{"report_id":"59b6d238-cf52-4f75-b390-5997334907b4","version":6,"status":"done","tags":[],"date":"2026-03-26T04:12:15Z","url":{"schema":"http","addr":"jmper.xyz","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"final":{"url":{"schema":"https","addr":"jmper.xyz/","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"title":"Jumper | Smart App for the Universal Market","dom":{"size":49945,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27734)","md5":"06016636129c885f7ad8e890ef56d9f4","sha1":"bb3695c436d1adc92c6fe427052583100a607f0b","sha256":"3ad1c5336c92ca114a48f42bd7ce0af4400c6ba0dfa5b0298843eb5b4b482590","sha512":"95e2cc45940e3aef43f84659f8311a5f771d8c794c88a5ca3cc4a233fa8eccc5f289096900ea1d99a47fe4bcf270dac84f1ead3df329d6a177c66bb14df661b9","ssdeep":"768:EIKFr21jcdXfOYz1zSzDEtmFWkdW2J1sqqMkeKx0uuMeeeeO:KlmHUk84sqqMkeKx0uuMeeeeO","tlshash":"2323813f9210025533274fbde1fe7694d1a95c08fac10d68b2fa0da1f6b6e4db28e645","dom_hash":"domhash7dce07915ee967af3f8107c27fbbabc8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"jmper.xyz","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T04:12:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"metamask-sdk.api.cx.metamask.io","ip":{"addr":"104.18.31.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-02","domain_rank":907454,"first_seen":"2024-11-22T07:39:53Z","last_seen":"2026-03-20T18:38:01.657085Z","alert_count":0,"request_count":1,"received_data":845,"sent_data":606,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]},{"fqdn":"jmper.xyz","ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"domain_registered":"2026-03-18","domain_rank":0,"first_seen":"2026-03-26T04:12:20.909188Z","last_seen":"2026-03-26T04:12:20.909188Z","alert_count":0,"request_count":9,"received_data":456143,"sent_data":3990,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-03-25T18:17:27.569481Z","alert_count":0,"request_count":6,"received_data":34270,"sent_data":3032,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}]},{"fqdn":"dynamic-static-assets.com","ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":62467,"first_seen":"2023-06-27T20:50:44Z","last_seen":"2026-03-20T18:38:02.783437Z","alert_count":0,"request_count":2,"received_data":537770,"sent_data":949,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.dynamicauth.com","ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-24","domain_rank":1824779,"first_seen":"2023-07-05T19:07:58Z","last_seen":"2026-03-20T18:38:02.478827Z","alert_count":0,"request_count":4,"received_data":30030,"sent_data":2795,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"iconic.dynamic-static-assets.com","ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":1804516,"first_seen":"2023-03-28T18:24:46Z","last_seen":"2026-03-18T19:02:21.569456Z","alert_count":0,"request_count":1,"received_data":2102288,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"leather.finance","ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-26T04:12:20.90355Z","last_seen":"2026-03-26T04:12:20.903551Z","alert_count":0,"request_count":15,"received_data":6258335,"sent_data":7028,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-22T22:34:23.857339Z","alert_count":0,"request_count":1,"received_data":14924,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"leather.finance/iframe/assets/index-DFxmtLEC.js","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8125782b48d735879e8b3a6a224d7c21","sha1":"a5688aa83067c2a2495f4dc8db36eca6532531fc","sha256":"bcb0ed51324660f011f15848ec6df5686dcf59f39a0c6d4a676a96c00cae6af1","sha512":"14f891432c9d494c45725b9bc8c6c403ee4b3242e71f4e0797c01651cb7978bea00200967721693481e240f7d6c49aa2af436e1f1c56149f8926a2965bc9a43d","ssdeep":"49152:PIgqkPhek4LdStciig6gO5ECeizX0A7/+/yHOat+kUiTyDJnZvFGBCaGCbmIubTg:+dSgCmkCVy/ymZVKQNppFI0GEZikDRwx","tlshash":"9c468dc4b355b07447a345e4947b1105f339ac44b80d40b8f6bccceb6ab5a89a67bf3a","size":5847181,"data":"","first_seen":"2026-03-26T04:12:27.000178Z","last_seen":"2026-03-26T05:06:01.276616Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmper.xyz/","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-06-06T13:04:43.498154Z","times_seen":1752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ac91862c278b1e2b08353bccf82aafc","sha1":"2b50f79907887696805de60a8b44184b193518b8","sha256":"bfd6e937fffd533721bd23d23e00f8b3fb63a715983b0219860ff0777dfc2ba2","sha512":"52ec78d5de2e9838c26bf3049d2d432a11b8caaeae71c7e2af4d970b7dcceebcea4178a4c04cfe0197457b5d2081f1c6fdf996e6372baf12eee7b5aaa00973a9","ssdeep":"","tlshash":"ae11df5e89fb34565aa335bdbe4fb14935b4502b468ccd207d0cc7905fa223a16b2b8c","size":893,"data":"","first_seen":"2026-03-26T04:12:27.002574Z","last_seen":"2026-03-26T05:06:01.269703Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-05-31T16:53:42.080875Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-05-31T16:53:42.066843Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-05-31T16:53:42.071782Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-05-31T16:53:42.072979Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-06-06T16:05:19.710466Z","times_seen":329904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-05-31T16:53:42.076999Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-05-31T16:53:42.066843Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-05-31T16:53:42.068091Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-05-31T16:53:42.083144Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"82231d38f8bf3d11c41ee69f9c71f6ae","sha1":"776e3ae4179c16def43495889c188c4bcd70263d","sha256":"ae5696f5e90d40559e00610fb7d341c7f011eeb9d5f8ce6b23af482793355d51","sha512":"7b239a6966f90c71dc98e3c774803958079afa4b7250ba857efb4c31d5637ccb34f96ea8ddb5498ebdd9f42b6c7d127b379f57378de7a6b5fd71e57f416a2f41","ssdeep":"192:FZThXn6JgvirA9adYm2Mlrvxcvy50FSivCf0DrX7Dnzlyo9qYYM6d37oMeV3FVZl:FHeVWRK1GfRGW4dsLsjU","tlshash":"68429e0f0ab865022a6364345e5d18d4ae208db7332968e53ead10645f9bd3c3bf5ff6","size":12757,"data":"","first_seen":"2025-12-15T21:06:47.365411Z","last_seen":"2026-05-24T08:20:42.545253Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/assets/thumbmark.esm-AzwzrjE8.js","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ccdda415bf41aab9f30fd22be3ff43f","sha1":"3e7e4cb4b32c5899525d0b8fab11f4241ba6dadb","sha256":"b6ee775b3aab6a528e6b263a7288f25cd21cdd653fc4113e08c42543a7e088ca","sha512":"630cf72e70eed873eed529a651710f63760f09d62ae3cfb68852e5680004a8da7f2b1b51fb9df11265496170dc4e2d9b6ce71c28ada5592941d4c72dc886693e","ssdeep":"384:gzAG+2d/GfH/dHchKQtFUwjCNjRSRUu+QKD1MvtWYyw+TQDn:gsG+4/GfH/dHcmSmuknw+UDn","tlshash":"fa820cddf789703a43a73565307f804aa53a7910702f8c00e16ad2917efc95da27bf6a","size":19225,"data":"","first_seen":"2025-09-16T05:43:58.784832Z","last_seen":"2026-04-28T11:27:53.244506Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmper.xyz/","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"introduction_type":"scriptElement","is_inline":true,"md5":"1005aa57c8605c20f30fccb51c96dd9a","sha1":"8c1c697982afafa5f7de0f7b7d150c66fb21c317","sha256":"a51b96b81f630bcefe82aedf90bee92be8193e02f73902c7dfa42dec5abc5671","sha512":"7036fcab2a0f546486e21249ab3059eeffb6e01c0066a3664b91a598d9f02945b5ee20c2c33c46c3ff6ea9b7dca8e7cf4b286d749f4c1bc6a8d4ead7747eb6fd","ssdeep":"","tlshash":"87e07dbb6e108d3512b6c5f765ad6b4c3a2bc05b7c0294f204bc801cdef0cc1703149a","size":326,"data":"","first_seen":"2026-03-26T04:12:27.014955Z","last_seen":"2026-03-26T05:06:01.278172Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-05-31T16:53:42.069633Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c67fe508d0a100174b807fba9c73d514","sha1":"2a9f02dcf3e7adc49ba3b0c03e7ea76dee1b3db3","sha256":"45a0d8a5c1f1ac00c56b30a92aa74e75177dd21aaad3623fc8c168e1075b4e5e","sha512":"450c5122a96bc051b7e846bc6512c3107236b72f8d29eaf9799c1e414b77da1c9a4aa84e8c63d7895a2abd54ef423fab7511d5ab16b12ee8ce97ef3dba3394c8","ssdeep":"","tlshash":"b7319e2f893c75152c1622319d653de08f8519a6397970f22db12064964fc3c37abded","size":1828,"data":"","first_seen":"2025-11-19T22:32:11.255975Z","last_seen":"2026-05-20T14:48:48.435916Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-06-06T16:05:19.710466Z","times_seen":329904,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-05-31T16:53:42.074685Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-05-31T16:53:42.081978Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-05-31T16:53:42.070712Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-05-31T16:53:42.07595Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-05-31T16:53:42.062895Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jmper.xyz/apple-touch-icon-180x180.png","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jmper.xyz/","date":"2026-03-26T04:11:53.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmper.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 20:06:59 GMT","end":"Tue, 16 Jun 2026 20:06:58 GMT"},"fingerprint":{"sha1":"EB:CA:8C:F3:AE:A3:D3:20:67:F1:D9:AB:C0:50:4B:47:F9:B6:BC:B2","sha256":"EB:9D:7D:7A:AA:7F:99:9B:86:64:B8:38:C7:5E:55:EB:0A:5E:B8:3E:10:8E:CB:0A:E2:13:96:E6:09:A9:EC:EB"}}},"request":{"raw":"GET /apple-touch-icon-180x180.png HTTP/1.1\r\nHost: jmper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmper.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 2317\r\nlast-modified: Mon, 09 Mar 2026 14:21:04 GMT\r\netag: \"69aed750-90d\"\r\nexpires: Fri, 26 Mar 2027 04:11:53 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2317,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"f9371cd983b007ff0816adffaed06c76","sha1":"d584fd49ec5f9e84f3942afb485dcab16c161e53","sha256":"a0fb38ba7ef2beee2a4df6abbfcd704fcbad61c8f1124a0f9833a7cf33c2e188","sha512":"baa4af82bdd2816f927ef9a8b1266086bceb7daaea748aaa656d5534e6207ed0f783b039660c0d6be5cc896008d9afb38c4a8f2ceabbadc35387bba8baa74c73","ssdeep":"","tlshash":"5c4139f9a05392308957cbdecca96d52002f19ae2a8eb537cd7af83c3e4a40d2161427","first_seen":"2025-09-28T16:33:48.909164Z","last_seen":"2026-05-03T17:18:14.006405Z","times_seen":13,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/master/svg/icon/eth.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/master/svg/icon/eth.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"16e4f241c51d443d56479ffb16a90206743a8d9af5964344f0d75a9f7137892b\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 74BE:285AED:DF75F2:F505A7:69C4B1FA\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1774498315.395763,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 011a620e69ed2f7fe91017f8c07a612549c50536\r\nexpires: Thu, 26 Mar 2026 04:16:55 GMT\r\nsource-age: 15\r\ncontent-length: 772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":2171,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48b7cdc7d701c6705b49f3ad81a6f52e","sha1":"9334d9e4a9638d560d45aa956429f0582575de5c","sha256":"dc2fb7da464d8fda251761ce4536df3f78754f20ba2261308751fa9eaa2a4382","sha512":"bc24d2a1ddc63a2a407951c6461bf67ddfc6f310e181280a9b951c221bb048173500b42380a2eea27f00eb98c15996fccc456ab8f1664ae88ad4ca40b746e7b1","ssdeep":"","tlshash":"b84100744a6c704f6c5a177de3b890b7222f30f9726d105dbd9e4919a437687dcc3a40","first_seen":"2023-06-08T16:01:30Z","last_seen":"2026-05-30T00:14:05.457601Z","times_seen":49,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":45,"dns":2,"connect":13,"send":0,"wait":14,"receive":30,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:56.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:48:56 GMT","end":"Mon, 01 Jun 2026 03:48:54 GMT"},"fingerprint":{"sha1":"67:99:97:5A:6F:90:2B:62:58:A1:FA:F4:2F:57:89:CD:1C:7E:15:4A","sha256":"C3:7B:DE:EF:FF:5B:88:15:D5:20:E7:17:F7:40:F9:24:DE:12:5B:D9:4B:C1:0E:2C:03:C5:95:7D:B3:A5:CE:AA"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 04:11:56 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 25 Mar 2026 00:15:50 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Thu, 26 Mar 2026 04:21:56 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 100565\r\nx-static-request-id: 39ZCTD8C3KZZC5RN\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"3a2ba763274960e901d18f6334f60765\"\r\ncontent-encoding: br\r\ncf-ray: 9e23506f6fb7a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T16:09:46.953564Z","times_seen":16183249,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":11,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/api/tokens?chainId=20000000000001\u0026limit=200","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:56.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /api/tokens?chainId=20000000000001\u0026limit=200 HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:56 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6iqDj9DEuVg9hYPzQ78XQSJfkeSWtPJvHrdD9Odlnn%2BMV99ipbgZO4CjtO%2F9HOxvxNlgtfdIQnUwfdZ%2FTTutbfJRYYY9umHKzbhkQFlU4e%2FdnmRkAtXnyLJJlcNqQzVXRgA%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e23506fba331525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cf944f2c1968ba28bc1e499696b0e469","sha1":"7cd60cf9d8c581a0bf4b765a03e0696af4802b62","sha256":"8689a6ef0a9f9a57992ffbb70844202580d10d5dee924fd4182cbe7c16ef5538","sha512":"accb9c9abd04e9f2dd23a6e4df2080125eb0c2246b564607b1613a05dd25082cf799ed8b9b230d2f6528ac1fc4d866da8f25a8f445b94eb242113408650a0599","ssdeep":"","tlshash":"1de07d778814517bdf711252d455b0802bf0728625f0446fa06a850c8b50f818503f8d","first_seen":"2026-03-26T04:12:26.964899Z","last_seen":"2026-03-26T05:06:01.264658Z","times_seen":8,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/?r=KATVGT","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jmper.xyz/","date":"2026-03-26T04:11:53.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /iframe/?r=KATVGT HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmper.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Mar 2026 19:53:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRHAi8vVSj9jVW9yiqsg5tIY0tv%2Fyh2hJ8h97DNvEqKglR9cExM61EuwCAYWf2NCGU5aHBxuvtb7urZsvxix9pXoJULzp2zrZqDzfHKvWD0Qn6d%2BAwjMjM8jkG%2FIMOJoyJM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e23505b6c80783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1521,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a6dcc259710ce719f71ab124cc9aaf52","sha1":"a89221ff27a7afd4bb88f4cc8ceb09aa087ae1ec","sha256":"63b9ac045e69f8292e68bbdfe959b6ae087332f8c2ac2ae3f61ab1e25a9f262c","sha512":"e0bc3010ab982702168678490a1e57b95d284ea1c6dad52719a7416b5919f5d9d53e2a79a655bd3661b37bce8792acc0feb865e8509f5490528ebe6038b96710","ssdeep":"","tlshash":"dc31f04e8cf6681252a3267caf8fb10839658117468ccc107d9cd2601f913768af7bac","first_seen":"2026-03-26T04:12:26.965836Z","last_seen":"2026-03-26T05:06:01.253301Z","times_seen":8,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":48,"dns":28,"connect":1,"send":0,"wait":90,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/assets/index-DFxmtLEC.js","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:53.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /iframe/assets/index-DFxmtLEC.js HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FnRanue0OOkDOWRPxPM8s2Tmfe6ro2EL3cnmpe1uJcDSO4g2efgzhtzcYa7NEPqfBAj74OJ4cRLpw0YM8kZA2rJXs%2F2U7SOBwj7w7yhaImEKQm9xS%2FC5txldV7j5m7EYVg4%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 19:53:09 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b70e25-59388d\"\r\ncf-ray: 9e23505ca88c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5847181,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41755)","md5":"8878d687822625bf5db6299edaeddc6d","sha1":"53831743db50919b959ec3d447935f0772f0f09a","sha256":"8e927db108f0074d175ad2566879e96e41a8d2ad1f31a2bcb8a3d246d7f018f5","sha512":"0fcfa054e9287617f350ca3d65636ca1bc220ff10dcefe3cfda7001d8cd69a6551f91dbefefb7882ebb08572476a116c120f8395fc3ca936c312a1ec1a5d3e25","ssdeep":"12288:EUIgUYwqhmKwtW8sSsGpfeOls2+hwzhlq4HrsfJmMwoqsiVi4aEpwSwtxdyZf:PIgUVqCkPh4hk4LsgoI","tlshash":"db254cc0b319712157a362a4e4bb1116a238ba53fc1d0470b669d89f3f76d4885bbf3e","first_seen":"2026-03-26T04:12:26.966652Z","last_seen":"2026-03-26T05:06:01.266465Z","times_seen":8,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://leather.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\nage: 30763\r\nx-served-by: cache-fra-etou8220087-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 14200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-06-06T16:31:59.493936Z","times_seen":2351,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":39,"dns":1,"connect":13,"send":0,"wait":14,"receive":2,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/34017ac8-c278-4e12-b6ff-a93463e7557f/settings?sdkVersion=ClientSDK%2F0.8.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:53:34 GMT","end":"Thu, 14 May 2026 18:53:28 GMT"},"fingerprint":{"sha1":"F9:15:2E:0E:57:78:92:C7:89:47:1E:D8:0E:01:C2:AA:EC:AE:29:B5","sha256":"0A:C7:C6:8D:20:EF:DD:9F:81:15:C4:46:A0:34:EA:56:F5:32:4A:70:14:99:19:AE:F7:D6:19:06:6F:28:15:D7"}}},"request":{"raw":"OPTIONS /api/v0/sdk/34017ac8-c278-4e12-b6ff-a93463e7557f/settings?sdkVersion=ClientSDK%2F0.8.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://leather.finance/\r\nOrigin: https://leather.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://leather.finance\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=q4IDd.rIyInxbrhkeUvtQXr7BJucjMmztNl8nARuvkA-1774498315.4601183-1.0.1.1-M0k4wrStGrVZAvzNcz1FYAORd5vK8IPQu42.brinMqNKWbVnfpDLTU8EEoAq78Ajb.D_gOLcwOhE4LTizAlT56_KPES64PaF.K8gRt9JZCOsm19wNdfOLIhy4SLiC7eR; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 26 Mar 2026 04:41:55 GMT\r\nserver: cloudflare\r\ncf-ray: 9e2350679a7c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T16:09:46.953564Z","times_seen":16183249,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":67,"dns":43,"connect":1,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/lifinance/types/main/src/assets/icons/chains/ethereum.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:57.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /lifinance/types/main/src/assets/icons/chains/ethereum.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"0c54a9717f040ca062318d58cd9007c3376454bf8c242dff481cfef0001e8326\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: BBA2:2FD004:DC68DC:F200DD:69C4B1FC\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 04:11:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1774498317.388131,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: f4702c38a64641d50f402774cdb34ef0a1a62b6c\r\nexpires: Thu, 26 Mar 2026 04:16:57 GMT\r\nsource-age: 16\r\ncontent-length: 295\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":769,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53ec12ca520629bad9ed8bed02718352","sha1":"7e00d5816767898459d1d0ce3c2ef4449c1d8008","sha256":"bd61892db3cff958d30764558b28cc0e77bc2bdfbcf38402505188f5c4fa8b73","sha512":"f1664e0967cef291a0daf14fd018b502e9d16627c31e88a1e70e867722be35cd0b795e704878323a459261228c318c85e5a4f6f2349c03e26c657b99f75b1ee7","ssdeep":"","tlshash":"bd0184f5986c9891cd65533ccb7cbbc27033bddc222508a636a13c6469656b7c889ad2","first_seen":"2025-07-05T18:03:19.001243Z","last_seen":"2026-03-26T05:06:01.259942Z","times_seen":16,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/trustwallet/assets/master/blockchains/ethereum/assets/0xdAC17F958D2ee523a2206206994597C13D831ec7/logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:57.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /trustwallet/assets/master/blockchains/ethereum/assets/0xdAC17F958D2ee523a2206206994597C13D831ec7/logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"816195771a49ce84b94cdf910c0a3378ec5daeee7d6ecf37b1ff5bbfddea65a5\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 8196:15F655:1BC3:1F57:69B2113A\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 04:11:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1774498317.393739,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: d720c72673d812cf4ad3acc7cb868ca05de58179\r\nexpires: Thu, 26 Mar 2026 04:16:57 GMT\r\nsource-age: 223\r\ncontent-length: 21909\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"88d6fe2e9f01143ea7e308af24c16a34","sha1":"8c350b8219206aab258d026b822da994b0c1a752","sha256":"1c2ecfc8c08a821a4839f2ae0df1d8796a8df233939b537b4e26514fa4f91196","sha512":"a44a19c6bc1974304723b8ac921b711c6c49ef42f95f75db0c1c6c0b8bf22fe066eefbf7dab05625525a53e439f39f1463a85baa22d32dc0f6f237fabd87de55","ssdeep":"384:klNl53tEgE8yQ+4qH4arOcw7KvD8+5M+VVAFDAmY48TPdLFYG/olwubBL:oNlEf8R+tYf7KvD8+5Msa9uDsvbx","tlshash":"d1a2e109616fb913b04fd01b8f6c449a7c253900872df01674a7747aa82fc17fd32728","first_seen":"2023-05-02T10:51:38Z","last_seen":"2026-06-05T16:13:48.013818Z","times_seen":731,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmper.xyz/7e2fc6f596f0cf14.css","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jmper.xyz/","date":"2026-03-26T04:11:53.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmper.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 20:06:59 GMT","end":"Tue, 16 Jun 2026 20:06:58 GMT"},"fingerprint":{"sha1":"EB:CA:8C:F3:AE:A3:D3:20:67:F1:D9:AB:C0:50:4B:47:F9:B6:BC:B2","sha256":"EB:9D:7D:7A:AA:7F:99:9B:86:64:B8:38:C7:5E:55:EB:0A:5E:B8:3E:10:8E:CB:0A:E2:13:96:E6:09:A9:EC:EB"}}},"request":{"raw":"GET /7e2fc6f596f0cf14.css HTTP/1.1\r\nHost: jmper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmper.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 14:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aed750-1887\"\r\nexpires: Fri, 26 Mar 2027 04:11:53 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6279,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2025)","md5":"bd853cdd22f6cfb4b5c788ff9a959807","sha1":"bb46fb4e594243be069bf0e5aefa7eb18899acac","sha256":"4447cfdec00af3c7eed9d82d6ec1399dfc51df8d1e1dcf9fbe6d9f523f852b83","sha512":"9f19096b641c6c2cae75238b4b9e15eacd2e84d3daa797b9c6113dbf56cd373387de57a490e6fbf84e4fa765076c97ea822791296be3aa783d13fefba8b6f6af","ssdeep":"96:94ghsszqHrkO994I9PqxOLmEqHBOKccVqlOe3bOj4s0:L+HYO9lSxOLQhOjLlOeBs0","tlshash":"e6d1bd38815f9909c6f78d5331cf7f133c1d90259ba9626399292aac8ddb93b13f0768","first_seen":"2026-03-26T04:12:26.969179Z","last_seen":"2026-03-26T05:06:01.257749Z","times_seen":8,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/assets/index-DDImeTl0.css","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:53.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /iframe/assets/index-DDImeTl0.css HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IcPsgjTF4llOvgy0L%2BSdrWFe3Hwg00LR0P%2FrCVTE%2F1d3ALmA9%2FGt7w0TYFd55h%2BnlU%2BbirYLxRe86Uer9kB6vDkzzQrdUBIRNIf2gSVn9Uov8VaEgRXBfrA5ch%2FH1O5xtSk%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 19:53:04 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b70e20-1548a\"\r\ncf-ray: 9e23505ca88d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87178,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5bff69016edc73bfa0cd7b4acde1fb7f","sha1":"4814f7c3bf33e38e4a5ef9b18e62b96c4aee728b","sha256":"c55595ca97ab3d619e99784248b530b31b3ff70b28b115bddae8f6fe34da263b","sha512":"0f8b7926c855387318f682a8b51dd4fb287deee72cabd10d2bbba36a60c71b41623cd59e8563d31a1398953291fcf8e9e73fbfb5bfdab713a6482129981c7b94","ssdeep":"1536:Rc0pa+j+RSfHRgMJhg7Yz5KUvs8iYm59EZryCocQAOVGWbLoRribczDyx:e0pa+j+RSfHRgMJhg7Yz5Kl8iY8EZr1Y","tlshash":"a883b7b0a32ad83ffc23a1f9529cf41ca10aa186de2557e9fd12312357c67f61d23625","first_seen":"2026-03-26T04:12:26.970002Z","last_seen":"2026-03-26T05:06:01.256215Z","times_seen":8,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/api/tokens?chainId=1\u0026limit=32\u0026warm=1774498315263","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /api/tokens?chainId=1\u0026limit=32\u0026warm=1774498315263 HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aySd%2FmneaZiLIOFYt6kLQ2%2B5emT60esQVOznXG%2BYJTIjQCKu7wfSls%2F80VYfcQhKGfzTFnrMyCun3xqbX72hstnHtD8gOcgrxGFweP2uwpelcJ%2FrHtmbUF9HDmIAhvvRWGw%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e235066794a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7218,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e6f6e72bd1ad40c94c814ef03aaa639","sha1":"af2a3eac46aaa7b40cdce3c30dcce59635c10a24","sha256":"7c659040ff2887abc327a1d33317ae5168ebc4aa2aa896e9317263c1b375c6d7","sha512":"d6a8b9737d8f027817df31f516ebc06be24c15c986a2880d156e879591d9fbc07ab4d84077fc4e9153b4ccf37fb5108af77c02d5edf32e8f0b25e00d2e9f73f5","ssdeep":"192:UPd58c9QULdszBiwJuTFX6rUGLCs5WhBxvFt:md58c9QULCViwoTCUXs5krFt","tlshash":"70e135eb891c127bef0253ead08571c437d163883cfa40b6a17ac9489782bd2c753f59","first_seen":"2026-03-26T04:12:26.970717Z","last_seen":"2026-03-26T05:06:01.263617Z","times_seen":8,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/api/routers","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /api/routers HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbOC40BZRSmA8Ua%2Br7QR5b5AyZWUeNH3T4hzfvzZGuNxVhGytunCLCJ9Ig%2BQ%2B4is%2BlBaCeTkgrfSYKOzuTu0se99Ur6v4hW9eCrwG0hYi63FLe4ByX7vescMiGZdlc3syc8%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e235069199d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":529,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1afc7929a934aae01a37e1f1051c9c6b","sha1":"f92c063bbbc8053af8b6d65aa7c49281db11ecc4","sha256":"d0580463d0d4493a092fd1fe8dc1a49f674776298db57cf7da1aae5074e9efb0","sha512":"7acf125232f965a006fd7b02ec1fb98c529e026968d7291fee570723b07293b89f452c0a3845fedb9bbd6b5882ee08ed9739bb3298e679a037d172a0844831e2","ssdeep":"","tlshash":"15f01dcae0d19a21429133d98b167cfbf55b5763bdf913be7056a8018a4d88808250f8","first_seen":"2026-03-26T04:12:26.971567Z","last_seen":"2026-03-26T05:06:01.251315Z","times_seen":8,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/34017ac8-c278-4e12-b6ff-a93463e7557f/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:53:34 GMT","end":"Thu, 14 May 2026 18:53:28 GMT"},"fingerprint":{"sha1":"F9:15:2E:0E:57:78:92:C7:89:47:1E:D8:0E:01:C2:AA:EC:AE:29:B5","sha256":"0A:C7:C6:8D:20:EF:DD:9F:81:15:C4:46:A0:34:EA:56:F5:32:4A:70:14:99:19:AE:F7:D6:19:06:6F:28:15:D7"}}},"request":{"raw":"POST /api/v0/sdk/34017ac8-c278-4e12-b6ff-a93463e7557f/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/\r\nContent-Type: application/json\r\nx-dyn-request-id: 6CmehLV8RaU6TTcbF-jLU8texSO6tunv49CxfKz3axO2yxjEZh\r\nx-dyn-version: WalletKit/4.61.7\r\nx-dyn-api-version: API/0.0.864\r\nx-dyn-is-global-wallet-popup: false\r\nContent-Length: 401\r\nOrigin: https://leather.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":401,"data":"{\"dynamicContextProps\":{\"settings\":{\"environmentId\":\"34017ac8-c278-4e12-b6ff-a93463e7557f\",\"initialAuthenticationMode\":\"connect-only\",\"enableVisitTrackingOnConnectOnly\":true,\"overrides\":{\"multiWallet\":true},\"walletConnectors\":[\"dxn\",\"sHn\",\"IJn\",\"$Qn\"],\"customPrivacyPolicy\":false,\"customTermsOfServices\":false,\"policiesConsentInnerComponent\":false}},\"frameworkSettings\":{\"react\":{\"version\":\"19.2.4\"}}}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://leather.finance\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=EeF6t.MJluR6lAae7QzPYRpGe7C.b7VltRfXppXPEMY-1774498315.8367329-1.0.1.1-I72.qRlOtS3nBIgXRS6X_39uVE6jIvPv_TyUDIkMiJOjlaRrEtdD7eL4GSzwtqgdCdamGrTA7avPnaJJrfIOclrSkSqD5f7Bu6Nphdoq3T.F.52IXw5d7ulPvmEYxPiS; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 26 Mar 2026 04:41:55 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: 9e235069fc27b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T16:09:46.953564Z","times_seen":16183249,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmper.xyz/favicon.svg","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jmper.xyz/","date":"2026-03-26T04:11:53.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmper.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 20:06:59 GMT","end":"Tue, 16 Jun 2026 20:06:58 GMT"},"fingerprint":{"sha1":"EB:CA:8C:F3:AE:A3:D3:20:67:F1:D9:AB:C0:50:4B:47:F9:B6:BC:B2","sha256":"EB:9D:7D:7A:AA:7F:99:9B:86:64:B8:38:C7:5E:55:EB:0A:5E:B8:3E:10:8E:CB:0A:E2:13:96:E6:09:A9:EC:EB"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: jmper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmper.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 09 Mar 2026 14:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aed750-42a\"\r\nexpires: Fri, 26 Mar 2027 04:11:53 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56dbf093d92f91772848991c56f22df6","sha1":"b55df0361ff7675c5c4b33f6a1b0ba8ae3a8dd4e","sha256":"4ef817fc1555c0e385c040fbca059d4d0764826452a592002045c99ba031c4e9","sha512":"0f2f932630ef8d576763a6781ddfd945f38d43b88c6c976af6c7c96c5143bce1634ae107ed9c927eb41487f1e2fd9b608f5967cfacd192d4803428c9a324d711","ssdeep":"","tlshash":"5911ddd6a3a98264c5548b94dff8f1ca4226b04ef084cf8afac074ba7434ce7255124b","first_seen":"2025-09-28T16:33:48.798692Z","last_seen":"2026-05-03T17:18:13.964971Z","times_seen":15,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/api/chains?warm=1774498315263","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /api/chains?warm=1774498315263 HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7UCuiw7zBofnjZAlQF%2F6TTPKKAU0kdOJcyzDFhvI4nt%2BubduI9xqfZsdvFJVD2m%2Bj3VqHyXoxpP%2Fvhb1Y6ML%2BOeZBAK6l3Ku09xnzDWgVoHw%2Bvn4AIJMlKPMUw4aOLnSJTc%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e23506669451525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68399,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9e4f18d334882921347529f97a7cb45e","sha1":"906799d5553da59048b205032e28d9bf993d0d98","sha256":"71bc844aa07ba2a41ffe3cf43d7b31926448c44b737fb93a944ff6087e8042fb","sha512":"f7c19e1cf4ca1e8431c7ff6a3aed137a6c485fe909b1e9566b24c50a05b6163d3871a470c3c05dd3a45b70992daf2fa75a210e659057b2603e0ccd2514163439","ssdeep":"1536:vp4A0TdidqGvMOgk6od+JZ8FzkAXN9YrvcXglMkQ8lZM5mMGI5udEUEX/lZZtFJt:vp4Ls0ndod+JZYNd9m6geTeUm3IsNuNP","tlshash":"006335fb066848bdcb6251d8b15d36885357b265ecd948bbc0ba9808c3a46b7c117f3f","first_seen":"2026-03-26T04:12:26.973293Z","last_seen":"2026-03-26T04:12:27.520479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/api/chains","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /api/chains HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S4%2FT%2Boix9FfLeXCRZdTDJR1fS5F7K1T4XhgrPpVr2gllPmTnGP%2BP6f42kircYzOKUR2iYtRuv8QVRgDM2UkuuIGXAp9IqkPbISGkN%2BnzKFlL6U6oDDlFxhnQlXiG4yosSG8%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e235069199c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68399,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9e4f18d334882921347529f97a7cb45e","sha1":"906799d5553da59048b205032e28d9bf993d0d98","sha256":"71bc844aa07ba2a41ffe3cf43d7b31926448c44b737fb93a944ff6087e8042fb","sha512":"f7c19e1cf4ca1e8431c7ff6a3aed137a6c485fe909b1e9566b24c50a05b6163d3871a470c3c05dd3a45b70992daf2fa75a210e659057b2603e0ccd2514163439","ssdeep":"1536:vp4A0TdidqGvMOgk6od+JZ8FzkAXN9YrvcXglMkQ8lZM5mMGI5udEUEX/lZZtFJt:vp4Ls0ndod+JZYNd9m6geTeUm3IsNuNP","tlshash":"006335fb066848bdcb6251d8b15d36885357b265ecd948bbc0ba9808c3a46b7c117f3f","first_seen":"2026-03-26T04:12:26.973293Z","last_seen":"2026-03-26T04:12:27.520479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/api/tokens?chainId=1151111081099710\u0026limit=200","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:56.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /api/tokens?chainId=1151111081099710\u0026limit=200 HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:56 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFVgXK%2FNQ4ocD9g6CH5w4Gocf2n12l3i7LxULbbu9UKIZ7eTsNtyzQlbULX3KFfAGlgeCkfZxtMwYyZfxNG0%2F26PHDuX3zUUxe7W%2F%2FEPS%2BWjAwGndNTX97PU1eYasJCTQRs%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e23506fba341525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55462,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a946e094342cf38034471313d9ef1f2e","sha1":"f072dd478f07f2761b9485e661c662bb1a858ce6","sha256":"35026163bcfec494c946ee2fde2f0bcbe83cbac843dcc5400bff24b374ff0159","sha512":"b4214077a73d8187b8bbb43b73a40c0bd7ca67d2a39ba85627052f1805fb212678ec1ea403caa17b2baad878e682aed9753d03d7128cedf1d3fbfce5a4ab77e9","ssdeep":"1536:P5xehwjqDFdtKd/KjqKDeXmQ8K8WGy9lBuCOrq1MKK+Q9t0:6Q0M+G","tlshash":"f94302ebeddd063f5b5343f6d0e9b5cc67a681c435f900baa0a98d089390b96d613f09","first_seen":"2026-03-26T04:12:26.974208Z","last_seen":"2026-03-26T04:13:20.351391Z","times_seen":4,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"metamask-sdk.api.cx.metamask.io/socket.io/?EIO=4\u0026transport=websocket","fqdn":"metamask-sdk.api.cx.metamask.io","domain":"metamask.io","tld":"io"},"ip":{"addr":"104.18.31.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:57.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cx.metamask.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 18:00:33 GMT","end":"Wed, 13 May 2026 18:00:32 GMT"},"fingerprint":{"sha1":"A8:BC:C2:31:9D:B8:12:6A:CE:4C:60:20:97:3E:C6:7D:DE:8A:5C:1A","sha256":"21:99:1A:7A:78:BB:3A:17:3F:9E:27:EE:C6:0E:CD:17:2E:68:EB:1D:9D:C7:C4:48:90:C2:40:98:2B:1C:7E:A6"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: metamask-sdk.api.cx.metamask.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://leather.finance\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TO3/biX4W7PSpBuFgEuLHw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 26 Mar 2026 04:11:57 GMT\r\nConnection: upgrade\r\nSet-Cookie: AWSALB=wIwEi3aqJPwSrr6uDVAOuYiiWjNbHggosM2CmPG6sjywdnDewfysF1Zx+67cEzk6ajI8Y8K2N7d1vwR9pMZlcP8MSLKMreOZZgUfIezu0vwejG0rZnwK9uSrs4gf; Expires=Thu, 02 Apr 2026 04:11:57 GMT; Path=/\nAWSALBCORS=wIwEi3aqJPwSrr6uDVAOuYiiWjNbHggosM2CmPG6sjywdnDewfysF1Zx+67cEzk6ajI8Y8K2N7d1vwR9pMZlcP8MSLKMreOZZgUfIezu0vwejG0rZnwK9uSrs4gf; Expires=Thu, 02 Apr 2026 04:11:57 GMT; Path=/; SameSite=None; Secure\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: HoEUG1MSzSjueG0iB2h5XMaHDis=\r\nAccess-Control-Allow-Origin: https://leather.finance\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\ncf-cache-status: DYNAMIC\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9e2350733eb9a0f0-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T16:09:46.953564Z","times_seen":16183249,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":0,"dns":15,"connect":15,"send":0,"wait":396,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:48:56 GMT","end":"Mon, 01 Jun 2026 03:48:54 GMT"},"fingerprint":{"sha1":"67:99:97:5A:6F:90:2B:62:58:A1:FA:F4:2F:57:89:CD:1C:7E:15:4A","sha256":"C3:7B:DE:EF:FF:5B:88:15:D5:20:E7:17:F7:40:F9:24:DE:12:5B:D9:4B:C1:0E:2C:03:C5:95:7D:B3:A5:CE:AA"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/\r\nOrigin: https://leather.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Wed, 25 Mar 2026 00:15:50 GMT\r\nx-static-request-id: GX6568FNVWXZXD0Z\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Thu, 26 Mar 2026 04:21:55 GMT\r\nage: 100507\r\nserver: cloudflare\r\netag: W/\"3a2ba763274960e901d18f6334f60765\"\r\ncontent-encoding: br\r\ncf-ray: 9e235065bb6d3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536497,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3a2ba763274960e901d18f6334f60765","sha1":"1fa78a1b585d09d7722e4b9ae77016079a0f6d2d","sha256":"80775957889d978e92961a8317ebf887495495968288cac0e2dac49f325515c0","sha512":"eaa3b1b58c03a29f584f012b6b5998d1dbca10f36d9ddb596f1cfc95840903f203a5c03762df351b4937dbf30ef92d309ea22a569bd1a7797f9b13810080a4ee","ssdeep":"1536:4QHhrsHn19pSh27VRtJ9DIMsM7y1IuExv5Aff2RumAxKKiKXhSeEeOLhC/:4QBr09U27VJLsz1IuS57uTxKKiKf","tlshash":"ccb40f48ca600d8310a6a359dc7e90d6a424c6578ed93d683bbc85bc4f6d92f25fc6fc","first_seen":"2026-03-20T18:38:17.88101Z","last_seen":"2026-03-26T05:06:01.260961Z","times_seen":15,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":61,"dns":45,"connect":1,"send":0,"wait":9,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/trustwallet/assets/master/blockchains/ethereum/assets/0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2/logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:57.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /trustwallet/assets/master/blockchains/ethereum/assets/0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2/logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"65111414b68b1de44e4794103127c64208d2464dcd796bf16d59e57dd0527f52\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 8722:30432C:DE8B55:F31597:69C4A8AE\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 04:11:57 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1774498317.391967,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 19e8e7f52e741e8d7333c6532218ba8201c3fca5\r\nexpires: Thu, 26 Mar 2026 04:16:57 GMT\r\nsource-age: 269\r\ncontent-length: 2984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"2214386a20472bc5fba9309f1a90645f","sha1":"f94e58b4bc1a36eabd8e3ed962677d467e2d25bc","sha256":"c253d7c5d4203783e31bde1d33e143f6a9ce1defac24ab5e06948847696b80a1","sha512":"aaacd623488dabe41c1d5fe0424fdc1d7a482c45ef7c3568ae2aedea576a9f668529eb02ef3fdae31d3298cd2e895d19e951d31a08042714c9ba0b6f28b5f7e3","ssdeep":"","tlshash":"05513a665172494ed6f27c3bebb89b26ddcc5c7810992ea24153b076bb347c0e483435","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-06-05T21:47:20.29419Z","times_seen":666,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/34017ac8-c278-4e12-b6ff-a93463e7557f/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:53:34 GMT","end":"Thu, 14 May 2026 18:53:28 GMT"},"fingerprint":{"sha1":"F9:15:2E:0E:57:78:92:C7:89:47:1E:D8:0E:01:C2:AA:EC:AE:29:B5","sha256":"0A:C7:C6:8D:20:EF:DD:9F:81:15:C4:46:A0:34:EA:56:F5:32:4A:70:14:99:19:AE:F7:D6:19:06:6F:28:15:D7"}}},"request":{"raw":"OPTIONS /api/v0/sdk/34017ac8-c278-4e12-b6ff-a93463e7557f/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://leather.finance/\r\nOrigin: https://leather.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://leather.finance\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=ehCz4KHiAMvpojSCV21j4xcRZ7upba0v28M0vg6JOE8-1774498315.709711-1.0.1.1-xsovmCTTLGaM1sAR2tQm8WxWIpvwH85cRCaAXol8I71sN.KLp29wXFSrNUGuyUg2Ts_KvHlEIfvCGKI_fle0R8IGxrR61KJ_A.CM.FfzF6tmPn.MizXz23jh7.6XRY0r; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 26 Mar 2026 04:41:55 GMT\r\nserver: cloudflare\r\ncf-ray: 9e2350692c5a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T16:09:46.953564Z","times_seen":16183249,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmper.xyz/134022905bbf099f.css","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jmper.xyz/","date":"2026-03-26T04:11:53.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmper.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 20:06:59 GMT","end":"Tue, 16 Jun 2026 20:06:58 GMT"},"fingerprint":{"sha1":"EB:CA:8C:F3:AE:A3:D3:20:67:F1:D9:AB:C0:50:4B:47:F9:B6:BC:B2","sha256":"EB:9D:7D:7A:AA:7F:99:9B:86:64:B8:38:C7:5E:55:EB:0A:5E:B8:3E:10:8E:CB:0A:E2:13:96:E6:09:A9:EC:EB"}}},"request":{"raw":"GET /134022905bbf099f.css HTTP/1.1\r\nHost: jmper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmper.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 14:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aed750-bc26\"\r\nexpires: Fri, 26 Mar 2027 04:11:53 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41843)","md5":"a9fd9bbaaa257b33b2ada5a521bbcd78","sha1":"2ecda0fd2e41cfa1282c8236fbdd032f685bda96","sha256":"8bfa8744ce4f81902d1003385100133eb1e86bef1daed2d40a07938999927f7d","sha512":"f1a965e9f2aa68f056c62f382abd57d684b9b9e5ec7b93c41953078e43f04d0fa86511b8af975613d20a632b49107dabeb091098014e1227eb0fc530a6dbae34","ssdeep":"384:9O3OoOFODLFkZOz4DaY3YKaD3Ba/Sjywu+GaAUQTDjQOAhiMaOD/zV87upttbRme:hai163s/LiFAUlOwDy7AT4leIHbXg","tlshash":"dd23e125143a6804a3fb9a6330cf3f0bac4da0147756217be1661be4cd9a6371fd673a","first_seen":"2026-03-26T04:12:26.97712Z","last_seen":"2026-03-26T05:06:01.258248Z","times_seen":8,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/api/referrals/click","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"POST /api/referrals/click HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nContent-Type: application/json\r\nContent-Length: 57\r\nOrigin: https://leather.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":57,"data":"{\"referralId\":\"KATVGT\",\"landingPath\":\"/iframe/?r=KATVGT\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RdDk4e1w5TznHiP6iq2y7K9HRqRYhkjkTUm6uYGtxC7Hg2RB2BQ3%2F4eqVks0rb9%2BWcsxbeok10DirtnJICm%2BHxZ5d%2FPGM7HhTgFCw9CeiuE5kNIUhLTKP2xTNwaGBKGEkQ%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e235066c9531525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fad82d8efacbee15c1851e8d6eaab697","sha1":"c937ac0463d09fb455b6d0e1b4a4b42dc7635f4b","sha256":"994de369297182b95b3a277ae47ffffde1ee386a5144a96e71770d2accc8c767","sha512":"8509e690dac4bee6168d9bc2a046fb4ec4e320180a3249ae1a847250472820eae3d9b36dc4cb788a343c324fd41c4e47b71b96b157da8449fbc9bcdc54171175","ssdeep":"","tlshash":"e3800008800c00bbe000023280aebb388f2b302383b8000a28082c088220baa882aa8b","first_seen":"2026-03-26T04:12:26.977851Z","last_seen":"2026-03-26T05:06:01.266946Z","times_seen":8,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/master/svg/icon/usdt.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.353Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /spothq/cryptocurrency-icons/master/svg/icon/usdt.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T16:09:46.953564Z","times_seen":16183249,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/spothq/cryptocurrency-icons/master/svg/icon/usdt.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.110.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /spothq/cryptocurrency-icons/master/svg/icon/usdt.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"0a9c347199113610c00e2a95dda45ee819155480135602055d81843d2b46a044\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 1F4E:2D0106:E4A42C:FA3308:69C4B1FB\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410028-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1774498315.395920,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 1d30502bb24d6eb78749b9a13201ef05d679d32f\r\nexpires: Thu, 26 Mar 2026 04:16:55 GMT\r\nsource-age: 15\r\ncontent-length: 850\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1997,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2a9cab2400408fb50ce5608c591df27","sha1":"503de6bb8d6583813873ede70573f2c551bf7865","sha256":"060006890b2a3171551858f6e04d2454d9965b5f3677ea68d576f4e2c9ace874","sha512":"c9a4b1d36cb3713dde6d9e80a97073772f60e141893667e52047287a4f0c1d04b76226ff360ae72cf4492515b2bf7154759f4e447151251bb0ab4fc66e89ed10","ssdeep":"","tlshash":"4341fdb59368a44f0c56837ef3b950ab132f20b6719d124ebcae9e1db4336c7e493548","first_seen":"2023-05-29T17:41:07Z","last_seen":"2026-05-15T05:34:42.469773Z","times_seen":45,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":14,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/assets/plus-jakarta-sans-latin-wght-normal-eXO_dkmS.woff2","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /iframe/assets/plus-jakarta-sans-latin-wght-normal-eXO_dkmS.woff2 HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/iframe/assets/index-DDImeTl0.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKFJPN8lOskvf8idPorT6SkGJMBoKza%2FToH69qFfwcZmPMxVyrTK2i5bRXEm%2F4bRAbtml81ICmvH%2ByoeQjy4A2FxexfCiU7ot%2FHeZpUeArYdLkjDWhJS2vI1HSngEGZfgZM%3D\"}]}\r\ncf-ray: 9e235067795c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-06-06T16:12:14.353685Z","times_seen":45024,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/api/tokens?chainId=1\u0026limit=200","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /api/tokens?chainId=1\u0026limit=200 HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q8fO8AhVop5IR7hJywaYCBNYrBrZ6la%2B5F7zc2nCOQboNG9koPDghmo354zaNmVAjeuYXrC90QVcrLZe60vGmtfgM3D626CDJqO7QVCEQW6Pu8vfv5jKvSv2OjlnSi3dlOY%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e235069199e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51510,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f5bd2e0f5af187b0803045b171c9fc55","sha1":"f0ba63d71423118567d05f9cfc3124705a56b7ab","sha256":"b7d4394bcac530c10e1e648a86cf6a40a9d5932890b145a3f9559f3c68fa73da","sha512":"8323f4ab86b03f3c85cb628b5941c75aaf311f720f797b8324d99e5c9d9b2a1192055a23810ef2086bd900b8da4bc0f7c64a17764a8f3b71e5edf08b3ec157c2","ssdeep":"1536:m3heULCVtoTjXs5krpDACuyG0zqSkNgFV6enPRcXWHqIGnfYq8VSz672jYfilJWP:uMw/SfAw32X6PcULq","tlshash":"8e3333eb891c027a9f4647a9d0c971c037e253d47cff40b6a17aca489792ba2c753f16","first_seen":"2026-03-26T04:12:26.979856Z","last_seen":"2026-03-26T05:06:01.267503Z","times_seen":8,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:56.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 02:48:56 GMT","end":"Mon, 01 Jun 2026 03:48:54 GMT"},"fingerprint":{"sha1":"67:99:97:5A:6F:90:2B:62:58:A1:FA:F4:2F:57:89:CD:1C:7E:15:4A","sha256":"C3:7B:DE:EF:FF:5B:88:15:D5:20:E7:17:F7:40:F9:24:DE:12:5B:D9:4B:C1:0E:2C:03:C5:95:7D:B3:A5:CE:AA"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 04:11:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 25 Mar 2026 00:15:51 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Thu, 26 Mar 2026 04:21:56 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 100565\r\nx-static-request-id: T40AP8E290GXTKQQ\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"c340133943b53e51412a88ef2e377ef2\"\r\ncontent-encoding: br\r\ncf-ray: 9e23506f6fbba0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2101693,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5ab06ecfa7beb68f6ca726b585f86da","sha1":"f71fdc9466ed40ec1d658d026d10a102f0217b5e","sha256":"b2e9f95d735045896ac40d91b164eb8dbcb5b9801218184c3742cdb66e55571d","sha512":"08717158d55ac9487b664a160c04812ad6b7b8e2e415b6a0cbf30b248733f357247e63be35048c983367b8da88355c1d4d3a6e1362e16fb639697eb3619e2f23","ssdeep":"12288:Ly7gdeeNiQ0x2Z1s6qYHeI+mJ3XYuFiO2OGoF5fAF02CJNVe:9dv4Q0x2Z1s6qYD+mJnYusOACf72CJHe","tlshash":"4025e6ba5d1c6b4e777a4d2ddb12247d2e4b70eeb20881dfa9df72ecc162441e521ca0","first_seen":"2026-03-26T04:12:26.983836Z","last_seen":"2026-03-26T05:06:01.268076Z","times_seen":8,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmper.xyz/","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T04:11:52.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmper.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 20:06:59 GMT","end":"Tue, 16 Jun 2026 20:06:58 GMT"},"fingerprint":{"sha1":"EB:CA:8C:F3:AE:A3:D3:20:67:F1:D9:AB:C0:50:4B:47:F9:B6:BC:B2","sha256":"EB:9D:7D:7A:AA:7F:99:9B:86:64:B8:38:C7:5E:55:EB:0A:5E:B8:3E:10:8E:CB:0A:E2:13:96:E6:09:A9:EC:EB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jmper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 15 Mar 2026 19:54:44 GMT\r\netag: W/\"51b8c-64d15794ae565\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":334732,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (59980), with CRLF line terminators","md5":"92a076f24e86208027152a9b1cf9a9eb","sha1":"7fd835213602b481da30e4d8639eecd8c1cf29ff","sha256":"0d49896103a613e6d12e43d4d9ae6351aee93b2c4c7edb848da4568b8ed0a9c2","sha512":"76ec3f69e8872881b859a9f1a0ac6d00b85ff05668754ade7b36df17917ac0fd1968d6542e6a71ca863cda60e76a84ec909eab193bf4e8f7655d91e93c9c3c54","ssdeep":"3072:l7/9XUay3kLPQ4qvFgoO9iBctlZt8xF+sTLPyykm25:R/9XUay3kLPQ4qxBctlZt8xF+sTLPyyC","tlshash":"f0646320d3514223652edff96a7e9b98e37b6601f903106fa096b081e7cfbe54d31639","first_seen":"2026-03-26T04:12:26.984618Z","last_seen":"2026-03-26T05:06:01.263062Z","times_seen":8,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":275,"dns":83,"connect":60,"send":0,"wait":60,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/34017ac8-c278-4e12-b6ff-a93463e7557f/settings?sdkVersion=ClientSDK%2F0.8.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.20.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 17:53:34 GMT","end":"Thu, 14 May 2026 18:53:28 GMT"},"fingerprint":{"sha1":"F9:15:2E:0E:57:78:92:C7:89:47:1E:D8:0E:01:C2:AA:EC:AE:29:B5","sha256":"0A:C7:C6:8D:20:EF:DD:9F:81:15:C4:46:A0:34:EA:56:F5:32:4A:70:14:99:19:AE:F7:D6:19:06:6F:28:15:D7"}}},"request":{"raw":"GET /api/v0/sdk/34017ac8-c278-4e12-b6ff-a93463e7557f/settings?sdkVersion=ClientSDK%2F0.8.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.864\r\nx-dyn-request-id: VKNFENF1Ah-j0CAiUIFoFikHFXqpCM4z4HsJ0UYkE4ZdIc8JH7\r\nx-dyn-version: WalletKit/4.61.7\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://leather.finance\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://leather.finance\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"66d5-wtQLOPl+3MQiTZ8+wXT1CSokDzE\"\r\ncontent-encoding: br\r\ncache-control: max-age=30\r\nx-frame-options: DENY\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=lUi1ys1Xb4K7aJVN0NSqCjqFd0fPtvM4ePkm5.0ad1E-1774498315.64256-1.0.1.1-2ifxThUpvA5a63M1V.5Zz4_lbiicHHCP8yfxX6umCDJryfPpj3d42JaaqI3zmmTi3VTMeXPetq.gVHWfgQI69_APVh06o4nffcM8grj586oL.Jfp9X7BG9OoebX.L91B; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Thu, 26 Mar 2026 04:41:55 GMT\r\nserver: cloudflare\r\ncf-ray: 9e235068cbe035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26325,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e9f7b70b00e1da013f6cb4a1591a0d2a","sha1":"c2d40b38f97edcc4224d9f3ec174f5092a240f31","sha256":"45937a51697f1eec4ea36d1c88fee7e2bbdae7ad372f6ac6bd3d284a0b3544ac","sha512":"291b06a3edafa861c4e843d58dd8284fd166d86a1a4712f3a23257137bc2922d4c2201fa362ae470034083bbb17bd90f64ef3a287a2619fb18f08630803c64db","ssdeep":"384:D+zt26gS2D5Y6rBJ/GvuROpEACHpljj+Br9r5rqP/FaAlaBoh0kdRIONeGIerI43:6grzGvSOpx2l","tlshash":"1dc24c9f19642cbd5b42d58cc059370b81264d31a6a32cfec0b5deb892ebdb54329e37","first_seen":"2026-03-26T04:12:26.987907Z","last_seen":"2026-03-26T05:06:01.259454Z","times_seen":8,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/iframe/assets/thumbmark.esm-AzwzrjE8.js","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /iframe/assets/thumbmark.esm-AzwzrjE8.js HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://leather.finance/iframe/assets/index-DFxmtLEC.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:56 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ApU%2BQso2aHBWzu12XyLZQyEox57NjWMvOGwa3%2BLgX88R%2B6FC8UGX%2BUReB3cuTDf2q8obevqdRhODOLP6sDlWGkR0YLGzAiDctW1ufSUevnGqd%2B46v%2BtFoagVutzZPQEylBc%3D\"}]}\r\nlast-modified: Sun, 15 Mar 2026 19:52:54 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b70e16-4b19\"\r\ncf-ray: 9e23506a29b21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19225,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16541)","md5":"3ccdda415bf41aab9f30fd22be3ff43f","sha1":"3e7e4cb4b32c5899525d0b8fab11f4241ba6dadb","sha256":"b6ee775b3aab6a528e6b263a7288f25cd21cdd653fc4113e08c42543a7e088ca","sha512":"630cf72e70eed873eed529a651710f63760f09d62ae3cfb68852e5680004a8da7f2b1b51fb9df11265496170dc4e2d9b6ce71c28ada5592941d4c72dc886693e","ssdeep":"384:gzAG+2d/GfH/dHchKQtFUwjCNjRSRUu+QKD1MvtWYyw+TQDn:gsG+4/GfH/dHcmSmuknw+UDn","tlshash":"fa820cddf789703a43a73565307f804aa53a7910702f8c00e16ad2917efc95da27bf6a","first_seen":"2025-09-16T05:43:58.784832Z","last_seen":"2026-04-28T11:27:53.244506Z","times_seen":14,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/api/tokens?chainId=9270000000000000\u0026limit=200","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:56.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /api/tokens?chainId=9270000000000000\u0026limit=200 HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:56 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfXxd4VsR58cA1Z6WYWNoBgHhaEyH81Al9s3nrVsyqxZ4U%2F5RdEHfSkfFf8RbSQd%2Be8arD%2B0Wq707z%2BBP2Kfs3BIhFYUk%2FcWoz7NKLnX47NoeZiih%2B%2BLT65CPVNJIUcmNUo%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e23506fba351525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40291,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e1351f7de35ec8b60b077e2471440718","sha1":"d729bd3b569aa171f502b36bdba08d908f37caa9","sha256":"ce39a446b29ebb076308044beed554e7a934b2e918c29655dd782b6c8a5bb4be","sha512":"07e905f967d9274ba0391a5d95f8b780f51d00beada8d807e8ffccf28d96304fa073cb1292d12428dab26828a830a593c2ad0709ced02f334bb51d82ee3297a3","ssdeep":"768:h2YEFJUYCe6A7KQoMUZ/3RfxavdEuY16ocLovsK:7sJUCKvMqMEuY1Tcc0K","tlshash":"0c0354eb8d6d123adb1607a5d19af1c027e7729539fa04b6f05a8d089390be7c743f09","first_seen":"2026-03-26T04:12:26.993061Z","last_seen":"2026-03-26T05:06:01.262566Z","times_seen":8,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmper.xyz/d0ad2926f25f3722.css","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jmper.xyz/","date":"2026-03-26T04:11:53.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmper.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 20:06:59 GMT","end":"Tue, 16 Jun 2026 20:06:58 GMT"},"fingerprint":{"sha1":"EB:CA:8C:F3:AE:A3:D3:20:67:F1:D9:AB:C0:50:4B:47:F9:B6:BC:B2","sha256":"EB:9D:7D:7A:AA:7F:99:9B:86:64:B8:38:C7:5E:55:EB:0A:5E:B8:3E:10:8E:CB:0A:E2:13:96:E6:09:A9:EC:EB"}}},"request":{"raw":"GET /d0ad2926f25f3722.css HTTP/1.1\r\nHost: jmper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmper.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Mar 2026 14:21:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69aed750-256\"\r\nexpires: Fri, 26 Mar 2027 04:11:53 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":598,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (597)","md5":"2dc06f0870650c96d72b118661e34ac9","sha1":"461d42e46fe34274d665086f3f2dfd21a819bfe6","sha256":"78954ae8dc105fecdfd113de78ac559ffd39330a661ac23cf1548fa38b1780b8","sha512":"c75623ea7e62049b3380ad64c8edc52a29402f95db307f71185691c41f891db86391229dcd1d49be048e8a098a8032f5f952cbc1184b05673df88a56df8183a2","ssdeep":"","tlshash":"a3f04455a302702b8837877e52d0ea880434ac51db322a5d233291096fbbcc1b383a2c","first_seen":"2026-03-26T04:12:26.994485Z","last_seen":"2026-03-29T19:18:28.420136Z","times_seen":9,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmper.xyz/katana_logo_fd78f2adc2.png","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jmper.xyz/","date":"2026-03-26T04:11:53.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmper.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 20:06:59 GMT","end":"Tue, 16 Jun 2026 20:06:58 GMT"},"fingerprint":{"sha1":"EB:CA:8C:F3:AE:A3:D3:20:67:F1:D9:AB:C0:50:4B:47:F9:B6:BC:B2","sha256":"EB:9D:7D:7A:AA:7F:99:9B:86:64:B8:38:C7:5E:55:EB:0A:5E:B8:3E:10:8E:CB:0A:E2:13:96:E6:09:A9:EC:EB"}}},"request":{"raw":"GET /katana_logo_fd78f2adc2.png HTTP/1.1\r\nHost: jmper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmper.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 11240\r\nlast-modified: Mon, 09 Mar 2026 14:21:04 GMT\r\netag: \"69aed750-2be8\"\r\nexpires: Fri, 26 Mar 2027 04:11:53 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11240,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"7d361516640df157209304dd04647cb8","sha1":"f9ceed64fc3551107cf5aa7de328674e6ba8bc30","sha256":"ec9ac3396909536d21346df1fa5a748e748f1192067149e0bac8803db11f23c7","sha512":"9b18d8747406d75d15032696abfadbb2b1c04229b9b429fc5b510d9567c920f20c71e548494424f10fa4b5fd4ef19689e5cf18a70f7d92b2c1d0a91dce7d5bf1","ssdeep":"192:sVY2wxAIV69e0kH3u0lynLEGAyOFeVhRv5Be4FoOFNzpxY:ssxAa69e0y3utIG7/VhV544eOFhpxY","tlshash":"0632b33a37f38b62d7ee0770044483b56682ef50cedbda2b80ca8f0576944d4e4bb615","first_seen":"2026-03-26T04:12:26.995644Z","last_seen":"2026-05-29T10:43:14.620349Z","times_seen":9,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmper.xyz/83afe278b6a6bb3c-s.p.3a6ba036.woff2","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jmper.xyz/","date":"2026-03-26T04:11:53.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmper.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 20:06:59 GMT","end":"Tue, 16 Jun 2026 20:06:58 GMT"},"fingerprint":{"sha1":"EB:CA:8C:F3:AE:A3:D3:20:67:F1:D9:AB:C0:50:4B:47:F9:B6:BC:B2","sha256":"EB:9D:7D:7A:AA:7F:99:9B:86:64:B8:38:C7:5E:55:EB:0A:5E:B8:3E:10:8E:CB:0A:E2:13:96:E6:09:A9:EC:EB"}}},"request":{"raw":"GET /83afe278b6a6bb3c-s.p.3a6ba036.woff2 HTTP/1.1\r\nHost: jmper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmper.xyz/7e2fc6f596f0cf14.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\nlast-modified: Mon, 09 Mar 2026 14:21:04 GMT\r\netag: \"69aed750-bd30\"\r\nexpires: Fri, 26 Mar 2027 04:11:53 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-06-06T16:10:57.796846Z","times_seen":63634,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leather.finance/api/routers?warm=1774498315263","fqdn":"leather.finance","domain":"leather.finance","tld":"finance"},"ip":{"addr":"104.21.69.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://leather.finance/iframe/?r=KATVGT","date":"2026-03-26T04:11:55.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leather.finance","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 15:11:12 GMT","end":"Mon, 25 May 2026 15:11:11 GMT"},"fingerprint":{"sha1":"1A:9C:9D:7B:0D:5F:9B:DC:92:F2:16:BD:B6:14:1A:C0:0C:BF:9A:FE","sha256":"89:6C:DA:57:56:51:06:5E:05:74:44:EE:C8:A6:77:33:29:38:FD:93:88:A9:39:D1:63:3C:B0:43:64:3A:91:2A"}}},"request":{"raw":"GET /api/routers?warm=1774498315263 HTTP/1.1\r\nHost: leather.finance\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://leather.finance/iframe/?r=KATVGT\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 04:11:55 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=letw0HRZsdNZWdvCt%2F9ri8dQAR%2BZkoTX36i31pdpwQABUNO%2FmS%2B5k%2FiyBMECyUaMiyGa8PibjFypOneDCWK%2FowPDMbndr8m86KNlYoEmEQDwV72knG8wZpf%2FY35%2BIE%2FcfKU%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e23506669461525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":529,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1afc7929a934aae01a37e1f1051c9c6b","sha1":"f92c063bbbc8053af8b6d65aa7c49281db11ecc4","sha256":"d0580463d0d4493a092fd1fe8dc1a49f674776298db57cf7da1aae5074e9efb0","sha512":"7acf125232f965a006fd7b02ec1fb98c529e026968d7291fee570723b07293b89f452c0a3845fedb9bbd6b5882ee08ed9739bb3298e679a037d172a0844831e2","ssdeep":"","tlshash":"15f01dcae0d19a21429133d98b167cfbf55b5763bdf913be7056a8018a4d88808250f8","first_seen":"2026-03-26T04:12:26.971567Z","last_seen":"2026-03-26T05:06:01.251315Z","times_seen":8,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jmper.xyz/163f657a16afbe5e.css","fqdn":"jmper.xyz","domain":"jmper.xyz","tld":"xyz"},"ip":{"addr":"34.175.18.31","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Spain","country_code":"ES"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jmper.xyz/","date":"2026-03-26T04:11:53.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jmper.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Mar 2026 20:06:59 GMT","end":"Tue, 16 Jun 2026 20:06:58 GMT"},"fingerprint":{"sha1":"EB:CA:8C:F3:AE:A3:D3:20:67:F1:D9:AB:C0:50:4B:47:F9:B6:BC:B2","sha256":"EB:9D:7D:7A:AA:7F:99:9B:86:64:B8:38:C7:5E:55:EB:0A:5E:B8:3E:10:8E:CB:0A:E2:13:96:E6:09:A9:EC:EB"}}},"request":{"raw":"GET /163f657a16afbe5e.css HTTP/1.1\r\nHost: jmper.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jmper.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 26 Mar 2026 04:11:53 GMT\r\ncontent-type: text/css\r\ncontent-length: 1\r\nlast-modified: Mon, 09 Mar 2026 14:21:04 GMT\r\netag: \"69aed750-1\"\r\nexpires: Fri, 26 Mar 2027 04:11:53 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/css","magic":"very short file (no magic)","md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-06-06T16:05:24.331258Z","times_seen":213082,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}