8722Z","last_seen":"2026-09-17T09:28:09.959812Z","times_seen":1017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/index-DPcAVV-i.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04b9dc9fe6206f5a6024a800a530188b","sha1":"582a31d16e59c74cf249f19323a23f1e7a315640","sha256":"d8833e969c51bbb17bbc255a18b52f86c527b854bc36a1a878f0abb7d2a0fe75","sha512":"caa25a9b4f06fcd7eb13741c12b97ed7b20ed0f8a69305253ca7d43070889d9ac6e9e1c6653978c8f8ccd2187509460e55cc8695ad7ef2f0d71db2b121444aeb","ssdeep":"6144:90ZZIqk8rusNkA2npzIkTT6+ZgUW0GfV03KqLvLpPVcUd2kw88tdBb0MOG3WENJx:90LIau3guGfG3KqTL/P2kw8x9e","tlshash":"56747d84b29170798fe310e5a4372105f234ac51b4cd8894f6e8daeb3de98895767f3d","size":340581,"data":"","first_seen":"2026-07-07T05:53:57.981885Z","last_seen":"2026-09-17T08:36:51.203821Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/core-BUDSfILr.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bc6b19d0cba0354ec0dff0846e5af14","sha1":"ec03066d91fe23824b95965ec6e09aa199902a8c","sha256":"a95c9eed593cb05ea806e0ef10e4740910a3665cc5c040233eb36718f0531be0","sha512":"616422fa22edb1a0ae867da6c15cb88d8ad2a62d87e5439f222ca00177dd9fa551b66f366fe815feb1575a7fa4597711c0976b53a880045b02b5cffaae7d32f2","ssdeep":"12288:q6Zp4P4u4FRrFO3QnyyyHX9IjXu9T0YRZY1hnvOKzf:q6z4P4u4t++hy39IUT0YRZY1lRL","tlshash":"f8a44b4072a6a43603a751edb8b52201f2342858701ad0adfefc9debdf855864a3ff75","size":486865,"data":"","first_seen":"2026-07-07T05:53:57.973853Z","last_seen":"2026-09-17T08:36:51.196211Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aiitaapp.com/assets/safeWallet-5MNKTR5Z-D-5imDLD.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.657Z","timestamp":1789634173657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/safeWallet-5MNKTR5Z-D-5imDLD.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/assets/index-CAjXmNdI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 03:56:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32ef4-71b\"\r\nexpires: Thu, 17 Sep 2026 20:28:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 487\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kTJuve7Nm2vj5lakCB8fDBDm9YGGbIelVJRHbjRPUhOXRUamNFsi4CkhM4XQvhAMjw0HzD5z86zDXat80BVwhRMW%2BBGi86lVDmHxWW4z0u%2BFFLhAWzZ9%2FwxbnZbAVyU%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c6c8315be1783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1819,"size_decoded":1508,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1818)","md5":"3e8cb3dba4a6d8c6798a2784126b8d7c","sha1":"ffea7b6faa623d5824667d167016877481b1d018","sha256":"aad98363e8d9aa64a1b4f634f3d39f9f47873c6b1e36a4e81b605387ece0982e","sha512":"04aad56a329e79c9105948c53d82704736546acd1af1a91da5d7701be332b6eb9f72e7054ada509f7ddab27384d6c088ab1013446a58f102a4253a84f9bcd1ce","ssdeep":"","tlshash":"1f31e07d24b06dc4983ac3b38001332e51613e7bfc39a8c5ee46603ae91a80430d8e77","first_seen":"2025-06-30T18:28:52.651033Z","last_seen":"2026-09-17T09:28:09.980943Z","times_seen":158,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/login-UP3DZBGS-Db_wM5oQ.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.667Z","timestamp":1789634173667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/login-UP3DZBGS-Db_wM5oQ.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/assets/index-CAjXmNdI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 03:56:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32eed-2edb\"\r\nexpires: Thu, 17 Sep 2026 20:28:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 486\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwWcSqCffJw0uoqs0KIMdFdYr%2FsMgkyFnOEbneMb7pGUHWHGLDh%2FSzdmDmHdf2rwqk7JN3Gxe7PsplWtTNMWeRjxeRghX3Q88Y6HB1p9Qee8riP0GlIJLdPtlrlbttw%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c6c8316bea783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11995,"size_decoded":3812,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11994)","md5":"28b65459ef616c41fcbc14d2cd2d5b6b","sha1":"86909f4bf8887dfaab1476058affbb145ba960dd","sha256":"0495b387d34305302644928b6531de715906a7792bebd23443255a5511c0b713","sha512":"fdecb6cdd43226b57fa759a6a88fc4c2506b38d4e7ed7ca28edb702c0a20b8e0890fa9f63e9b893f6a1754389ca8cd213c1ade58be385ff3525960176a01b8b6","ssdeep":"192:CQSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdOZ:e4pjZWQufLsSEBovGSjedtqPq2qSqC","tlshash":"1c32dbbca5711b5ebc73d417cb55b61990313fefad6488a8dfaab208cb9691cf5e0010","first_seen":"2025-06-30T17:29:04.849297Z","last_seen":"2026-09-17T09:28:09.997597Z","times_seen":1019,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T08:36:12.396Z","timestamp":1789634172396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 09 Aug 2026 11:12:04 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z75IZk8%2FCY5IZnk80a70zUbFFyPRTjwz%2Bl%2B5gRu3AH8HUfbCNpxFX7eKbs2zCDtVATjfiGRAjl0Xm55fE2i%2BXYw9cEEc5GExmjf3QF1QaLQjkNj5Is6j6JewEXp%2BAZA%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3c6c829aa3f783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3333,"size_decoded":1892,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"fdd3e81e96d5875a5faa579f2f221b8f","sha1":"23199969c389b5c3b51836e911d0d9f5eec207fc","sha256":"62c43330772e2fd8942ddf9b9e44717f64c26004230657037032c5009e77d434","sha512":"cb77ee0b3606ed8fee109ad9342521f77f7c743bc99c6b03c1dd62654a64c0ba4194ce62df24b4c9bd351e6394a02609af07f1ff795f55ec8dd39530b461f2d5","ssdeep":"","tlshash":"d061108b9995c045337a26a849dbf054c8a3c15fcf8adc01b84c35485fe1f9696fb2f8","first_seen":"2026-08-31T11:01:10.037116Z","last_seen":"2026-09-17T08:36:51.192401Z","times_seen":10,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":743,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/index-CAjXmNdI.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.357Z","timestamp":1789634173357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/index-CAjXmNdI.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Aug 2026 11:11:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a78606e-11a190\"\r\nexpires: Thu, 17 Sep 2026 20:28:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 488\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=INPmLspub5aKp1U3PBLlM3dnQZhms23xB%2B2hMy6%2FtJLasGD75Szdw4sU0QEtH57IwWrPll0vZLmZwGorwl9u15gg2TQnIT1yGyFrvaQvHNvrhF2rL7FG2l4xt%2FZdhXk%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c6c82f7b87783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1155472,"size_decoded":380486,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41759)","md5":"ba5cc50733cd8e6cc2e4aa0371fa5799","sha1":"2c168dc414fa173f3cb3ae07594aaed12d667253","sha256":"e63cd38ecc866c2a380ee9ac14ca9dd31382b933d136c146f516bef8a71c8565","sha512":"70eba2747a39aaea38800d9214f4028808167778d2320dad21a522b333e794abb44538151397a75b34e97e0c431c089799ab25c029b038eeac49ee74fca49cbe","ssdeep":"12288:K5Kww52FiKE2T7rLiCUASKue9BdVfLscIQPY4Lv3pmzA2ex3dguv3ta2riN:KMnV8V/VNp9mExv3ta2ri","tlshash":"eb255b9472a5b165439350e514ab0001f2346d6a744c88a4b6acedfe3fbacc885fbf7d","first_seen":"2026-07-07T05:53:57.974722Z","last_seen":"2026-09-17T08:36:51.193585Z","times_seen":11,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/favicon.ico","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.651Z","timestamp":1789634173651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 09 Aug 2026 11:12:04 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FlZsMMrl1dz4U3grjBXWwBRKgf8cWQCQgOyqFHzCImdDJw564fMfd0NC%2BUe0ziVEvoyQSFRHg367ccVOuZ%2BUMtEV1CF4wcTdXYQgLFlT8buCRBMS1x1IRR2HXVWYck%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i=?0\r\nage: 485\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3c6c8315bdf783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3333,"size_decoded":1925,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"fdd3e81e96d5875a5faa579f2f221b8f","sha1":"23199969c389b5c3b51836e911d0d9f5eec207fc","sha256":"62c43330772e2fd8942ddf9b9e44717f64c26004230657037032c5009e77d434","sha512":"cb77ee0b3606ed8fee109ad9342521f77f7c743bc99c6b03c1dd62654a64c0ba4194ce62df24b4c9bd351e6394a02609af07f1ff795f55ec8dd39530b461f2d5","ssdeep":"","tlshash":"d061108b9995c045337a26a849dbf054c8a3c15fcf8adc01b84c35485fe1f9696fb2f8","first_seen":"2026-08-31T11:01:10.037116Z","last_seen":"2026-09-17T08:36:51.192401Z","times_seen":10,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/walletConnectWallet-YHWKVTDY-D3lyiczV.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.664Z","timestamp":1789634173664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/walletConnectWallet-YHWKVTDY-D3lyiczV.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/assets/index-CAjXmNdI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 03:56:23 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32ee7-755\"\r\nexpires: Thu, 17 Sep 2026 20:28:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 487\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlBSQLQxc0exdLgvKBAnu%2B86clhT2v%2BBOvkspKT9SBqCC0Tx0tcSnYmcgUD%2Bo%2FmbymkeXMlPXg71dz8OaKwtJWniRnKMAv5fUtw1JOiMnYYJx33ciDrIWGjuRjlvxoo%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c6c8316be7783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1877,"size_decoded":1512,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1876)","md5":"07c75d659ccf42b0f285650d330effed","sha1":"19d69164e8b8b965c069816691c1fc636af06f75","sha256":"6fa7eb15946d4f1b38ee89dca64f3b772eac28e8903c81001dc35bd32edb5649","sha512":"f057b9ccbabd042aabcc602f3b801bb22a17905c07263e13bb305676a6143a7608ff43a4e1e16d79041cd5cd3c1f2a7a1fe6eb3a5ff1f8f2f46d46d2c75ecbae","ssdeep":"","tlshash":"1a416bef24b03cd9d43bc5639429301d61722a3bff2d5a559aab62647e65c5020d4633","first_seen":"2025-06-30T17:29:04.865387Z","last_seen":"2026-09-17T09:28:09.979186Z","times_seen":1003,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/core-BUDSfILr.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.904Z","timestamp":1789634173904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/core-BUDSfILr.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 03:56:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32ee5-76dd1\"\r\nexpires: Thu, 17 Sep 2026 20:28:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 486\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KRVvDkQG22782Meg3ShljQrZpEIMmfentmLSwp9rlc1cTgx5kG2aiZrjDMxLuqXjesSooJ8dXWzTqRq8lxwupdio63WRqYRovR02kRWIdG8O9ZMC5%2FwZqOMkH7x9CkQ%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3c6c832ec51783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":486865,"size_decoded":134608,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39287)","md5":"8bc6b19d0cba0354ec0dff0846e5af14","sha1":"ec03066d91fe23824b95965ec6e09aa199902a8c","sha256":"a95c9eed593cb05ea806e0ef10e4740910a3665cc5c040233eb36718f0531be0","sha512":"616422fa22edb1a0ae867da6c15cb88d8ad2a62d87e5439f222ca00177dd9fa551b66f366fe815feb1575a7fa4597711c0976b53a880045b02b5cffaae7d32f2","ssdeep":"12288:q6Zp4P4u4FRrFO3QnyyyHX9IjXu9T0YRZY1hnvOKzf:q6z4P4u4t++hy39IUT0YRZY1lRL","tlshash":"f8a44b4072a6a43603a751edb8b52201f2342858701ad0adfefc9debdf855864a3ff75","first_seen":"2026-07-07T05:53:57.973853Z","last_seen":"2026-09-17T08:36:51.196211Z","times_seen":11,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.966Z","timestamp":1789634173966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aiitaapp.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:14 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 09 Aug 2026 11:12:04 GMT\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpzhGMTAWhRpyLEgD7e%2F323U6aZZqDvhjvYEZPBhiKRfNrsl9mQCHveUMwVdrRt4IKXG8TTQ0JlW2n4Wn4thzi1K6gB6jAeYSbK%2FvG8GYJj%2FJqiaez4M%2FOaHEC6968o%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3c6c8334c69783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":687,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/e?projectId=675b8394d0a1d4954cc8c2b3dc6f8153\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:14.024Z","timestamp":1789634174024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 22:29:58 GMT","end":"Wed, 04 Nov 2026 23:29:15 GMT"},"fingerprint":{"sha1":"DC:2C:A2:F6:6F:BD:FF:1F:63:4D:26:F9:76:6F:09:F8:A4:BB:94:A9","sha256":"3A:2B:3B:46:D8:5D:7E:5E:B8:AC:B3:5F:20:89:81:38:30:56:39:FC:3D:A7:AC:22:F0:0E:3D:9F:E4:9E:CD:06"}}},"request":{"raw":"POST /e?projectId=675b8394d0a1d4954cc8c2b3dc6f8153\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aiitaapp.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 678\r\nOrigin: https://aiitaapp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":678,"data":"{\"eventId\":\"5db3aaff-293a-41b4-a5a8-66a4432307e5\",\"url\":\"https://aiitaapp.com/\",\"domain\":\"aiitaapp.com\",\"timestamp\":1789634174022,\"props\":{\"type\":\"track\",\"event\":\"INITIALIZE\",\"properties\":{\"projectId\":\"675b8394d0a1d4954cc8c2b3dc6f8153\",\"networks\":[\"1\",\"56\",\"137\",\"42161\",\"10\",\"43114\",\"8453\"],\"metadata\":{\"name\":\"DApp\",\"description\":\"DApp\",\"url\":\"https://aiitaapp.com\",\"icons\":[]},\"showWallets\":true,\"featuredWalletIds\":[],\"excludeWalletIds\":[],\"enableEIP6963\":false,\"enableInjected\":false,\"enableCoinbase\":true,\"enableWalletConnect\":true,\"features\":{\"email\":false,\"socials\":false},\"manualWCControl\":true,\"basic\":true,\"sdkVersion\":\"html-core-1.7.8\",\"siweConfig\":{\"options\":{}}}}}"}},"response":{"raw":"HTTP/3 202 \r\ndate: Thu, 17 Sep 2026 08:36:14 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a3c6c833cb6e0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1541,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":0,"dns":4,"connect":11,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/appkit/v1/config?projectId=675b8394d0a1d4954cc8c2b3dc6f8153\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.19.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:14.027Z","timestamp":1789634174027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 22:00:49 GMT","end":"Sun, 08 Nov 2026 22:59:47 GMT"},"fingerprint":{"sha1":"15:97:6F:D0:CA:06:44:96:61:32:37:0E:6F:F8:18:D9:4A:2B:26:7A","sha256":"46:81:16:FB:36:75:BF:3B:5A:92:EC:9A:72:40:8D:20:8E:D2:3B:25:2B:CA:42:6E:AC:75:29:DE:7E:74:F9:57"}}},"request":{"raw":"GET /appkit/v1/config?projectId=675b8394d0a1d4954cc8c2b3dc6f8153\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://aiitaapp.com/\r\nOrigin: https://aiitaapp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 08:36:17 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=30\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3c6c8473fccb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":595,"size_decoded":502,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1c3a4908ed2367c1c7aa4becb3405028","sha1":"38ae3e154b0c6327abe105b076013b1bbdfd6cc6","sha256":"b8dbbceec8a5443a9a13f936934d90172636d6481952765b2b803dbb876c208b","sha512":"2a169854233efc51af48e78395a576108b5b1dcd5a2cf741800bce6f2d55ac8f5acc922b1d3c6db9b188930bf103eebbcaa85e62f4d71071edc822275202b832","ssdeep":"","tlshash":"71f05427598c39dac546cd73d64397430fae4bb7ea05ed2cd81c9a0913deab11120d3b","first_seen":"2026-05-23T13:27:26.606318Z","last_seen":"2026-09-17T13:30:24.110088Z","times_seen":2676,"resource_available":true,"data":null}},"time_used":3197,"timings":{"blocked":0,"dns":2,"connect":2,"send":0,"wait":70,"receive":0,"ssl":3123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/index-CfvnRABD.css","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.359Z","timestamp":1789634173359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/index-CfvnRABD.css HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 06 Apr 2026 03:56:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32efd-6eaf\"\r\nexpires: Thu, 17 Sep 2026 20:28:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 488\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5U4TdKaimeZ798v7mApFXuGuM6yPUyZtGMvPpYkFEybC9Bl3GFYnIqc2iOp9a9s7iAnWafX6B%2BldQ14Sx33eYgoS%2Byyj1nX2UkwifqrVP28mGvYxJGT70E%2F4arFBg4%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3c6c82f7b89783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28335,"size_decoded":5574,"mime_type":"text/css","magic":"ASCII text, with very long lines (28334)","md5":"d394afb9b5ee215d3ab21049855d5d6c","sha1":"a6b14e7f6fa104a5eaf57c23167c289611729aa6","sha256":"19f4c92e463af195242706449b6966d82d876f4484511882c93205097880482d","sha512":"2b3792617468d23c4d1a3cbd0b80af2e665a4de032d202682a37cf5870792c2100e082b837fe4d19674c5657eb5f5890a720503efe98cc54509b38d2bdf0b6d3","ssdeep":"384:P56ed283ZcW23qWF7O36YBzQ4JYf1oKPFEINu:P56UJoYBzQmSoKPFEwu","tlshash":"c0d2ca093e2d3f38ba13a32440c1949c620b775feebd8797ac91275d9d9d78431aca39","first_seen":"2026-04-27T22:10:53.431612Z","last_seen":"2026-09-17T08:36:51.199583Z","times_seen":13,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/baseAccount-44UITRK7-CsjdbWCf.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.660Z","timestamp":1789634173660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/baseAccount-44UITRK7-CsjdbWCf.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/assets/index-CAjXmNdI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 06 Apr 2026 03:56:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JdQecFWXYSOTmAjW7hMMhwOFRNUXm%2FM4BIqLra%2FASuU3MrLC%2Fs%2F1MjCLypUoWNTCLprbrGJNiZ%2FZBH71ELV0PC553gR1PBJPFPwA0Bs%2F6f%2FDecRdHJwChVNj9BnAvN4%3D\"}]}\r\nexpires: Thu, 17 Sep 2026 20:28:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 487\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69d32ee8-386\"\r\ncf-ray: a3c6c8316be4783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":902,"size_decoded":1186,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (901)","md5":"dbc36660e4abec5e6c6f1099e91f795c","sha1":"b731b120dfcc909105abb0bcaaad937194be3d2b","sha256":"692fbca1181540ff67f6d8fefde7d8dd60b39970a4831f35fdfc712cec2745cd","sha512":"0d80c0048a1510bab812283d90d9b2ec185b9ba01dc491362b8ede0df01419a629ff9afd42a54dc6ec5f359d984e84e8b2814cbe22a9597c0fdc54318c98d66e","ssdeep":"","tlshash":"f1113dbc953468cab822d52356387788b123ede7bdb114c2e896b703ce05908654dfb0","first_seen":"2025-10-28T19:27:38.229939Z","last_seen":"2026-09-17T09:28:09.959087Z","times_seen":146,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/metaMaskWallet-SITXT2FV-BlemcphV.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.662Z","timestamp":1789634173662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/metaMaskWallet-SITXT2FV-BlemcphV.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/assets/index-CAjXmNdI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 03:56:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32ee5-2140\"\r\nexpires: Thu, 17 Sep 2026 20:28:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 487\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pz0HVQYmP0vrbjmyv4jB%2F5UovPdoQV73EKuMjKCrMAGxcxnyTjB%2FFwJigm1obnjPq9dhK31m%2BNnA7Ej6uYKif2dafntO6ywlHyuDwDjXIi6DICZ5F7RHEx6uV3oZnxQ%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c6c8316be5783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8512,"size_decoded":2048,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8511)","md5":"8445b8e282509da5cafea9043c6d95e3","sha1":"8b2ebbfa045bbcb0f56f1286b5ddcc823368eba4","sha256":"92ff713c04a290fb50a5f2087d2fc25137db5896938ef0ab268ccfb6257b565a","sha512":"355f6528c25875c8660edc3e0b1858c8100cd769b63099dcda48b87a804737e1e623a05c41a49ce572e6172c1700e97fe025cf7480230bdeb82b03fbc41c5677","ssdeep":"96:cnPntyXlz+UaqFSRbSCGC7KwT64jP/MVINaO4G:cM0M8RbPGCGq64Ic9","tlshash":"c1020b5f16b80c99e9378c2fc285764d70b4bfc32a28e7f58aa680b58e5110577f39b0","first_seen":"2025-06-30T18:28:52.657268Z","last_seen":"2026-09-17T08:36:51.201208Z","times_seen":320,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/assets-Q6ZU7ZJ5-P8HioiAD.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.666Z","timestamp":1789634173666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/assets-Q6ZU7ZJ5-P8HioiAD.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/assets/index-CAjXmNdI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 03:56:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32eec-5c43\"\r\nexpires: Thu, 17 Sep 2026 20:28:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 487\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rm1uHNOoIj2LXUWz7ezOrOR4%2Fel2djwwpfaHv4hg45D959C9HsOza4RBbHqAhq9lRp1nUtjG1jKxiSIuQVCvbaxCuiecHnBIJwinT4U3fY1Z2xko%2F8ginN%2BFmT0wa3I%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c6c8316be8783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23619,"size_decoded":5000,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (23618)","md5":"0be1e539d9c370f71c5ed19f66fb0870","sha1":"b42033f215024e2008bf0d5e032eb8b0df4cd953","sha256":"312c407a303fa7679b7eeccd85173ad7c0967df4f417c4b9e3ce05519ff3e591","sha512":"07bb4c57bd73df5ac1b0031e9d9c94be7ed97758dc07e0cda507b4fafafae3928b59ccdf403a19b3516bcd4721be0242c004c6f0408a52a707380c0b36c36dec","ssdeep":"384:ppByhqW2xs3dwktSu6foTLEQD4zrlqPqo:ppBSqQ3p8BrlqPqo","tlshash":"f8b278ada2320d497c3bed6bfa89790db0203fcb8919a4b98f61b154cbd354df2d0651","first_seen":"2025-06-30T17:29:04.8722Z","last_seen":"2026-09-17T09:28:09.959812Z","times_seen":1017,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.yilufafafa-168168168-yiqifafafa.xyz/api/public/resolve-host?host=aiitaapp.com","fqdn":"service.yilufafafa-168168168-yiqifafafa.xyz","domain":"yilufafafa-168168168-yiqifafafa.xyz","tld":"xyz"},"ip":{"addr":"104.21.34.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.897Z","timestamp":1789634173897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yilufafafa-168168168-yiqifafafa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 08:46:12 GMT","end":"Sat, 07 Nov 2026 09:43:48 GMT"},"fingerprint":{"sha1":"57:64:F6:E8:47:07:6A:61:03:FA:82:9E:AB:7C:A7:5E:91:FE:99:3C","sha256":"97:E5:44:3E:BE:27:7A:B8:52:83:82:8D:08:2A:28:22:59:F0:5E:22:D8:E1:AC:BD:38:86:12:4F:C2:3D:20:BD"}}},"request":{"raw":"OPTIONS /api/public/resolve-host?host=aiitaapp.com HTTP/1.1\r\nHost: service.yilufafafa-168168168-yiqifafafa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-signature,x-timestamp\r\nReferer: https://aiitaapp.com/\r\nOrigin: https://aiitaapp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:14 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: x-signature,x-timestamp\r\naccess-control-expose-headers: Content-Range,X-Total-Count\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGFd%2Flmt%2FP1ii3nwVzXyw5%2FHg6S6Elb8VneoRLn6VxubkGkHHqp%2Bn1VmI2BvuOxQcyTuVHmIE0Jd8Nkdgm8yr3sw%2FqB6MpIHl%2BQAncfoLOTIqsGSDZmJRV5oNI%2FaXMkwWXdb4aJ3OXN3lbEwN4IMzFa%2FAhcS8KzKxwRiE064\"}]}\r\ncf-ray: a3c6c8336954b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":840,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":69,"connect":18,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/index-DPcAVV-i.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.902Z","timestamp":1789634173902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/index-DPcAVV-i.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 03:56:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32ef8-53265\"\r\nexpires: Thu, 17 Sep 2026 20:28:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 486\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drXXdiqGS4PHYXavUBIm2EfcisTj4ka35xY4H%2Bf%2Bxq1PYnZ5TZ8jaVX2ZbsLAHz13XEvPa%2BlEdv%2BMi0LDWctE%2Fd5YsHjWm9%2BqJzua9J3QLHZDEj3CksYy6NdgkYf6xI%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3c6c832ec4f783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":340581,"size_decoded":131644,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"04b9dc9fe6206f5a6024a800a530188b","sha1":"582a31d16e59c74cf249f19323a23f1e7a315640","sha256":"d8833e969c51bbb17bbc255a18b52f86c527b854bc36a1a878f0abb7d2a0fe75","sha512":"caa25a9b4f06fcd7eb13741c12b97ed7b20ed0f8a69305253ca7d43070889d9ac6e9e1c6653978c8f8ccd2187509460e55cc8695ad7ef2f0d71db2b121444aeb","ssdeep":"6144:90ZZIqk8rusNkA2npzIkTT6+ZgUW0GfV03KqLvLpPVcUd2kw88tdBb0MOG3WENJx:90LIau3guGfG3KqTL/P2kw8x9e","tlshash":"56747d84b29170798fe310e5a4372105f234ac51b4cd8894f6e8daeb3de98895767f3d","first_seen":"2026-07-07T05:53:57.981885Z","last_seen":"2026-09-17T08:36:51.203821Z","times_seen":11,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"service.yilufafafa-168168168-yiqifafafa.xyz/api/public/agent-config","fqdn":"service.yilufafafa-168168168-yiqifafafa.xyz","domain":"yilufafafa-168168168-yiqifafafa.xyz","tld":"xyz"},"ip":{"addr":"104.21.34.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:14.951Z","timestamp":1789634174951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yilufafafa-168168168-yiqifafafa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 08:46:12 GMT","end":"Sat, 07 Nov 2026 09:43:48 GMT"},"fingerprint":{"sha1":"57:64:F6:E8:47:07:6A:61:03:FA:82:9E:AB:7C:A7:5E:91:FE:99:3C","sha256":"97:E5:44:3E:BE:27:7A:B8:52:83:82:8D:08:2A:28:22:59:F0:5E:22:D8:E1:AC:BD:38:86:12:4F:C2:3D:20:BD"}}},"request":{"raw":"OPTIONS /api/public/agent-config HTTP/1.1\r\nHost: service.yilufafafa-168168168-yiqifafafa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-signature,x-timestamp\r\nReferer: https://aiitaapp.com/\r\nOrigin: https://aiitaapp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:15 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: authorization,x-signature,x-timestamp\r\naccess-control-expose-headers: Content-Range,X-Total-Count\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxLgkApJNug3pPjrSxBRZ3bPrtUHf%2FFwTTbplrP1sSclWfUIWO9cX8toZUD%2BnvEDas9ZtLuyoVDuTmx9vSrIKWpmhhOHdd16L39bf3DrLNsRfueou6gTf0uf%2FKlzBnfZIOR4UBjk4AE98RzpyUtTNgGsjVMwcgYSWd2UraF9\"}]}\r\ncf-ray: a3c6c83979c6b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":844,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T18:41:51.81857Z","times_seen":18520184,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/index.es-BRd7Hg9S.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.610Z","timestamp":1789634173610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/index.es-BRd7Hg9S.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 03:56:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32efb-64c9c\"\r\nexpires: Thu, 17 Sep 2026 20:28:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 487\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfOa5rXOjIPcVNbBw5UNmrHvOLJp2uBq2FJ646ujM5rAxEq8gfa%2B5k8zlGZfCCmQRyRXAKXa7v3T2T8ABq7zbdXP9v%2F2KOpvnKKlUzMLhSFh0nPkKexqTaUKFkFsHV0%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3c6c8311bd4783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":412828,"size_decoded":119559,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47468)","md5":"d14d71290a8db504bad61a043959ca65","sha1":"7c2ec30c688e41ea54296c13fbadd6703eda275d","sha256":"265c9089bada7d3a61f7fedb05a93824961a99ea863cb745c13c3e3ed0f7bc32","sha512":"e53d1b19ee2c7797734ef1664e7bf4430c8189682607a204a8cfe8827567fca04d90b5605c786a748d01e5ed20f44e0afdf2e3a91bcc7a762cad3c85ab9c38b8","ssdeep":"6144:+eiV1saqR1r+UZNxz7ltsaHLD1Wzyr6pKM8ZHlbWRD2zxNQ96eTm:+bVgzZdoyr6ozHlbWRD2o6eTm","tlshash":"54944d8072a6b07603e665d9e47a2201f2395864740cd07cfbacadefae94485873ff75","first_seen":"2026-07-07T05:53:57.97768Z","last_seen":"2026-09-17T08:36:51.205168Z","times_seen":11,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/events-DQ172AOg.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.612Z","timestamp":1789634173612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/events-DQ172AOg.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 03:56:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32ee9-17ee\"\r\nexpires: Thu, 17 Sep 2026 20:28:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 487\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tOJW8xjm3uu4AzFnxezFsr%2BvZvm%2F0pA%2FgFm43dTASDMF48WdMFcpuX1INeSnUCgZaSxAmeh1%2F%2FtKmyQQdHN%2FCRVQckrXPbN0r0700UoZ5BzGRyT5nBC%2FyWVQ6FSkqZY%3D\"}]}\r\npriority: u=1,i=?0\r\ncf-ray: a3c6c8311bd5783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6126,"size_decoded":2898,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6125)","md5":"f6a80663ffbb4a6e247d024874a2456e","sha1":"8f64e93e4f832983754e56e37d18f16bff133b2e","sha256":"da208eb12e58611c9ebd0b6c352fc11c64f9f8c7f3f1b44a0f7f2b2c4ea83bac","sha512":"48f7a03a4fe8a76ff77d46b869eea9571d1f31e8fa0385d4d35b8c82a04f2ce0edfbc00618d3ea77f86cb3cbe6125247a3dab958bb790690bf45f39a8478768e","ssdeep":"96:5ER9ttlJTZFWHs9BEdCOoRLUlRHZGAq6vvVu1o3IMmmPaJvsVk:GTrlJTfWMDchq6tu0NPQ","tlshash":"44c153ccb38578b013e7d3abb07f520bf134a594640c5118b246ecf9696bc9e4126fb8","first_seen":"2024-12-25T05:30:42.59477Z","last_seen":"2026-09-17T08:36:51.206162Z","times_seen":1071,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/index-nibyPLVP.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.614Z","timestamp":1789634173614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/index-nibyPLVP.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 06 Apr 2026 03:56:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kiwi2BUW2wAZ72YZxmz9LQef89MuRwZCQomL%2BBpTw7NVFLNkhczP7WEq1TWePkGCd5D1hstAWTrpClpndGCPECZJRgzh1qbO%2FzQMRU4Bsqve8ieeI5YBKJP0xcsFg%2FE%3D\"}]}\r\nexpires: Thu, 17 Sep 2026 20:28:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=1,i=?0\r\nage: 487\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69d32ef5-3b4\"\r\ncf-ray: a3c6c8311bd6783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":948,"size_decoded":1251,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (947)","md5":"387212a26fed97a7fc98698cc647a7a5","sha1":"f18861e16440da820cd38a42e05fd814e94493fa","sha256":"1ec0c3e605b1f64e7d87a28c2540b084a517fb75ff5939ec04af40e574b875ba","sha512":"233ec8b45b8d71208695440dd58a6b0d61eb730787862e46d6a1583c7e571516b75b0c120c2c66c53c3eb3eab4946209920df2fe7a9fb22732b28696802667ba","ssdeep":"","tlshash":"15115ec836c9b43613669060d4afc007a22ba544142f44b0e31bf6d13d750bca61f938","first_seen":"2025-05-01T12:02:27.006605Z","last_seen":"2026-09-17T09:28:09.962867Z","times_seen":915,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aiitaapp.com/assets/rainbowWallet-O26YNBMX-DUhYus-9.js","fqdn":"aiitaapp.com","domain":"aiitaapp.com","tld":"com"},"ip":{"addr":"104.21.61.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aiitaapp.com/","date":"2026-09-17T08:36:13.658Z","timestamp":1789634173658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aiitaapp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 08:52:16 GMT","end":"Mon, 07 Dec 2026 09:50:51 GMT"},"fingerprint":{"sha1":"61:16:D9:52:B0:04:AF:C7:A1:AD:9A:2F:E3:37:25:83:43:89:55:A2","sha256":"AB:E2:9E:DA:83:B3:29:94:65:16:24:7D:76:1E:5A:6A:7B:22:D6:CC:A1:A5:02:D0:1F:07:47:35:92:A2:6F:31"}}},"request":{"raw":"GET /assets/rainbowWallet-O26YNBMX-DUhYus-9.js HTTP/1.1\r\nHost: aiitaapp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://aiitaapp.com/assets/index-CAjXmNdI.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 17 Sep 2026 08:36:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 06 Apr 2026 03:56:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d32eeb-1400\"\r\nexpires: Thu, 17 Sep 2026 20:28:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 487\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WP9A%2BgeGNW5%2FL%2BdjUk1UvBUXUjYEx6Pf0t4zeFNi%2BZbS8CdnjTZVKuJKDPssMIVvzJfbZnx9UcFLEEzJl%2BJsQF2BdRq6pPyRHFqU0Zxt79CIMu0bJqHttCJF6A966EM%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3c6c8315be3783d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5120,"size_decoded":1780,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (5119)","md5":"31a35ef113542c972267ac1f6215cdf6","sha1":"a3d7e6b73fb9866648ca70b77733e2159ece1802","sha256":"69c1e51351246da93a291e9b0dc3a2da57b7e275d3736e67d4bbb9657e1245f4","sha512":"98b7aef39266034b588d6dc868c35b306db9581da09d03c35fb651726fa05187fcd8fd24f471ebf9cbc6bb34005433f084ed756d6b793e3b5ad1d9eb9e751c4f","ssdeep":"96:0z+pilTNtMvi39TWtyei4p4ut6KK4tJBztP+Bw:0qpiD470sd9V","tlshash":"42b1546d96b96ceedc37e48fdc18670d8020bf17ee4449b1a999db4f1f25818b4e9140","first_seen":"2025-08-08T14:52:21.86834Z","last_seen":"2026-09-17T09:28:09.9716Z","times_seen":955,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"aiitaapp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}