{"report_id":"56282e8f-6ca5-4ac9-8d4a-6b9f2810b9a2","version":6,"status":"done","tags":[],"date":"2026-01-31T17:46:49Z","url":{"schema":"http","addr":"raydiumdex.cc","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"172.67.140.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"raydiumdex.cc/","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"title":"Raydium: Solana's High-Speed AMM \u0026 DEX | raydium io","dom":{"size":10115,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (310)","md5":"93f7dc222dca74b10755d3b18fa50715","sha1":"6e5147b1ae39b70f7983a3fd46b3f3291c5dcefd","sha256":"53a725a09862618b12fbb8f2e01440efa0041e18c03d05dd492c989c646afc08","sha512":"bd7825e0e2d9f989b9f831352789f53614d8c52168a3b1234b0d1357944558f3eab6a3869b16dc52a6291ee7c191c54798269bd43b2576ccd761ee348759114f","ssdeep":"192:erD0FNhnTboLvgGjsOSs2rz3u8D2hjdaVWgT/poFtomn:aqsjFjsOSs2rz3ND2hjdaVWgTeOmn","tlshash":"9922622665c57e7a124742a3748e13ebe1bfec06d71704b2b17742889fa0cc4ce2768b","dom_hash":"domhash8b6960a8e620423b7c0a701d858fe8f7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"raydiumdex.cc","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"172.67.140.202","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-07T17:46:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"raydiumdex.cc","ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-12","domain_rank":0,"first_seen":"2026-01-31T14:58:54.612686Z","last_seen":"2026-01-31T14:58:54.612686Z","alert_count":11,"request_count":11,"received_data":849780,"sent_data":5024,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"raydiumdex.cc/style.css","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydiumdex.cc/","date":"2026-01-31T17:46:24.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydiumdex.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-type: text/css\r\ndate: Sat, 31 Jan 2026 17:46:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 775\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6964fabe-b986\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlTOw3kthZdRH9WGs0CAtUnDreA3YlCqAxBRt1oqv0DklQBc92qyQDXQwKBdhe%2BbwDSVUyaTdiogNLUBs7y1dVPKLE3odY8rsOjn\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9c6b0741fe7f56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (688)","md5":"b522f11ebb3eb809c85db87871e5741e","sha1":"75a10d2d8ea275bb9ed3ed1aed27ed645789f552","sha256":"8eccdefd5f8f48b016be8f0ed266da94b1f21881f9d5bef7212cafbb15c55f61","sha512":"9e731cfa1c9163dbb7d4ace6f1982689a80770a0794eea6ce44db90cd596858c06afc17e97b49517932d2415234d3addbf5d01c92f51500d0e2e9d6099e861a8","ssdeep":"768:73X6FzBUzjGXVt1biZwPJoJrlD+fCZbk3hRc9YbZU9k2wlPp+DeYyblGRoKbOdar:+AGFt1biZwPJSrlD+fCZbk3hRc9YbZUP","tlshash":"d123508a66e16204741f94aa7d638b48733cc443864eddbcb7f1205cbf891e79662bcd","first_seen":"2025-11-23T04:54:30.049853Z","last_seen":"2026-04-15T00:25:21.034771Z","times_seen":14,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydiumdex.cc/favicon.ico","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydiumdex.cc/","date":"2026-01-31T17:46:25.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydiumdex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-type: image/x-icon\r\ndate: Sat, 31 Jan 2026 17:46:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 775\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"6964fabe-634a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBaWSf6sWA7Wqtn1MlCcyO9dWL9%2BoovZtVUjfRL%2Fc2l1Vpaxek%2Fdp4V2F7cJWrwuAQB1xlHSneUT2W5zyBIs8KLZQ540YVui54ZG\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c6b07424e8256c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25418,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"0852ee59bec12689159c352345987cfb","sha1":"8349663b28875435a09ef425cd95d64d5bc21b1b","sha256":"536f8422beceeee32e1021494bc2119519fbc649688da9efbdcd06b9359536b4","sha512":"b38726e698ba80f7cf36ea3f415d68ba92388a1aca057226c1772289d73e12672d6f93084f6c423df4ecbe838d961ea7576bf297b9658a1b8b9e043a16fa0be5","ssdeep":"768:T1+YSPSYeL3kil54VS8WjTmCW7MwVSkGg:T1/SPSYeLJkWj6cwVSZg","tlshash":"48b2e17239b94e7b6118061906b32be42a239ab2b50fdb17554aec41723dfdad13c72c","first_seen":"2025-01-19T12:16:37.598644Z","last_seen":"2026-05-05T02:09:50.280111Z","times_seen":369,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydiumdex.cc/images/home-hero-bg.jpg","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydiumdex.cc/","date":"2026-01-31T17:46:25.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET /images/home-hero-bg.jpg HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydiumdex.cc/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ndate: Sat, 31 Jan 2026 17:46:25 GMT\r\netag: \"6964fabe-10970\"\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncontent-length: 67952\r\nage: 775\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDNS9PCAkPJT37G0lO1xdUX1zfNzwUxZAwUTzdWY%2FC3%2Fa12lr1Np5%2B7FmTSfSefA%2BqtE0oWqW4iiqxemmwXolcXFCg3OvMvUO238\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c6b07425e8356c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67952,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1400x1081, components 3","md5":"45060443906a152fd502f6e637834294","sha1":"ad34c1393725a6b7e2c98d2561476298103adcdb","sha256":"e578e383ccb7a5c62627d4085bfcfe6fe98e122fc7ed1a803ecdcaf3d4b7ad78","sha512":"76673bb6112ec6b0fa8873353cbce8621bcc1881ff35172903d4f99e430cce9c336f3fa03efbe3ca8b2ab49c66c7c7c03711381abc78f4ddcb2a0babd8cab63e","ssdeep":"1536:Gp10CxzJ7fRdWKfZvMMzHVjCo8VtsG0zcNi3gQ:i1xpdfRdWKfVGFVWG0zN","tlshash":"7f630227c665f3676c7c2b3244200ad44f78aea4775fbc702ee65109092c7e56eee10b","first_seen":"2025-11-23T04:54:30.055924Z","last_seen":"2026-04-15T00:25:21.043213Z","times_seen":14,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydiumdex.cc/images/home-science-card-bg.jpg","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydiumdex.cc/","date":"2026-01-31T17:46:25.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET /images/home-science-card-bg.jpg HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydiumdex.cc/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ndate: Sat, 31 Jan 2026 17:46:25 GMT\r\netag: \"6964fabe-9d90\"\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncontent-length: 40336\r\nage: 775\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RlOPA7NvRoo20LEva8HzeASTyBL3D%2Fl%2FrAuTAcuuVbuqj4KVI15mglWyI%2BZ%2FoHaKXnIO0edDDxpGwQJHAhff8ubNST9l7Oneeg1f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c6b07425e8556c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40336,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1647x2156, components 3","md5":"ea5c3ab99672bde541b344fc5d440e51","sha1":"ebca7ca3239ebc46dcb46bec9bd8d87b06b65a23","sha256":"81ab627c7ac6d940b65738c3972ea699c7e4dd8c677899603ab1c7859b4c8ae0","sha512":"76cca234878793a226ac0768bed3c9d955ff832bbc2c97b7b384de9cbe65e4cb79f4b4efd7462915fc8f63ce4389c464d750af27192f32aebf604e78eaf45078","ssdeep":"768:tNSLyqtXs1OG9DxjSoArOMMeooHgXSmEHSfI2sT+wY7:tNjy8Vnj1maYTn6","tlshash":"35038d53ea595002d0ae07f4e49323283f73a7fed70e26230fcb823479a57097ca8690","first_seen":"2025-11-23T04:54:30.056811Z","last_seen":"2026-04-15T00:25:21.053142Z","times_seen":14,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydiumdex.cc/fonts/metro-sans-medium.woff2","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raydiumdex.cc/","date":"2026-01-31T17:46:25.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET /fonts/metro-sans-medium.woff2 HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydiumdex.cc/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Sat, 31 Jan 2026 17:46:25 GMT\r\netag: \"6964fabe-42\"\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncontent-length: 66\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRSoQ%2BPCFGeZqdSQOFdMufBq7c%2FFWRbvhg1sdMUT7o3p7ppF%2BhZHj3QcGu1V%2BUr3B9%2FrTrPJsrn9jdTT8uLxKLzVThRwT3kF4Dp5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c6b07427e8756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":0,"mime_type":"font/woff2","magic":"ASCII text, with no line terminators","md5":"6f92da443906657a630e3db55986a541","sha1":"d79b89ceb0fffb13cdcb4abde2a755cb30559bf6","sha256":"62775d2c68fa994b7c1df91a4e3fdeafd1295019a646b6b33780d5cd8e02d034","sha512":"e0297bc778654656c5a4120f371a510904c692079799ae3d73fc2802f8d6c31e48d8fd840b217ddd7941fa148192f4787d9685cee4ba49ba752175fcd0c23d54","ssdeep":"","tlshash":"10a002636bd5238a0f0577a571553d4488078c34e4a1d184bc57b4d915f119605e075e","first_seen":"2025-11-23T04:54:30.057723Z","last_seen":"2026-04-15T00:25:21.046109Z","times_seen":14,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydiumdex.cc/fonts/metro-sans-bold.woff2","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raydiumdex.cc/","date":"2026-01-31T17:46:25.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET /fonts/metro-sans-bold.woff2 HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydiumdex.cc/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Sat, 31 Jan 2026 17:46:25 GMT\r\netag: \"6964fabe-40\"\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncontent-length: 64\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDXqOkt6AosyrQyVueve8MGx%2FmdETD9oVPEX5OFktn8DufN7BbQXEX2OiRUFhH10tT%2BzpH%2F1DUCNkEf2RNhHR93A2%2FPzsr9crW6A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c6b07427e8856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64,"size_decoded":0,"mime_type":"font/woff2","magic":"ASCII text, with no line terminators","md5":"723b4ed82c7dfec23ea110e7304b838c","sha1":"427876b5e6d27e2dc6d82c84dc2940ae300795ac","sha256":"d2248527f3335df738945132b326e13fc4c0ed9c5300e0f4c761a6ddf4fb08e8","sha512":"494b2851b7b8e63fd12ca2d58a8f9911bf04daa6f968b6efbf90ea680304b014d01e687c0e02a80d71370a8e0a4adeb5bd37d4f6c40c39f17c95d32c6ce2dc4f","ssdeep":"","tlshash":"61a0026313d632850f457fa5b2513d5488078834a491d1846c97549915f125704a039e","first_seen":"2025-11-23T04:54:30.058622Z","last_seen":"2026-04-15T00:25:21.026402Z","times_seen":14,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydiumdex.cc/","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-31T17:46:24.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 17:46:24 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVbSutZF6DnjLtte%2BXKBPvvJO4dJiLBKGzL9%2BEpv6VYyV1RAO9os4pElKad1YpF5QmQ3SPsaC9puP60F7F19GQMDL6rqfy4TkwVJijI%3D\"}]}\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c6b0740683976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10130,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (310)","md5":"e3a20015ece293637a9d684a3dad0630","sha1":"3d4a3a6973b4e7b44f9a91cd6956a39d4e6deb94","sha256":"6f85c5249577d2cd74f9d6532503d3a442e1ed1914471d077dec817befbdc6a4","sha512":"bff0af8bcec1fd9f17be3b941ab230b8286cf8001b55eeb24a6bb11cda7a2253435bb3055a20a1daf45d72cc71a28303251bdf44ca7448eec4ef21dbddc214d1","ssdeep":"192:hyDVFNhnTKoLvgGjsOSs2rz3u8D2hjdaVWgT/poFtom4M:WzhjFjsOSs2rz3ND2hjdaVWgTeOm4M","tlshash":"1122512665c57e7a124742a3749e13ebe1bfec46d71704b2b17742889fa0cc4ce2768b","first_seen":"2026-01-31T14:58:59.928618Z","last_seen":"2026-04-10T09:09:54.744266Z","times_seen":3,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":34,"dns":11,"connect":1,"send":0,"wait":110,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydiumdex.cc/favicon-48x48.png","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydiumdex.cc/","date":"2026-01-31T17:46:24.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET /favicon-48x48.png HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydiumdex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Sat, 31 Jan 2026 17:46:24 GMT\r\netag: \"6964fabe-a1d\"\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncontent-length: 2589\r\nage: 775\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=So2Iv3VTxECz4cZdA4e7rPbznAah%2FHhFlA245U9csJCm0CQlZmcSR%2Fruy6Zlh6N32Jjajby3wnbL02HFzBBv8Dysc6l9HNE%2FKSGA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c6b0741fe8056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"403dcbfa300b9b237a812c2b743535b3","sha1":"cd479059381615bf242bed9d44c916703de428de","sha256":"317ccb62e68ad5005c4fa72dc86081a13916b2d3d63e4ceaa8d02538aa9efe72","sha512":"85a8dba811edea7fe0f1065d76a45b1d11728025241227dc3f114a332ebe681fc630705d0c6d8d71c9b800c08a52ff7b809a1ea8da06e8e1c7cd5c8e0ffdc28f","ssdeep":"","tlshash":"fa514d86f060fa2f5ac506679556cf980e39791d10a33a081ad26906790065f9fc74c3","first_seen":"2025-11-25T17:37:22.341483Z","last_seen":"2026-04-10T09:09:54.752206Z","times_seen":8,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydiumdex.cc/images/card-device.png","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydiumdex.cc/","date":"2026-01-31T17:46:24.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET /images/card-device.png HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydiumdex.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ndate: Sat, 31 Jan 2026 17:46:24 GMT\r\netag: \"6964fabe-c87e\"\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncontent-length: 51326\r\nage: 775\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2B16WEPa0g0T3xEQXfJtQA38rmqr1P8CyCjlc9syb7IgM6oZKa%2FVWRW%2FWGG14ydFu0DVMz%2Fviw5YvSjnUUWwgLbjXFBQKz4%2F40Qi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c6b07420e8156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 556 x 570, 8-bit colormap, non-interlaced","md5":"c24b1367abdc2bd541bcf52b0e3ce740","sha1":"15c1f27b81b2e8e1ae2554b60d4e665a8c711360","sha256":"2038ae1bec1e95475bf47140d43eff81dd31dc7d2ecbe5cdf4065d068390fef7","sha512":"a70358e42758945186059e471c99d05c5bd8e3896e7eaf3dec91435fbf1b6ab7ad4adef8fa8aef6016a2fe33ad5a30df8d47bf14fe69d9581f5db2418ad6298a","ssdeep":"768:d0ucYQC7zuskP4knpvVBJO5mtNWPrPaBboRi/G3Ruv9hEUfDPW9EEd:mC7qsTknpvVBSAWTPg44bvHEuOEEd","tlshash":"5733f222bb626f4ddcaed8aa41ce474c076361c81c2e35c5e09dcaba3a645694c5b05e","first_seen":"2025-11-23T04:54:30.050968Z","last_seen":"2026-04-15T00:25:21.04083Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydiumdex.cc/images/home-cloud-card-bg.jpg","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydiumdex.cc/","date":"2026-01-31T17:46:25.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET /images/home-cloud-card-bg.jpg HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydiumdex.cc/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ndate: Sat, 31 Jan 2026 17:46:25 GMT\r\netag: \"6964fabe-74450\"\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncontent-length: 476240\r\nage: 775\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHHPBH5xYZW7KJ0vlnKpMZT8BBEBKMcppvvRbC0IQmpZrYVRCSTRZ9wZeSK4Wr5yJHbCx24vL1e830s%2BDptVE2RvRNfGPzOnc%2BNZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c6b07425e8456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":476240,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1647x2156, components 3","md5":"c593fbf6144c750f27bc3878f7699a62","sha1":"6fb8318931c992cf4ffe5afa919b39d4b77d2d15","sha256":"55b290a08f41a39c78b0552eb1c791707ff228b584c92f11ac88857cdbaf1017","sha512":"656578e1cdc650d5c30b813582e89b89385bd5fb3fac61155a439d1d38bda44177ddea1272edd0ada9b1d54d044dc8d9998e93ac46b18b1e00d3a7a2c44f4ac3","ssdeep":"6144:TQuJT/5LJXstCmGv+8HYC4lNTjzPLc9iibrncck7MxtxnMKL2/DoGk7kTCXayI3u:UuJTxLVKwHyN3MTI7mxlK2qyJuFNY","tlshash":"f4a4230071dcbca833ea5b297139f9353eba78a11319ccb44bba7ac75971c8f66d9101","first_seen":"2025-11-23T04:54:30.052459Z","last_seen":"2026-04-15T00:25:21.056107Z","times_seen":14,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydiumdex.cc/images/temp-img-1.jpg","fqdn":"raydiumdex.cc","domain":"raydiumdex.cc","tld":"cc"},"ip":{"addr":"104.21.27.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydiumdex.cc/","date":"2026-01-31T17:46:25.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydiumdex.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 09:51:08 GMT","end":"Sun, 12 Apr 2026 10:49:42 GMT"},"fingerprint":{"sha1":"3F:42:D9:3E:0E:27:73:D7:E1:D9:81:FF:9A:2D:3A:8B:A6:2F:FE:5C","sha256":"E5:AA:A2:E7:7B:59:14:3F:29:8E:47:E1:82:0F:EE:1E:B2:E4:C4:CA:4D:92:85:01:FD:E5:AC:CF:CE:65:FF:5F"}}},"request":{"raw":"GET /images/temp-img-1.jpg HTTP/1.1\r\nHost: raydiumdex.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydiumdex.cc/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\ndate: Sat, 31 Jan 2026 17:46:25 GMT\r\netag: \"6964fabe-1d78e\"\r\nlast-modified: Mon, 12 Jan 2026 13:44:30 GMT\r\nserver: cloudflare\r\ncontent-length: 120718\r\nage: 775\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pV94lYRw7w0roAICIrQsFZxrhdxiz8FLAEtwykH3sFV13rWHPeh9MO8I4fWUZ4cBz9uxsRnalSGgHSWJqNxwdnK1woKo45MB%2Bo6J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c6b07425e8656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120718,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1340x1214, components 3","md5":"b4d6858415aec2c95111ecf38dc8a795","sha1":"f47ccbf13a2413bbe850a1094095a29f6653ac7d","sha256":"329cf928dfe3960def308a7b6a619057d323d2c4c20d6140c39a556bac5a6c85","sha512":"419d9d9c0c8ed8d841cb02a0d7810e80eaaa9b5181ef87fff4c418e7ad33e6140960ad43d01e592c04cdfd1fec5545ab09d2531616daabd65966b7ee4b65843a","ssdeep":"1536:qz83R3oRTK8na1VtRjrPedbO/xygGxFTGXE5ULRZ3pAYRbWYM94wwpvlnPK:945CnWkxyBxlGU5KAubWB0hlnPK","tlshash":"52c3120bdf7074e6d4787e7e311ea3c2d6ceb269854e1030b45b1f60e2e2269dd2d11a","first_seen":"2025-11-23T04:54:30.053339Z","last_seen":"2026-04-15T00:25:21.049939Z","times_seen":14,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"raydiumdex.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}