{"report_id":"5c95dca9-890c-477b-9d4e-4fc824915a06","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-07-31T07:59:45Z","url":{"schema":"http","addr":"nycethereum.com/","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nycethereum.com/","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"title":"HOME | ETH NYC"},"submit":{"url":{"schema":"http","addr":"nycethereum.com/","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-04T07:59:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":11,"urlquery":2,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:21Z","timestamp":1753948761,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":44074,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-31T07:59:21.975551+0000\",\"flow_id\":213432533631819,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":44074,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3516,\"start\":\"2025-07-31T07:59:21.967499+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:22Z","timestamp":1753948762,"ip_dst":{"addr":"149.154.167.220","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":34782,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)","source":"{\"timestamp\":\"2025-07-31T07:59:22.704406+0000\",\"flow_id\":699311446434498,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":34782,\"dest_ip\":\"149.154.167.220\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033967,\"rev\":1,\"signature\":\"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2021_09_16\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_09_16\"]}},\"tls\":{\"sni\":\"api.telegram.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":918,\"bytes_toclient\":4500,\"start\":\"2025-07-31T07:59:22.664258+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:22Z","timestamp":1753948762,"ip_dst":{"addr":"149.154.167.220","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":34798,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)","source":"{\"timestamp\":\"2025-07-31T07:59:22.708789+0000\",\"flow_id\":678596819166098,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":34798,\"dest_ip\":\"149.154.167.220\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033967,\"rev\":1,\"signature\":\"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2021_09_16\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_09_16\"]}},\"tls\":{\"sni\":\"api.telegram.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":4500,\"start\":\"2025-07-31T07:59:22.664466+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:23Z","timestamp":1753948763,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":55150,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-07-31T07:59:23.987880+0000\",\"flow_id\":548308986356554,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":55150,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3510,\"start\":\"2025-07-31T07:59:23.975690+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":58018,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-07-31T07:59:24.007002+0000\",\"flow_id\":1671198121081754,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":58018,\"dest_ip\":\"104.18.10.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3433,\"start\":\"2025-07-31T07:59:23.998298+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"52.210.90.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.20","port":45190,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)","source":"{\"timestamp\":\"2025-07-31T07:59:24.052293+0000\",\"flow_id\":1983319836983062,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45190,\"dest_ip\":\"52.210.90.9\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058780,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":927,\"bytes_toclient\":3168,\"start\":\"2025-07-31T07:59:23.982806+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"52.210.90.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.20","port":45196,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)","source":"{\"timestamp\":\"2025-07-31T07:59:24.065767+0000\",\"flow_id\":2019350317579457,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45196,\"dest_ip\":\"52.210.90.9\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058780,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":927,\"bytes_toclient\":1654,\"start\":\"2025-07-31T07:59:23.998593+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":51330,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-07-31T07:59:24.323006+0000\",\"flow_id\":535739764587609,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":51330,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2025-07-31T07:59:24.277593+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":49412,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-07-31T07:59:24.327008+0000\",\"flow_id\":503065800922678,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":49412,\"dest_ip\":\"104.26.11.181\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3443,\"start\":\"2025-07-31T07:59:24.316982+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":51338,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-07-31T07:59:24.333536+0000\",\"flow_id\":1339237951366012,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":51338,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2025-07-31T07:59:24.287612+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":44804,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-07-31T07:59:24.351948+0000\",\"flow_id\":1724011186500139,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":44804,\"dest_ip\":\"104.26.10.181\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":917,\"bytes_toclient\":3517,\"start\":\"2025-07-31T07:59:24.340523+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-07-31","alert":"Detects file containing Telegram Bot API","trigger":"nycethereum.com/static/js/main.bf60f6a5.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-07-30T15:19:50.250092Z","alert_count":0,"request_count":2,"received_data":798862,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.squarespace-cdn.com","ip":{"addr":"151.101.128.238","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2019-01-24","domain_rank":4785,"first_seen":"2019-02-20T22:26:51Z","last_seen":"2025-07-24T22:11:32.159207Z","alert_count":0,"request_count":1,"received_data":267158,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"nycethereum.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":28,"received_data":5909932,"sent_data":13419,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-07-30T15:13:23.39034Z","alert_count":0,"request_count":2,"received_data":984,"sent_data":1919,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bsc.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":0,"first_seen":"2023-11-21T22:39:48Z","last_seen":"2025-07-30T10:40:54.617376Z","alert_count":0,"request_count":2,"received_data":6238,"sent_data":1019,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-07-30T15:12:44.837685Z","alert_count":0,"request_count":1,"received_data":344560,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.telegram.org","ip":{"addr":"149.154.167.220","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":38509,"first_seen":"2015-06-25T10:09:00Z","last_seen":"2025-07-29T06:46:01.560293Z","alert_count":0,"request_count":2,"received_data":783,"sent_data":1148,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bsc-dataseed.bnbchain.org","ip":{"addr":"52.210.90.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":0,"first_seen":"2023-08-03T06:51:11Z","last_seen":"2025-07-26T09:55:57.436941Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1045,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-07-30T15:24:47.511181Z","alert_count":0,"request_count":1,"received_data":233063,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc.meowrpc.com","ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-04","domain_rank":0,"first_seen":"2023-07-10T08:36:27Z","last_seen":"2025-07-24T14:07:04.03555Z","alert_count":0,"request_count":1,"received_data":983,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rpc.ankr.com","ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"domain_registered":"2007-04-23","domain_rank":538448,"first_seen":"2021-10-24T12:41:06Z","last_seen":"2025-07-31T01:01:55.966867Z","alert_count":0,"request_count":2,"received_data":1363,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":3267,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-07-30T23:15:51.450001Z","alert_count":0,"request_count":3,"received_data":1427,"sent_data":1362,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"nycethereum.com/static/js/main.bf60f6a5.js","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"61d50fbfe5b452459106d131df5024e1","sha1":"da7625e4fae8fc38359d217af763a346d16d3db3","sha256":"f50af6973cd45147bdb3506bf4af44407a9f096b53d1eee5b6d19ef401ec0d80","sha512":"2cbcc87f1c2af543e0ffcad4641ded9f8ad36d7f0cff581142222b995f6a71184c52c0bdc6b70de47b2d0041a1e0aea008ca3b31305ea03137df9eecb75b21d1","size":407494,"token":"7747311279:AAGGT9-ziURIco-pUYf8hfAhlbz1ZyQz_4s","is_revoked":false,"bot":{"token":"7747311279:AAGGT9-ziURIco-pUYf8hfAhlbz1ZyQz_4s","user_id":"7747311279","username":"andmorecryptobot","first_name":"andmorecryptobot","last_name":"","chat":{"chat_id":"","title":"","type":"","bot_is":"","total_users":0,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:21Z","timestamp":1753948761,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":44074,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-31T07:59:21.975551+0000\",\"flow_id\":213432533631819,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":44074,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3516,\"start\":\"2025-07-31T07:59:21.967499+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:22Z","timestamp":1753948762,"ip_dst":{"addr":"149.154.167.220","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":34782,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)","source":"{\"timestamp\":\"2025-07-31T07:59:22.704406+0000\",\"flow_id\":699311446434498,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":34782,\"dest_ip\":\"149.154.167.220\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033967,\"rev\":1,\"signature\":\"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2021_09_16\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_09_16\"]}},\"tls\":{\"sni\":\"api.telegram.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":918,\"bytes_toclient\":4500,\"start\":\"2025-07-31T07:59:22.664258+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:22Z","timestamp":1753948762,"ip_dst":{"addr":"149.154.167.220","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"172.18.0.20","port":34798,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)","source":"{\"timestamp\":\"2025-07-31T07:59:22.708789+0000\",\"flow_id\":678596819166098,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":34798,\"dest_ip\":\"149.154.167.220\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033967,\"rev\":1,\"signature\":\"ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2021_09_16\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2021_09_16\"]}},\"tls\":{\"sni\":\"api.telegram.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":4500,\"start\":\"2025-07-31T07:59:22.664466+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:23Z","timestamp":1753948763,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":55150,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-07-31T07:59:23.987880+0000\",\"flow_id\":548308986356554,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":55150,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":3510,\"start\":\"2025-07-31T07:59:23.975690+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":58018,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-07-31T07:59:24.007002+0000\",\"flow_id\":1671198121081754,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":58018,\"dest_ip\":\"104.18.10.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3433,\"start\":\"2025-07-31T07:59:23.998298+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"52.210.90.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.20","port":45190,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)","source":"{\"timestamp\":\"2025-07-31T07:59:24.052293+0000\",\"flow_id\":1983319836983062,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45190,\"dest_ip\":\"52.210.90.9\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058780,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":927,\"bytes_toclient\":3168,\"start\":\"2025-07-31T07:59:23.982806+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"52.210.90.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.20","port":45196,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)","source":"{\"timestamp\":\"2025-07-31T07:59:24.065767+0000\",\"flow_id\":2019350317579457,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":45196,\"dest_ip\":\"52.210.90.9\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058780,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":927,\"bytes_toclient\":1654,\"start\":\"2025-07-31T07:59:23.998593+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":51330,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-07-31T07:59:24.323006+0000\",\"flow_id\":535739764587609,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":51330,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4434,\"start\":\"2025-07-31T07:59:24.277593+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":49412,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-07-31T07:59:24.327008+0000\",\"flow_id\":503065800922678,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":49412,\"dest_ip\":\"104.26.11.181\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3443,\"start\":\"2025-07-31T07:59:24.316982+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.20","port":51338,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)","source":"{\"timestamp\":\"2025-07-31T07:59:24.333536+0000\",\"flow_id\":1339237951366012,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":51338,\"dest_ip\":\"216.119.155.40\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058825,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"rpc.ankr.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":914,\"bytes_toclient\":4434,\"start\":\"2025-07-31T07:59:24.287612+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-31T07:59:24Z","timestamp":1753948764,"ip_dst":{"addr":"104.26.10.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.20","port":44804,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)","source":"{\"timestamp\":\"2025-07-31T07:59:24.351948+0000\",\"flow_id\":1724011186500139,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":44804,\"dest_ip\":\"104.26.10.181\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058813,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .meowrpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.meowrpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":917,\"bytes_toclient\":3517,\"start\":\"2025-07-31T07:59:24.340523+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-07-31","alert":"Detects file containing Telegram Bot API","trigger":"nycethereum.com/static/js/main.bf60f6a5.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-07-31","alert":"Detects file containing Telegram Bot API","trigger":"nycethereum.com/static/js/main.bf60f6a5.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}]},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17417004136","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cfa9b5839c94a1b9859ca39cd148561","sha1":"cea3a95857aa16646aba2eba1093c6eeb8a5d8eb","sha256":"1ccd6796127ccf560dad775ae9ab5191f20ee0ea1411a4c36ee973d434952123","sha512":"293b71dc7586d3b4bfd29821b105a8618f29a9e75c34b092b8b7de32bdff49861e49212ccfd9730c5059d8e9cf728b5eb5025da8cc0c45cce79fd83fe1a5601e","ssdeep":"3072:9ZfUjKpq1N+3sPIAvTHX09inBOiU+xMj4KwPSOZ1hvM943NBQEzsX55Z6gJuPht3:09IsXcjyKwP73NBtsrZ6gJuPzUZpIh9","tlshash":"5c7419cd73d6706683a2b478503f008ba57b69e2f84cc895f185d8e42e74a9a4277f7c","size":343513,"data":"","first_seen":"2025-07-31T07:59:56.651721Z","last_seen":"2025-07-31T07:59:56.651721Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-07-23T03:36:52.748577Z","times_seen":31751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-23T04:54:09.755646Z","times_seen":235717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/a41e3a8f-46f7-4621-afad-f50db6463d7a","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-06-18T09:20:21.342859Z","times_seen":4173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-23T05:24:35.354113Z","times_seen":731187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/195caa77-bf3e-4c31-8a87-d90a89efb8d9","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c89136b321cfa9fad1bbe0debcf1c7a8","sha1":"b66da04f004621464b955efb85f209f917866e80","sha256":"6759b2311370eab22e8d31a21e93ec50b9f85485dd8200bcff37aa88d29bf7f6","sha512":"037dcc5bbed396ca20f84bb44c84ecfa2bc6a65c3805388d18f0a4d0a4aa4b04a7c5f80dd3d94afe01882272bc96cae2b251b79b472b8934b65dd0780eab7f78","ssdeep":"24576:0fEWVmiR2+UO+w1Gf2m+fxN9FxJkITWM4Xpvyj5HP9jRWrtm:9WrR2+UOH1VRF73TMZaj7R","tlshash":"9426b594d855cc18c87502c84131ca69f3d55b693e0afe6f782cf8e9a3c9e268da1c77","size":4812980,"data":"","first_seen":"2025-07-31T07:59:56.791724Z","last_seen":"2025-07-31T07:59:56.791724Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-07-15T21:03:46.662531Z","times_seen":8481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/ba1453d0-2fd9-460a-b5f5-cefde9bd1209","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-28T16:47:47.454007Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/static/js/main.bf60f6a5.js","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"61d50fbfe5b452459106d131df5024e1","sha1":"da7625e4fae8fc38359d217af763a346d16d3db3","sha256":"f50af6973cd45147bdb3506bf4af44407a9f096b53d1eee5b6d19ef401ec0d80","sha512":"2cbcc87f1c2af543e0ffcad4641ded9f8ad36d7f0cff581142222b995f6a71184c52c0bdc6b70de47b2d0041a1e0aea008ca3b31305ea03137df9eecb75b21d1","ssdeep":"6144:vCT4F7lW0Ppy9OUDezc6vPlXVSiFXVDNk/CQ5iyqX9C033599IG0Ej:vN/EmDNk/CQhK93f9Iej","tlshash":"ec842ac87192f4a5abf711a2407f4006f33e5e1eb80d8450f265fcda78b948ea167f69","size":407494,"data":"","first_seen":"2025-07-31T07:59:56.769509Z","last_seen":"2025-07-31T07:59:56.769509Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-07-31","alert":"Detects file containing Telegram Bot API","trigger":"nycethereum.com/static/js/main.bf60f6a5.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3351d3c17fd56a0f57a2a5474714123b","sha1":"c0546a43f841ec20d5af61a071d1cefe5b533cc9","sha256":"8a6d7a5247ab4d9a4e6b5279cfa2c9fc63779cc32fbd94775ac99c21207a86a5","sha512":"c4fe6681494d49a18ba6cff328a8bc2e0a90fc57998be230bfc510244a564e39813fa419720fa649b154b352726bc9cd0a02bcdf689c5a08a6b2b4a731adc608","ssdeep":"","tlshash":"35c02b88210b0cb141f73b00cf3fba00f0023224ece17931490923048d20e03f744894","size":155,"data":"","first_seen":"2025-07-31T07:59:56.79921Z","last_seen":"2025-07-31T07:59:56.79921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nycethereum.com/images/Etherealize%20logo.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/Etherealize%20logo.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T05:24:32.276041Z","times_seen":17469164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/favicon.ico","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:20.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:20 GMT\r\ncontent-type: image/x-icon\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ow8yEDS5r8Xm6iLZ0fR3dj6GwPSURgg9B0PHG6meY9khCA58Rz1YyvJ9%2FaH1cX46Gc0WktWRBgI2c%2Fox%2BJIjM2WARIQCQJkfZKzDMI6gwpqWpHsZ%2BkOEzeh%2FOnMzryDHpOY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:26 GMT\r\netag: W/\"688a2b1a-f1e\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 967b8e4a688956b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2802\u0026min_rtt=794\u0026rtt_var=1513\u0026sent=78\u0026recv=98\u0026lost=0\u0026retrans=0\u0026sent_bytes=8686\u0026recv_bytes=5871\u0026delivery_rate=631953\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18074\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=1592\u0026inflight_dur=29\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3870,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel, 24x24 with \n- PNG image data, 24 x 24, 8-bit colormap, non-interlaced, 32 bits/pixel","md5":"c92b85a5b907c70211f4ec25e29a8c4a","sha1":"1120538c77ad1f28a89243b4b53fe2ac16cc3bc6","sha256":"3d10f7da6c603178340081668c4ac5b3ae9743ca9a262ab0fcd312fbb9f48bdd","sha512":"d792613e3c31d3aea08ae9ce51a26498afed8b48c93290640c64d0a23edc85e524bc1d090b5ba3fa161b3f2f7d31f9d1da5db77b14189fc3f8ed81ff830fa70c","ssdeep":"","tlshash":"26815cb31b994539e5cb0317fa069036d8f1d11e09b5493e1a938c05ad2fe99c26a36e","first_seen":"2023-04-12T20:45:07Z","last_seen":"2026-07-23T05:06:18.970295Z","times_seen":11257,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed.bnbchain.org/","fqdn":"bsc-dataseed.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.210.90.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:24.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nycethereum.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 9f2adb4e273a3072f1011b5b736d004f\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-06-18T09:20:21.245055Z","times_seen":5257,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/merkletreejs@latest/merkletree.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:24.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/merkletreejs@latest/merkletree.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.5.1\r\nx-jsd-version-type: version\r\netag: W/\"38b62-hb7yiPDOf36GeGwNtiLPc6Lfotc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\nage: 7616\r\nx-served-by: cache-fra-etou8220103-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 49570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232290,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ea425bcaf8d5bcc4cd1b787a9067be7c","sha1":"85bef288f0ce7f7e86786c0db622cf73a2dfa2d7","sha256":"8dfd04b5d4631811c6f25b7ebd6d0444222afc0a7ab5a740320731b0e50f08ac","sha512":"66ee506a0e657b1fe597d6434c186db3ebbc12f5f540d29689dbb1119efbbc8cae1b1edf9e6682cbf602f4540be1b2f61af725ee1ec2036c5b57ab817f01362f","ssdeep":"3072:ZcBVt9NAALrlr9KorpLppLR8Cs4HOIFV99:Zo9NAAvOYRVssOIF/9","tlshash":"ae342ac53685a0a583da71a8043f980fb176a827405cd484e928fcf59cfce9956bbf7c","first_seen":"2025-03-02T05:43:21.853177Z","last_seen":"2026-07-08T12:41:40.125836Z","times_seen":1308,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":85,"dns":6,"connect":18,"send":0,"wait":16,"receive":13,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/Etherealize%20logo.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/Etherealize%20logo.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 10750\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8BTEzTuM8DziiPc3v8DsxTflJvSqHcuW6gCWH3xG6eo1yC%2BKLiFIGolg6%2FJid%2BMfK8E1uN2xgdQ7gr%2BVQi2S9AA1n%2F%2F8RCO61VHVO0ScLFd%2F5ZcAJI3VDKOCe76nVOCM1lk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:38 GMT\r\netag: \"688a2b26-29fe\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 967b8e52398a56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2089\u0026min_rtt=528\u0026rtt_var=1677\u0026sent=112\u0026recv=123\u0026lost=0\u0026retrans=0\u0026sent_bytes=29500\u0026recv_bytes=11082\u0026delivery_rate=5712513\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=30958\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2807\u0026inflight_dur=87\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10750,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1e64ce7f0e4ae319cd823bbce363a068","sha1":"07435478fa2320abd40a420605736d72c79d119f","sha256":"e6f66d008b91ce5835d290fb394b98fcce40d463e57c146896edc0ca27e6bdd5","sha512":"1ec707d1010a141418b975188e32b2e3a5920d4f34662261a2baa6388efe4a98cfe082d81888d9c46003564e96f1b7f32e26c998c142e5d481e7e29ce0049ca0","ssdeep":"192:+zCBOeSHUJTg9IfSIDF4xkp5aOht8bdGpPMSUN5/SnMQmeSgTtEMkC:SyAUJTqQgil78hGpPM35kRB5","tlshash":"4222bf6a27a94a90c48d27330299408233416f046a5bfb539cb297b5e2ff57b6f14c16","first_seen":"2025-07-31T07:59:56.640618Z","last_seen":"2025-07-31T07:59:56.640618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/AltLayer_logo_White.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/AltLayer_logo_White.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 7730\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=32sRNHqenUrbO8yFKNPFP6OWKbUXP%2B%2BMxQXOOVgpK2l1xeOfrFEc2Wdgk5C6anMSEuYlZNjek2dcI%2FwmwYeYXPyVwhMKbb%2Ff7eXn3P0OkDBFXtM5AR1u6naUAmnxHcW26Qw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:33 GMT\r\netag: \"688a2b21-1e32\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52498f56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2077\u0026min_rtt=528\u0026rtt_var=1500\u0026sent=151\u0026recv=134\u0026lost=0\u0026retrans=0\u0026sent_bytes=76125\u0026recv_bytes=13079\u0026delivery_rate=5712513\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2862\u0026inflight_dur=109\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7730,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4f2f825bc8be8d64297ee27fe9e31102","sha1":"8e1ee3e01670ec75fd216d4b59ac77a827773f9d","sha256":"34056a698f3a7a82fd4df41dd0d1c04e898a38a74c3df3274f7a9202808987f7","sha512":"9b6762ab7726abf836e8bd82c3279f5d4b5a72b7b5414028c41c51ea66edfd13e9f0ab2a84c41e26b88879d4ccb788d2a1b31836cd3dd9e58fce1a438876ad08","ssdeep":"192:+zCspD7iNaZeFx+kBV1b1vbUu0ybxlTbeR8WGNEv+kiFBKP:SdeNIeF9BV1+pyN5itGeWRFB8","tlshash":"5ef1af6a6b708610ed70c7381db84218754b69a616873480fadd3904f7bd7ebc1aee98","first_seen":"2025-07-31T07:59:56.645378Z","last_seen":"2025-07-31T07:59:56.645378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/x.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/x.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 968\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UnkY5nw3ZOSLv867lpMiEDqpSPTH2UQhFiArul080dkZN3n7KLoOv6Usx3CYEGe66Dc30VKqwTWC822PrnBUy8h3F957X1ShmEYIDI6YyiUhUKQIQQy463fhZEdDb2hCm2c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:54 GMT\r\netag: \"688a2b36-3c8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52499256b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2089\u0026min_rtt=528\u0026rtt_var=1677\u0026sent=110\u0026recv=123\u0026lost=0\u0026retrans=0\u0026sent_bytes=27825\u0026recv_bytes=11082\u0026delivery_rate=5712513\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=30958\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2806\u0026inflight_dur=87\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":968,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"574215ce01f07645575e71ae0fa630ff","sha1":"96ca2db7de3337d69df096103c27d22106d42425","sha256":"7fda1867213f1a0502b042774be5aa1ec4c2c483f5690fbee886c025e83c29e0","sha512":"44237912094a164e779e056be7da974830d083aa90b55b849907e3991b74410696f2b64bd5f8e4f31ed2399beaacbc12f05dd913ffbd1395a262bfb584521eb2","ssdeep":"","tlshash":"091104a522b01e46c15d833d095d83533771c36263976889d5c1b139592abf6ee26f44","first_seen":"2025-07-31T07:59:56.648579Z","last_seen":"2025-07-31T07:59:56.648579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?tid=AW-17417004136\u0026en=page_view\u0026dl=https%3A%2F%2Fnycethereum.com%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1185132719.1753948762\u0026dt=HOME%20%7C%20ETH%20NYC\u0026auid=1730969178.1753948762\u0026navt=n\u0026npa=1\u0026gtm=45be57t1v9226176050za200zd9226176050\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104630779~104630781~104684208~104684211~104934122~104934124~104948813~105087538~105087540~105103161~105103163~105124543~105124545\u0026tft=1753948762491\u0026tfd=3504\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /ccm/collect?tid=AW-17417004136\u0026en=page_view\u0026dl=https%3A%2F%2Fnycethereum.com%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1185132719.1753948762\u0026dt=HOME%20%7C%20ETH%20NYC\u0026auid=1730969178.1753948762\u0026navt=n\u0026npa=1\u0026gtm=45be57t1v9226176050za200zd9226176050\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104630779~104630781~104684208~104684211~104934122~104934124~104948813~105087538~105087540~105103161~105103163~105124543~105124545\u0026tft=1753948762491\u0026tfd=3504\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T05:24:32.276041Z","times_seen":17469164,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:23.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 11:05:37 GMT","end":"Tue, 23 Sep 2025 12:05:32 GMT"},"fingerprint":{"sha1":"EE:63:A4:E6:4E:19:32:30:4F:F9:7E:23:97:D0:25:98:D1:C9:BF:7A","sha256":"EA:5F:7C:2E:45:73:D4:0F:43:6B:96:01:B6:18:83:C6:42:53:23:E1:8E:B8:28:20:99:88:EB:2C:5F:2F:9D:3D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://nycethereum.com/\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 967b8e5f3974b51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T05:24:32.276041Z","times_seen":17469164,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":36,"dns":0,"connect":1,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-17417004136","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:19.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=AW-17417004136 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 31 Jul 2025 07:59:19 GMT\r\nexpires: Thu, 31 Jul 2025 07:59:19 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 31 Jul 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 119220\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343513,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"5cfa9b5839c94a1b9859ca39cd148561","sha1":"cea3a95857aa16646aba2eba1093c6eeb8a5d8eb","sha256":"1ccd6796127ccf560dad775ae9ab5191f20ee0ea1411a4c36ee973d434952123","sha512":"293b71dc7586d3b4bfd29821b105a8618f29a9e75c34b092b8b7de32bdff49861e49212ccfd9730c5059d8e9cf728b5eb5025da8cc0c45cce79fd83fe1a5601e","ssdeep":"3072:9ZfUjKpq1N+3sPIAvTHX09inBOiU+xMj4KwPSOZ1hvM943NBQEzsX55Z6gJuPht3:09IsXcjyKwP73NBtsrZ6gJuPzUZpIh9","tlshash":"5c7419cd73d6706683a2b478503f008ba57b69e2f84cc895f185d8e42e74a9a4277f7c","first_seen":"2025-07-31T07:59:56.651721Z","last_seen":"2025-07-31T07:59:56.651721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":113,"dns":1,"connect":21,"send":0,"wait":49,"receive":122,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/ssss.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/ssss.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 125172\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2tvkRP0A%2BFvoOMjk7h%2FPjuHPlBJFg8qXFoBay9ZzBXDp5gOjS3HGUpy%2BD%2BAM5s9MgG2YrGyOqz3XBQyW9%2BhNpAjjJKBBjoifCylv6lXN%2BecTXJEjdOk1R4ocf%2BgTB6v8ryQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:46 GMT\r\netag: \"688a2b2e-1e8f4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52c99a56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1415\u0026min_rtt=29\u0026rtt_var=905\u0026sent=206\u0026recv=141\u0026lost=0\u0026retrans=0\u0026sent_bytes=145394\u0026recv_bytes=13401\u0026delivery_rate=7140671\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=19781\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2961\u0026inflight_dur=144\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125172,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f17659773893582cdb4a70391acdd6b9","sha1":"554190f4e67b0200a68633c53376ada41a5d744c","sha256":"2520133e00bc4b69b3a84177abfcd59a26f608faf2cf448e52038da3b56b9972","sha512":"9ed6585749afce4c9ee6479aea14007193de3a46532916a58eafb67f91678ebab2f41d7607dd3f56229511d2ecd6cd234f25e6eb11f1335181fe26db7145eb30","ssdeep":"3072:LQUVVlHyyt0AZP/9pvZxmOPE7/TuOEhXoQ3latik:DVlHyyaAZFMFQYklaYk","tlshash":"e5c31223f360c726774ef1ae0bb19db6328fd825c6b24c7a4d693a15da5a103110addd","first_seen":"2025-07-31T07:59:56.655428Z","last_seen":"2025-07-31T07:59:56.655428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/EF-Academic-Secretariat-logo-horizontal-dark-background.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/EF-Academic-Secretariat-logo-horizontal-dark-background.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 10295\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3Oo9D01N%2BkkIS6C0gkfhK%2F8QFihdgtislq056AlGOYsgpEEw9Pr9OyQkPVME01A1X1oxBa4vVtGbWscuKQBzkWIUW8chZPHWozoj1629%2F4hudKMMM5VsPidIbEx%2FAH76UsY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:37 GMT\r\netag: \"688a2b25-2837\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52499056b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1744\u0026min_rtt=528\u0026rtt_var=803\u0026sent=141\u0026recv=130\u0026lost=0\u0026retrans=0\u0026sent_bytes=64898\u0026recv_bytes=11892\u0026delivery_rate=5712513\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2850\u0026inflight_dur=100\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10295,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ed024dce76a75607f7e7d5206926dbaf","sha1":"2d53fb79f456050e82d063d4baf3ea1c58f1fd2f","sha256":"544bf82115665d47d5b3ff438fe2062a48edca5a369b2a2657706485a737f3d7","sha512":"22fe7d8dfa39d2797ef800695632816b2790eede3dd976aeff106733657daa67c8761d187d560318f9a116db3a400f44b4dfa9743e1d4cff4eca90f380ba686d","ssdeep":"192:+zCEcVgWTYnr6+iM+ZtTraUIb7ZWhNQCW0e+J4gTrHBdXLKP7uRRdQe7nx:SMg+YnPiM+HIb7EhyCVe+J4gTrHB4DuB","tlshash":"0622bf559c3af44eeb0f43be6815925874bac201f9ffa1218724a115cb2cb978dca658","first_seen":"2025-07-31T07:59:56.659729Z","last_seen":"2025-07-31T07:59:56.659729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.meowrpc.com/","fqdn":"bsc.meowrpc.com","domain":"meowrpc.com","tld":"com"},"ip":{"addr":"104.26.11.181","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:24.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meowrpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Jun 2025 03:02:00 GMT","end":"Fri, 12 Sep 2025 04:01:59 GMT"},"fingerprint":{"sha1":"B8:E9:DD:95:07:46:38:5E:E8:46:28:D1:98:DF:93:30:B8:B6:7C:10","sha256":"41:AF:75:8A:5F:CA:66:5D:34:AA:76:7F:C4:5B:8B:66:DA:12:52:DF:E9:88:4E:15:8C:51:48:F8:63:37:D5:9E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.meowrpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://nycethereum.com/\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\ncontent-length: 0\r\ncf-ray: 967b8e617ad25685-OSL\r\naccess-control-allow-headers: Content-Type, Authorization, DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-allow-methods: POST, OPTIONS, POST, GET, OPTIONS\r\naccess-control-allow-origin: *, *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VQEZ56aaeBHGR0PBGRMRwv6j%2FV%2FV%2BFqI9NgZCr8H3M68I%2FDAfcwmibXbfvmPDmfrhSw1w8sKU0k85ud58rGuE5ydGrme%2FmSJFYW425Puxc8PTWySIR7QHf3cVvXwZ807XQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2257\u0026min_rtt=440\u0026rtt_var=3609\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3198\u0026recv_bytes=1156\u0026delivery_rate=7855334\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=3b839d23fa4ac193\u0026ts=138\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T05:24:32.276041Z","times_seen":17469164,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":69,"dns":2,"connect":1,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:24.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 11:05:37 GMT","end":"Tue, 23 Sep 2025 12:05:32 GMT"},"fingerprint":{"sha1":"EE:63:A4:E6:4E:19:32:30:4F:F9:7E:23:97:D0:25:98:D1:C9:BF:7A","sha256":"EA:5F:7C:2E:45:73:D4:0F:43:6B:96:01:B6:18:83:C6:42:53:23:E1:8E:B8:28:20:99:88:EB:2C:5F:2F:9D:3D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nycethereum.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-public-multiregion\r\nx-drpc-trace-id: 72454e03ef56b55cd6b19ba45d2a7ea8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 967b8e5f89dbb51e-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4902,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c6bfa8fda4c0e071f9d03e47e2109c3c","sha1":"c9cd91f85569f1927c3deb5f4c3469255b6479ca","sha256":"30bd4eeaa66748ea6d936f73a797160ea5ad2aa29caad7e413598ff962780988","sha512":"91972a80a9592ab068cf65c75de6ec5ab6c1e42945c6fe8d5e7356ff5e0dd6e076c1b637908a86991e085becd11a1f743d901412bb9ac6170dfd4da20762cdc4","ssdeep":"96:+igW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:V5TB2SzAT/7kSRRrze3k","tlshash":"2ca179f0ee02c891f1be4768f2ddbe0461383326eedc5a4604745a991ee5a51bd0dccd","first_seen":"2025-04-16T10:17:39.724523Z","last_seen":"2026-04-30T18:00:51.584548Z","times_seen":621,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?tid=AW-17417004136\u0026en=page_view\u0026dl=https%3A%2F%2Fnycethereum.com%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1185132719.1753948762\u0026dt=HOME%20%7C%20ETH%20NYC\u0026auid=1730969178.1753948762\u0026navt=n\u0026npa=1\u0026gtm=45be57t1v9226176050za200zd9226176050\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104630779~104630781~104684208~104684211~104934122~104934124~104948813~105087538~105087540~105103161~105103163~105124543~105124545\u0026tft=1753948762491\u0026tfd=3504\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:54 GMT","end":"Mon, 29 Sep 2025 08:35:53 GMT"},"fingerprint":{"sha1":"F3:96:6E:68:01:34:12:AD:6A:03:D8:EF:BD:47:E1:FD:A4:AA:FB:C5","sha256":"BF:6D:12:A9:D7:AB:31:65:56:63:8F:97:4E:12:51:58:55:9A:75:81:94:F8:34:D1:46:46:48:4B:34:CB:8A:9E"}}},"request":{"raw":"POST /ccm/collect?tid=AW-17417004136\u0026en=page_view\u0026dl=https%3A%2F%2Fnycethereum.com%2F\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1185132719.1753948762\u0026dt=HOME%20%7C%20ETH%20NYC\u0026auid=1730969178.1753948762\u0026navt=n\u0026npa=1\u0026gtm=45be57t1v9226176050za200zd9226176050\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104630779~104630781~104684208~104684211~104934122~104934124~104948813~105087538~105087540~105103161~105103163~105124543~105124545\u0026tft=1753948762491\u0026tfd=3504\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nycethereum.com/\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://nycethereum.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T05:24:32.276041Z","times_seen":17469164,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":104,"dns":2,"connect":14,"send":0,"wait":33,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:24.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:43:07 GMT","end":"Mon, 27 Oct 2025 11:43:06 GMT"},"fingerprint":{"sha1":"0A:91:99:6D:49:3A:2D:61:FB:0E:6D:EB:6C:CB:67:DD:A6:F6:EF:4D","sha256":"92:66:B5:09:99:C7:87:4C:F6:60:B6:C3:59:71:7E:6F:31:DB:A0:53:24:52:5C:1D:C0:C8:79:22:5F:4E:C2:00"}}},"request":{"raw":"OPTIONS /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://nycethereum.com/\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version\r\naccess-control-max-age: 1728000\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T05:24:32.276041Z","times_seen":17469164,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":239,"dns":1,"connect":22,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/infinitism_green_hero.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/infinitism_green_hero.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T05:24:32.276041Z","times_seen":17469164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/cornell-tech-logo-optimized.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/cornell-tech-logo-optimized.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 7544\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3uY58c%2FfERYXZ6uYOYQ7Bn%2ByeRLu1vviAzvAbqTGIb8RMBAdaahTdGh0EzSEp8NuwCbguDffOrEAR%2BxgyzmDsyTrHJhNuduosq2UnAP%2BJphHoz%2FydYXH8crhGYPbtWo3yfc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:36 GMT\r\netag: \"688a2b24-1d78\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52398e56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1637\u0026min_rtt=29\u0026rtt_var=1208\u0026sent=176\u0026recv=137\u0026lost=0\u0026retrans=0\u0026sent_bytes=107125\u0026recv_bytes=13215\u0026delivery_rate=5712513\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2900\u0026inflight_dur=135\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7544,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e01d9978590b5c5bb0919821dadbca61","sha1":"a2943865dd1d1f3aa7490f526891bc621a30d657","sha256":"2a87fdee4c2d50792d23f2a0ca154ac770bc6d8395327d2f45efa4561fe9ffcb","sha512":"b7e5d1c07e0aa72a01aa70ff9b2f49393304767ee58cf7e42369c3143139822dda9eae9c55facd33bd6c51c9c7edd9d8c37619433560c98d61412b3dc8dab667","ssdeep":"192:+zCXJlWITI2TgpbSWQblTtKoLuAq7lQfKeIlJFW+SNBJaL:S0sWgjQbTKS87lQCeIA+SN7aL","tlshash":"f0f1af4233579c39c8b96b34a88f592b1046b6b0d2d7b6fd41417b408a1d0a4f2376a3","first_seen":"2025-07-31T07:59:56.666522Z","last_seen":"2025-07-31T07:59:56.666522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/city.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/city.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 101539\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YwCbWx3LaLmQUprPfJq7BSK5vrgrOdx3YepToTZTbrqKK%2FuUS7gEZbkRu5gDAy00u3kxK4j9kJErygV6YFHTXd%2Fzp7mUL6%2Be%2BUwGZZzeMRFj5HIfrgSnMfFB%2BBlhc7Iu4rE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:35 GMT\r\netag: \"688a2b23-18ca3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52599456b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1445\u0026min_rtt=29\u0026rtt_var=1245\u0026sent=358\u0026recv=163\u0026lost=0\u0026retrans=0\u0026sent_bytes=338171\u0026recv_bytes=14455\u0026delivery_rate=9711000\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=27269\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=3102\u0026inflight_dur=196\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101539,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"69b04edc339e607b0dcd9c7c48b50aa5","sha1":"29bdd0cba4ce8dc7a7a4acb8ad914fb33dc91455","sha256":"182a351e7a2d1a1b1652f36242c38102dee9701b7430f00467f1adb541abfae0","sha512":"64472c1ad1584449132d6f525afe23acf92b266269b37c39d91afa5bf1686d0eeed44effb64fd5cfbaf696695e3cc103a2555ed2e42fab3c4dc48d0b2aaf3312","ssdeep":"1536:Eg4+IloSTRH+PGWiN1A6QH9OyV1DdCdyzlZgdtXCTz4QyKyz1qWBFZTQW0D:F4+ioIe21AvH91V1ZCEzQDmby5lXZ/s","tlshash":"d3a312299f787edde006c2aa2c8d9375f93a6b13c0ac530528e60fd434fd67585024ad","first_seen":"2025-07-31T07:59:56.670417Z","last_seen":"2025-07-31T07:59:56.670417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.telegram.org/bot7747311279:AAGGT9-ziURIco-pUYf8hfAhlbz1ZyQz_4s/sendMessage","fqdn":"api.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.220","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:23.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 25 Mar 2025 13:09:41 GMT","end":"Sun, 26 Apr 2026 13:09:41 GMT"},"fingerprint":{"sha1":"8B:AA:E2:A3:48:3C:0E:62:9D:B5:49:3A:BD:47:60:BA:AD:18:AA:8D","sha256":"80:58:CE:C7:28:68:D2:99:42:91:1E:43:06:54:D2:D6:F0:9C:DD:E2:F7:6F:68:A0:8A:EA:0C:15:FB:DB:8C:CD"}}},"request":{"raw":"POST /bot7747311279:AAGGT9-ziURIco-pUYf8hfAhlbz1ZyQz_4s/sendMessage HTTP/1.1\r\nHost: api.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nycethereum.com/\r\nContent-Type: application/json\r\nContent-Length: 97\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx/1.18.0\r\ndate: Thu, 31 Jul 2025 07:59:23 GMT\r\ncontent-type: application/json\r\ncontent-length: 96\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length,Content-Type,Date,Server,Connection\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e7884e746218935c4697df1997bbe936","sha1":"2893d5d63bc14b02154310acda77b266ebae4b96","sha256":"066cec50ddfa642df03e6580cd9e7d7f902e576e7ec500940a00594f6173f41e","sha512":"85a6e02bbe63db33b4dd304b38c092e7ef1d1857cdb09261291147cc7faffe78034e024f5ac094fe3ff3fbb9041d058fa9991bdc9735020a040a469c1e9ecef7","ssdeep":"","tlshash":"c0b012001a8c015b52e707d1c45d4844407343a0b13ad4308d03252911c03ec98b488b","first_seen":"2025-07-31T07:59:56.676183Z","last_seen":"2025-07-31T07:59:56.676183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:23.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nycethereum.com/\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 967b8e5eefc90afa-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3019\u0026min_rtt=447\u0026rtt_var=5087\u0026sent=15\u0026recv=19\u0026lost=0\u0026retrans=0\u0026sent_bytes=3970\u0026recv_bytes=1385\u0026delivery_rate=7912568\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=d76d30a9281caf26\u0026ts=2121\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rpc.ankr.com/bsc","fqdn":"rpc.ankr.com","domain":"ankr.com","tld":"com"},"ip":{"addr":"216.119.155.40","port":443,"asn":13213,"as":"UK-2 Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:24.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"enterprise.onerpc.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 11:43:07 GMT","end":"Mon, 27 Oct 2025 11:43:06 GMT"},"fingerprint":{"sha1":"0A:91:99:6D:49:3A:2D:61:FB:0E:6D:EB:6C:CB:67:DD:A6:F6:EF:4D","sha256":"92:66:B5:09:99:C7:87:4C:F6:60:B6:C3:59:71:7E:6F:31:DB:A0:53:24:52:5C:1D:C0:C8:79:22:5F:4E:C2:00"}}},"request":{"raw":"POST /bsc HTTP/1.1\r\nHost: rpc.ankr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nycethereum.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\ncontent-type: application/json\r\ncontent-length: 229\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,solana-client,client-sdk-version,client-sdk-type,client-target-api-version\r\naccess-control-max-age: 1728000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":229,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"42e136a22281d105bd21fa496816706c","sha1":"bc02950079004b0d4f4bea3888dfd4517cddeeff","sha256":"ede226c79ae326ce9e4b099e9f4dbb4e3d7807da2b793bdfadfafeeb84d7175a","sha512":"a41403da8b9e698eb2823bbe0925160b68682c55d4c64e5c8b27193f8fd8bf4fd118179d26eadb446ed41c2c9c12d46523b6f5094caadaae8a03ba3c1d6bade5","ssdeep":"","tlshash":"33d02313c6470537e34f4633371567c4f559705071105f1b4e1c0315024f97b0255351","first_seen":"2025-04-07T11:34:31.00119Z","last_seen":"2026-07-22T08:33:36.653329Z","times_seen":2992,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/Blockchain%20Builders%20logo.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/Blockchain%20Builders%20logo.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 11379\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=415L7xYVd5ER7a933SPrC%2BE4BvHc762YZkK80Gus2GO7KqW38Ktw%2BADdpq0NjWwaAaJgc0ko1F2pBIyi7GPWvse6qX0hoaEVCavaQrrDWrCLMYBgPDTChpKvGV4ICn5dYTI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:34 GMT\r\netag: \"688a2b22-2c73\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 967b8e52398b56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2004\u0026min_rtt=528\u0026rtt_var=1427\u0026sent=121\u0026recv=124\u0026lost=0\u0026retrans=0\u0026sent_bytes=41159\u0026recv_bytes=11129\u0026delivery_rate=5712513\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=30958\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2810\u0026inflight_dur=90\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11379,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9a52ebb731cbe71c0776e592984ac94e","sha1":"036f5c5abd2ca9a33dfbab88610b30a202feab0b","sha256":"c6ae6cdb04ae5c289224ea0a233e5f7e619d2a92766120610036e05c7c5e7120","sha512":"4e7b3027687d4f8ba9c9861849c2ee8d965e191458f3f481bfcca5f267243fc01c12934d3aa36f476a50af8be171c9ef3a592822b9b23cd55209f96d01bd2272","ssdeep":"192:+zCHz9n9vydx+uTbEhZ686EkG68XBdRzkIRni7aY7WFT4rQJQy0lzdfLQPaR4YJ9:SYBNZuTEZ6XONXBdRR4BBFLfQV3pe","tlshash":"e632b08074b1b599d6160bb0342ea81d41b08e5157f65c37481b7b22e9ec6329cbbeaf","first_seen":"2025-07-31T07:59:56.686264Z","last_seen":"2025-07-31T07:59:56.686264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\ncf-ray: 967b8e5278f70afa-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6136\u0026min_rtt=447\u0026rtt_var=11359\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3271\u0026recv_bytes=1244\u0026delivery_rate=7337837\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=d76d30a9281caf26\u0026ts=136\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":119,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:23.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 967b8e5d3de10afa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 748599\r\nexpires: Tue, 21 Jul 2026 07:59:23 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kGqAcUf5BHZhL3NqcU0jugg%2Fhk3t5K%2BZcGifjblaJiFyR21JDbNwGbYPje3zmRMr9f7ZL%2FCbzfN3Xw%2FvfCRB3l0hzHKrRaqJbt7TsnfLBwf7wTKmq37F%2F%2BokaV%2BJgRMnLv9L4JES\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-07-15T21:03:46.662531Z","times_seen":8481,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/DRC_transparent_white_text.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/DRC_transparent_white_text.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 7735\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CJNbAzoM4u5x0s3dR16apv%2BE4nmkjZut7QBe9K5wGH3nolp5fIolgM%2FEEZiODYnexR%2Bpvhwd3PaQB2EGnX2LXIFNIo1HwrirpOkxxELK0R9WAIufMGG%2FweLiKTaOpVLyQRk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:37 GMT\r\netag: \"688a2b25-1e37\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52398c56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1821\u0026min_rtt=29\u0026rtt_var=1637\u0026sent=158\u0026recv=135\u0026lost=0\u0026retrans=0\u0026sent_bytes=84708\u0026recv_bytes=13123\u0026delivery_rate=5712513\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2880\u0026inflight_dur=110\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7735,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"606cd1b76f5343a4bf24b29fa871ae81","sha1":"a6f3bac43404e83db59762499891ff0c2e5faf25","sha256":"9399d6704bf9b919c8f7d9eca4d658e7b399081e2deb369846380abe3b56837b","sha512":"17848c5c8ba869502f1a94365484edfe7537f2e3a083f1c9eb110f166a0ca951eabcb4ce23dea1b1f8f359c7a5e0df4c4681a5e26076b1809ca5e0992ba7987f","ssdeep":"192:+zC2rhEuqdqiFTBOFk90gL5l0pVTb+OJkytCwVYv8uGuhot:SnL5m0m9/L52pVTb+OJHVo8uGZt","tlshash":"fbf1ae2e56e4a941e49c6bfaae460f6d0625ab90e143e670add13f7bf41023380a4f84","first_seen":"2025-07-31T07:59:56.698739Z","last_seen":"2025-07-31T07:59:56.698739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/static/media/madefor-text.var.original.52a34ddc7da967a4d217.woff2","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /static/media/madefor-text.var.original.52a34ddc7da967a4d217.woff2 HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/static/css/main.71055aa8.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40188\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pUK3fZGzbTb55B44qK9MMATVZYZUwMK0JjRRYRiZNd5vtPgA%2FGYQ079iy%2B6ZYHSeKy5Zqu%2Fs4j1tOGZZjasiyIRD8yDL5F9MJ0XAj%2B4othYfQECSk4kY%2B1uOk3Hp%2Bumq3Xg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:25:20 GMT\r\netag: \"688a2b50-9cfc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52e99c56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1447\u0026min_rtt=29\u0026rtt_var=1284\u0026sent=183\u0026recv=138\u0026lost=0\u0026retrans=0\u0026sent_bytes=115524\u0026recv_bytes=13262\u0026delivery_rate=5712513\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2949\u0026inflight_dur=137\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40188,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40188, version 3.0","md5":"8022447a898f183d125334f6e4a13e86","sha1":"2b5f13d51b5256ca5781ac1ff569799a67d72cdc","sha256":"83ea0d46fbd594420a315e27c37eea919af248077b529bbc4df7ad0eeb4e43f2","sha512":"b65a63d8bbdaf9d710ca0b25616830c3fda97a94cc605059ecfbb1c5ed2f07ba1f36bfecd4317d4309366f8ccd3e7da1d1726680e5b05e7d07567678c7c4aec0","ssdeep":"768:ljKjz83fbM9i6FGiQ3jrQ3X69k4MAR2f3gkbKTKqXg:l6zif49MrrQ3q64MH/gkbKLXg","tlshash":"6403f14704497dced73252dc5a5e4c4153f4e7e33822a4fc1baaa8bde46070dc917ea6","first_seen":"2023-04-26T20:01:07Z","last_seen":"2026-07-23T05:12:33.847Z","times_seen":23259,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/Blockchain%20Builders%20logo.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/Blockchain%20Builders%20logo.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T05:24:32.276041Z","times_seen":17469164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/Nethermind_Light_Horizontal.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/Nethermind_Light_Horizontal.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 10693\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SnVVYqRVduUURHBH3KtKwYv%2BFpm4mB5WvXpvKgI%2FWM1g7ti9YRVCG%2BcKMsV661AkBwvWyl%2F0Ad63GQamtjQXNy1U736T66nRxiA%2FxCaDdsqM2Oiqho2H0wu455PNBZotTLE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:42 GMT\r\netag: \"688a2b2a-29c5\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52499156b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1660\u0026min_rtt=29\u0026rtt_var=1550\u0026sent=167\u0026recv=136\u0026lost=0\u0026retrans=0\u0026sent_bytes=95522\u0026recv_bytes=13168\u0026delivery_rate=5712513\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2885\u0026inflight_dur=129\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10693,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"56c13c13ba2d390761d4683d971b4822","sha1":"ac7acac70aab9c1df40af83450dba762c46b7fa5","sha256":"458efed4e3d6c61153511ee328f29f6aa90c507816c331f0458216c72a126cc2","sha512":"86f49f843e8f56b852ef1e140f4e1e01c221c7cbe4e1e57bbf175d14019ec6c6e632f20d154a10f620828c73d161cd3c855f8a828932cfa78b41e9ac612a5739","ssdeep":"192:+zCmIzJgG4+e6yraRzDIWxUhhd8UKBqdiUcou5JBdmzLm4LC70cvx+WXlNX9ANi0:SSK65cj38UPdI57xmC7rvQWV9Ps","tlshash":"3f22c06587270d16c92b2f73031743d2b05011f65de76a3a3859a9bc543c623e667f2f","first_seen":"2025-07-31T07:59:56.706238Z","last_seen":"2025-07-31T07:59:56.706238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/static/media/6aey4Ky-Vb8Ew8IROpI43XnS.7216d13ec6cbce964ba2.woff2","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /static/media/6aey4Ky-Vb8Ew8IROpI43XnS.7216d13ec6cbce964ba2.woff2 HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/static/css/main.71055aa8.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13632\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KURPhtJLdzzpEDkii%2F9Vyf0DqjOI8vD%2BqxPLvRnBuhuwe%2BC8Dl7GqBAf7MjgRlirZ%2BO64vHosiN%2BGiGpXCQf7SB%2BNhQPrdRGDa4OsDP6Anz5V3SvCPVdya5ysvrM5V%2BtXbY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:25:19 GMT\r\netag: \"688a2b4f-3540\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52e99d56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1314\u0026min_rtt=29\u0026rtt_var=940\u0026sent=194\u0026recv=140\u0026lost=0\u0026retrans=0\u0026sent_bytes=130751\u0026recv_bytes=13354\u0026delivery_rate=7140671\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=16800\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2952\u0026inflight_dur=139\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13632,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13632, version 1.0","md5":"b45a8f99d6400f31ef2b9f740dc4762f","sha1":"fad9ea96f0ec3839287dc1af355190f8a8367ad5","sha256":"273c7f94bc4710ef23bb03636727c7dbf2fbedcf5a1fa397d75c53ca1ee1077d","sha512":"b4b13509fd075fe60345f10396a1fe6e1f3996400374afada0ba4b2b5f6677bc688529ca16bad4457f7353654dda034dc6f2fab19070885f5e814fc1fb647f75","ssdeep":"384:34Pxlsbu3zUI2DW5M1yi/mk0KIJPsA2Sa4DcJ8tWXhmSoR:3+P2Dx1yiek/EsA2Sa4I6tWXhE","tlshash":"f152d0d0b9d90452c621e135309713cc6679223cd5c96b2ef98e6cba6c5d7a7d4cf388","first_seen":"2023-05-11T05:50:50Z","last_seen":"2026-07-23T02:26:28.850622Z","times_seen":1045,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/Logo.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/Logo.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 8145\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WZsyUHB9wN2cB8W%2FduqyD7TGJ2j%2FOnm7bcNsEZEdBT5b9EhD%2BEI5QMqUCiMm%2BmEnztlA4a20Fll9TQlnt3eZwXM6zvnT5DU40jQwum6ND85S761rKMWmThoOp8r4arnOJeI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:40 GMT\r\netag: \"688a2b28-1fd1\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e51b97f56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2873\u0026min_rtt=756\u0026rtt_var=2326\u0026sent=94\u0026recv=113\u0026lost=0\u0026retrans=0\u0026sent_bytes=13497\u0026recv_bytes=8838\u0026delivery_rate=2060044\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=22558\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2752\u0026inflight_dur=60\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8145,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6531f1bf88f91a17334874959218b2a4","sha1":"ff92e9b45b73c71687ef57b3ec033c4b67d688cc","sha256":"32b4de73c00f1e40f6e16bb2ffb6d29d462494de8c64f7f9c20acf09a3111f21","sha512":"29be2100db7714fe1cf83b5395c2e1eceb2b8cfb83ea9142e4dce72dc00f2d60b79e48496cf863ccd1d667afe81ff6fcdaaa67dc89deecb92815f8174ed0e759","ssdeep":"192:+zCsT1Pl2bUZ9JwxKsmrpo6hh5rwrK1oBgYpzXmR+PIb/WxE8K:ST2b45smre69UuWyWmkgDWxY","tlshash":"dff19e88666e9103ec94ae300c0ad6d07b15c3d1676ea9110f817b32c848f66cb2bf9d","first_seen":"2025-07-31T07:59:56.717883Z","last_seen":"2025-07-31T07:59:56.717883Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/infinitism_green_hero.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/infinitism_green_hero.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:21 GMT\r\ncontent-type: image/avif\r\ncontent-length: 4433\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RU2m4HiqvrplxvqizE5tJrJVH3hl%2BSn%2BMJO0jRJtx10uQzkjnHd6Q6F5W9BicY0E4tE8pmyiU%2F%2FgXMMEDkglA28BYU38YRt3cQtqYq9lBEtj73heWfc6u%2BIL8Yu9OErc8NY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:39 GMT\r\netag: \"688a2b27-1151\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 967b8e52298956b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2155\u0026min_rtt=528\u0026rtt_var=2060\u0026sent=106\u0026recv=122\u0026lost=0\u0026retrans=0\u0026sent_bytes=22625\u0026recv_bytes=11035\u0026delivery_rate=5712513\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=30958\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2790\u0026inflight_dur=83\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4433,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"21d844d692590ac5ad3ab3769a833c51","sha1":"1b2aa592463c49930910205e284973ed6d26ab77","sha256":"77775aa6cbd70df3e6d8fe6fd064e2b857c2cc9d6d92d2d24af8c8e11526fdcb","sha512":"7b630795821d80342844ae20ce1135fb09870b90b3a9c784dc54ac7928c75534f410e97891af14ba6696a7f270abe82f7acef5f0651898327b8b5128505b9ed8","ssdeep":"96:+zCjoUDyAh4nUTSCTTUhWaIUBo/R3waTMD5uJHzKUm9s:+zCcYh4nWPTTUhWKMR3JTMD0wO","tlshash":"99915bdafc2e58c2c66906b900215d4834f64ee423eb663a84d5754ec9769b78712f22","first_seen":"2025-07-31T07:59:56.720971Z","last_seen":"2025-07-31T07:59:56.720971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/tg.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/tg.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1515\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=h8%2FYEsp3MEsPdAztLeJuNw70crkwRDxrtivnNA35CgPZySGWVT4NVtZvtkcjLHFJ5e764QspkUslQlUIr2vGCmyAebCD4p4wGtOnm5o53a2Gli6ukQpVxipZvG4t0kW3AT4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:46 GMT\r\netag: \"688a2b2e-5eb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52499356b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1660\u0026min_rtt=29\u0026rtt_var=1550\u0026sent=165\u0026recv=136\u0026lost=0\u0026retrans=0\u0026sent_bytes=93297\u0026recv_bytes=13168\u0026delivery_rate=5712513\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2884\u0026inflight_dur=129\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1515,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3a6f27062d0205df60f685a9d9bbc12e","sha1":"e51e40929f9c63acdb13a828b7a8dfd401d5c174","sha256":"500736380f27f3b7ccb7518f54343be2b25f91e2344c4e331062a537d03f89df","sha512":"4ec480a6c333c9c7943933921821eaecd67b65938e59c1d01972338f1bc6263a4f4e032dcb2fae442e8deba8997249b27bfe71d0ef5f88830bb03cd909a95198","ssdeep":"","tlshash":"3131e9bf77e61403c44c67b408210720b3f1a324930fd95a2841f929f8b4bb9fb10c55","first_seen":"2025-07-31T07:59:56.730313Z","last_seen":"2025-07-31T07:59:56.730313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.squarespace-cdn.com/content/v1/616dcf3679bcea00dc22794e/d89eda37-1ed1-4187-a96d-0fe5884195a6/AdobeStock_290047994ii.jpeg","fqdn":"images.squarespace-cdn.com","domain":"squarespace-cdn.com","tld":"com"},"ip":{"addr":"151.101.128.238","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.squarespace-cdn.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 24 Jul 2025 12:13:38 GMT","end":"Wed, 22 Oct 2025 12:13:37 GMT"},"fingerprint":{"sha1":"6C:7F:6A:2E:80:77:20:15:30:B2:78:6E:78:01:FE:A0:C2:CF:31:ED","sha256":"90:DB:70:88:2B:51:A0:CD:D2:E2:6A:D9:57:6D:D3:7E:AB:08:73:10:2C:B2:7F:AD:D9:2E:6A:10:26:54:58:60"}}},"request":{"raw":"GET /content/v1/616dcf3679bcea00dc22794e/d89eda37-1ed1-4187-a96d-0fe5884195a6/AdobeStock_290047994ii.jpeg HTTP/1.1\r\nHost: images.squarespace-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Timing-Allow-Origin\r\nx-sqsp-is-public: true\r\ncontent-type: image/webp\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000,s-maxage=31536000\r\nvia: 1.1 google, 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 557365\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\nx-served-by: cache-iad-kcgs7200097-IAD, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 70, 0\r\nx-timer: S1753948762.171594,VS0,VE1\r\nvary: Accept-Encoding\r\nserver-timing: time-elapsed;dur=1;desc=webp\r\ntracepoint: Fastly\r\ncontent-length: 266530\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":266530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1acb445f1ed80dfeecab9a31e82aff9e","sha1":"30ba17211f815333fb8fc202f6d902caa803c808","sha256":"a1e2b868112392ba668cf67803be819c9e9dde06ca7b27c5074a550b97b9680a","sha512":"d2b29539270d51762a9e208c1b68ccdc0aec6bcb1ec8650f44ae43014598fed45515c87ab518c1c2acbef7862d25166ddca75f686881910d9aa00496e5f3dbbd","ssdeep":"6144:4v47ZjG/iRRWqPdaP1etu8Ti+XBTE/PE8cYotKlFBQCuSjma:uQZj/pscuQXBTEnEHMDHuSqa","tlshash":"17442361319e6061b682edf19c4f6a22339376e58da027f25e6c5e5321dc02f2d8e1cf","first_seen":"2025-07-31T07:59:56.734445Z","last_seen":"2025-07-31T07:59:56.734445Z","times_seen":1,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":81,"dns":44,"connect":26,"send":0,"wait":33,"receive":91,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/static/css/main.71055aa8.css","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:19.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /static/css/main.71055aa8.css HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Jul 2025 14:25:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"688a2b4c-102a3\"\r\nexpires: Thu, 31 Jul 2025 19:59:19 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXmgGOuI1iTfm%2BUYgpoeD6UgbseH%2Ft99%2FHcRt99jjrV5pBGk%2Fe5UKDuLnA1dPh510sLp1oZVQqlbMrKlo%2B6D8g%2FBrgQRgohSpSnSVR4%3D\"}]}\r\ncf-ray: 967b8e42988256aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66211,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65001)","md5":"0fa3340b26d15e34a31a2d07bc807724","sha1":"fc6c62088d318f982a3c5b5e9c36dd4acf2c63ad","sha256":"ff38d4e8602f9b449129f01df129ff94df95d2282fc9907daa9709895e5a8480","sha512":"a32f04887b5b6ae5e73d32350c798fe58adfd7f75d89dc53af4a38f16ebec0464e1afe37d44423d988cd97e9cdfae1c9cb069445c2d5322a44b15c908cab229e","ssdeep":"1536:9r+ZYarvFh02Fkj74LbH19TSoGT5YS+tfv:9r+ZYmvFh02W4bTSLib9","tlshash":"6f53c7080bc510bbbc13c9f2e0e467d4a12e7284ed2a0bfd9456b55be2c66ed0b77d61","first_seen":"2025-07-31T07:59:56.739015Z","last_seen":"2025-07-31T07:59:56.739015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:23.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:23 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 967b8e5c4bcc569b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 91860\r\nexpires: Tue, 21 Jul 2026 07:59:23 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CQPDGsL5JF7uKFJ57BA15xC0hzy329fXJHg6D%2BoGQRj0cPbQe%2F6Wp7DeHu3eR%2BqNIEJFgTm0ddQ0wK7GFDXvB5HN2WflFcDq0wQ71dFO7Qd9dMND0vaGHRM%2B1ak3NS5yAUg7xBe7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-07-23T03:36:52.748577Z","times_seen":31751,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":29,"dns":5,"connect":4,"send":0,"wait":14,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:23.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nycethereum.com/\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 967b8e5edfc10afa-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=4269\u0026min_rtt=447\u0026rtt_var=7599\u0026sent=12\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=3652\u0026recv_bytes=1385\u0026delivery_rate=7337837\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=d76d30a9281caf26\u0026ts=2110\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/secureproxy.php?e=/prefetch","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:24.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"POST /secureproxy.php?e=/prefetch HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nycethereum.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nfetched-ipaddress: 91-90-42-154\r\nContent-Length: 2496\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.1730969178.1753948762; gacfxdn1x7=05gHkMUKg7PATKb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=09ptRj89t2MRfohHzWyZzHFvje0gxn5bdlXQmNX1mYIUkFp9TKMt3t5xZCIeL%2BXb3HpeTyIpaAIeyWAWP0mUp8OWdWB74uHqzvaE1kd5vM8wGyY7AlcaOViZsRsdeB6Qf60%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 967b8e63ea2456b7-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1114\u0026min_rtt=29\u0026rtt_var=531\u0026sent=468\u0026recv=184\u0026lost=0\u0026retrans=2\u0026sent_bytes=469574\u0026recv_bytes=18542\u0026delivery_rate=20190982\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=31385\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=5879\u0026inflight_dur=286\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"openssl enc'd data with salted password, base64 encoded","md5":"d08c15d853fd0b0312db48010a686286","sha1":"9a5871b5fb5c7f23e225a6a3d26d07c3a654be5f","sha256":"36ac42ccfe185c6196432010564b9256ced9acb96752dc59e75eadc56c224a60","sha512":"fc6d6a330b7b613213a6152c14ad85e1eca861a3f4a5d9a3bac9bbda9079f6f662fece5de47547badca4381d1fa23117b3634ca4bfded249e826c0dd40b3bf2e","ssdeep":"","tlshash":"69d0954de64980851c28454e35d5e568dbed09e07315c45e5654e990115f1d3244e1d4","first_seen":"2025-07-31T07:59:56.750842Z","last_seen":"2025-07-31T07:59:56.750842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/images/IC3_transparent_white.avif","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:21.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /images/IC3_transparent_white.avif HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: image/avif\r\ncontent-length: 10496\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bHRKN9LMQ7tzthvzlzWuBY0d17G0lkweebV02Rm%2BdRdrMQCIsl5vEqRHqz%2Bag0HsGTPGEpZOYS56jmKHbsAeyICOeRoCM6ynLF5dYT1WtggEU6BPprf%2FMGWx8EAzTe6a%2BWw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:24:39 GMT\r\netag: \"688a2b27-2900\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52398d56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1854\u0026min_rtt=528\u0026rtt_var=1043\u0026sent=130\u0026recv=126\u0026lost=0\u0026retrans=0\u0026sent_bytes=53440\u0026recv_bytes=11223\u0026delivery_rate=5712513\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=14000\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2829\u0026inflight_dur=96\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10496,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"06ec68617881c9b42820ca7fd711194d","sha1":"504770bfef137f664141362ebd212d5bdcb02987","sha256":"8c7eb18f7d84d93595bbc1d08c99901a284d653893d01c7489dad0d85743f068","sha512":"66b54d25b0994a83d779425fe369e743aed65b9998b466d356a6fd46f056b3132486e39dee7623174c9bf225298f3b2b48bdf921c5f0d47f896bfc949718940c","ssdeep":"192:+zCcWUuaODnw9XHIHbXX0XodWb3n7x6j/zq5NpFvTUJjss4LobxJMVwn95K:SiXhnw9UX0o8Lne/zqfvTojss4qMVeW","tlshash":"6022c0aab53423cbfe5c067248eff1897ed7c267e65394922aca2011e0de7c14d2b524","first_seen":"2025-07-31T07:59:56.755806Z","last_seen":"2025-07-31T07:59:56.755806Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/quest.png","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /quest.png HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: text/html\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tH4mkAOz4MLDH5qSS%2Fap1xUfyFfDiMeUDSeNr0%2B4PYJZLK0tAbPK2wRIg73irJMJCxXWgxOtqXEQChAVoKHZhqErIgKVyXhB3rYqJREDQenZE%2BvIqUpFghHWxu0ocQRbNUU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 967b8e52c99b56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1554\u0026min_rtt=29\u0026rtt_var=694\u0026sent=230\u0026recv=144\u0026lost=0\u0026retrans=0\u0026sent_bytes=175888\u0026recv_bytes=13545\u0026delivery_rate=7140671\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=31440\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2975\u0026inflight_dur=158\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":980,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (672)","md5":"89167c9cc5b6edf01a9feb246fa8e2be","sha1":"9a504893ed1dc4a5aea234839e7e7cc3a4809f6e","sha256":"2f8b9a28f9e41a8fba593744f0169898171a736d76ac9fbaf1adcf2c95973aab","sha512":"edc53697b616d79b0536656ce3519ceaea12ce40ef27c32eab38de15b1ccba4fb0b821289033ad2973d38712a50ec3bd5b71a9f01f1ded0c20cc8ccc2e362f30","ssdeep":"","tlshash":"2711d443dc06cc9a42719776ff76f02cc58a7508ea91fc50a8d561594dd4bdbcc15d40","first_seen":"2025-07-31T07:59:56.760788Z","last_seen":"2025-07-31T07:59:56.760788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/static/media/geotica-w01-four-open.c1e9784bb16b31a0828f.woff2","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /static/media/geotica-w01-four-open.c1e9784bb16b31a0828f.woff2 HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/static/css/main.71055aa8.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 58680\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ia5mYASOh3B8mJ5AGyqv71hyArzqIGSQYlxuKSb8EE6txKdLSdP%2B6izjvKPutw55SHV3xDzbx7W61P5mFzpg5rq87m7YQ0Xsy%2FnHeP4corrfzoFW97Q5iY%2BUmDHzE707ZeE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Wed, 30 Jul 2025 14:25:20 GMT\r\netag: \"688a2b50-e538\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 967b8e52e99e56b7-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1415\u0026min_rtt=29\u0026rtt_var=905\u0026sent=214\u0026recv=141\u0026lost=0\u0026retrans=0\u0026sent_bytes=156594\u0026recv_bytes=13401\u0026delivery_rate=7140671\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=19781\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=2961\u0026inflight_dur=148\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 58680, version 1.28835","md5":"8343047ce3a25cf11fb2aae44c30bddc","sha1":"3ffd6d968932d892d460255ac52a00c6fa24f7d2","sha256":"7975374f814c23aab1fe1766fb8768d6f995c0301134207cf246494270ed5c91","sha512":"c83227039ac3c6742f74ec2deff817b897b2e42bec4c8684ce3b67b9aa0399c385e747ca22d9f36ac14082a46089c434abeca60f9b3ec18d386cbaeae9a090bf","ssdeep":"768:3SlVFJJa1mTbZJqC/ZiNPZUbEdVZQY/OozXWR0irbBpKLn49Gk6rBQjbFcGm9vzs:3Slj21oqCw5Z1Od0b49361Qjby9vId","tlshash":"d74301c9a9390a356d30680c839a47c4696077d972d8cfe8e196fd4be3d7023cdb7869","first_seen":"2024-08-20T11:02:24.643898Z","last_seen":"2026-07-20T16:41:38.435605Z","times_seen":84,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.telegram.org/bot7747311279:AAGGT9-ziURIco-pUYf8hfAhlbz1ZyQz_4s/sendMessage","fqdn":"api.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.220","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:22.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 25 Mar 2025 13:09:41 GMT","end":"Sun, 26 Apr 2026 13:09:41 GMT"},"fingerprint":{"sha1":"8B:AA:E2:A3:48:3C:0E:62:9D:B5:49:3A:BD:47:60:BA:AD:18:AA:8D","sha256":"80:58:CE:C7:28:68:D2:99:42:91:1E:43:06:54:D2:D6:F0:9C:DD:E2:F7:6F:68:A0:8A:EA:0C:15:FB:DB:8C:CD"}}},"request":{"raw":"OPTIONS /bot7747311279:AAGGT9-ziURIco-pUYf8hfAhlbz1ZyQz_4s/sendMessage HTTP/1.1\r\nHost: api.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://nycethereum.com/\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.18.0\r\ndate: Thu, 31 Jul 2025 07:59:22 GMT\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: content-type\r\naccess-control-expose-headers: Content-Length,Content-Type,Date,Server,Connection\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T05:24:32.276041Z","times_seen":17469164,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":222,"dns":14,"connect":18,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/secureproxy.php?e=ping_proxy","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:23.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nycethereum.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _gcl_au=1.1.1730969178.1753948762\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JN77wGkC2GcfVxuCoMi98OCZxkkfTypcaPkIgxI4V3UWUkDlYCJGAMiSJlofT3Au%2BweEBwXZ37M3c%2FfW%2Be7qTaZ%2B6oU9KyHQmYaHTjvgceBGo%2FjOGXw9h56%2BtvCkWhLFE%2FQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 967b8e5eea0756b7-OSL\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1129\u0026min_rtt=29\u0026rtt_var=666\u0026sent=463\u0026recv=180\u0026lost=0\u0026retrans=1\u0026sent_bytes=468034\u0026recv_bytes=15519\u0026delivery_rate=20190982\u0026ss_exit_cwnd=30958\u0026ss_exit_reason=2\u0026cwnd=31385\u0026unsent_bytes=0\u0026cid=4657048f9c948ad2\u0026ts=4860\u0026inflight_dur=260\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-07-22T21:02:33.498872Z","times_seen":8948,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed.bnbchain.org/","fqdn":"bsc-dataseed.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.210.90.9","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:23.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://nycethereum.com/\r\nOrigin: https://nycethereum.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 31 Jul 2025 07:59:24 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T05:24:32.276041Z","times_seen":17469164,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":152,"dns":2,"connect":32,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/static/js/main.bf60f6a5.js","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:19.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /static/js/main.bf60f6a5.js HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:19 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Jul 2025 14:25:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"688a2b4e-637c6\"\r\nexpires: Thu, 31 Jul 2025 19:59:19 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCaEXe4pAEFntiNLIZyYahlU%2B4t%2BsJRszrYTOgXnYgfwX%2BQAaW16QE2WMtidx1pCfI1V%2FHcwbWZ%2F5iU%2FXJiO7E%2BCcbeNi6yWJoVx5%2Fo%3D\"}]}\r\ncf-ray: 967b8e42887d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407494,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"61d50fbfe5b452459106d131df5024e1","sha1":"da7625e4fae8fc38359d217af763a346d16d3db3","sha256":"f50af6973cd45147bdb3506bf4af44407a9f096b53d1eee5b6d19ef401ec0d80","sha512":"2cbcc87f1c2af543e0ffcad4641ded9f8ad36d7f0cff581142222b995f6a71184c52c0bdc6b70de47b2d0041a1e0aea008ca3b31305ea03137df9eecb75b21d1","ssdeep":"6144:vCT4F7lW0Ppy9OUDezc6vPlXVSiFXVDNk/CQ5iyqX9C033599IG0Ej:vN/EmDNk/CQhK93f9Iej","tlshash":"ec842ac87192f4a5abf711a2407f4006f33e5e1eb80d8450f265fcda78b948ea167f69","first_seen":"2025-07-31T07:59:56.769509Z","last_seen":"2025-07-31T07:59:56.769509Z","times_seen":1,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-07-31","alert":"Detects file containing Telegram Bot API","trigger":"nycethereum.com/static/js/main.bf60f6a5.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"nycethereum.com/bootstrap-5.3.0.min.js","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nycethereum.com/","date":"2025-07-31T07:59:19.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET /bootstrap-5.3.0.min.js HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nycethereum.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:19 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Jul 2025 14:24:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"688a2b22-4bef8a\"\r\nexpires: Thu, 31 Jul 2025 19:59:19 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMpsF%2FVzuIp9pKl%2BVJHJ5YWchrdj8cmye7RJFxkjt2lfHmSQdi3ydR%2FUxiLpFQvuuMIBRIAQbdDnkT1Pe1aq%2BjOCXctNnLTmfYlqiRk%3D\"}]}\r\ncf-ray: 967b8e42886e56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4976522,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9f0fa44099ea42f39f958c141ed33369","sha1":"49e95779a7ce25e79c70ff69af080306f2d5a863","sha256":"4929511ee8e7a07fc29f97d6e0cff09e2dd56710b99bdb6be4b254e93a50ae92","sha512":"b149da417354d28fdbb773947df36a45801613742252ca73cf0d0216ac7a9ae122ad6c86baaa492c466704aaa6d3f9940bdfa5e5a253e1dfc7ce3bbfaf535053","ssdeep":"24576:t9FZb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUje5:3F1GkwdNZngk4","tlshash":"3b25cff61ec790cc8a0827758cee5fce94448e27ba8c1469e805dc41f364be1a9d6d7b","first_seen":"2025-07-31T07:59:56.772811Z","last_seen":"2025-07-31T07:59:56.772811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nycethereum.com/","fqdn":"nycethereum.com","domain":"nycethereum.com","tld":"com"},"ip":{"addr":"104.21.80.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-31T07:59:19.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nycethereum.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Jul 2025 13:27:39 GMT","end":"Tue, 28 Oct 2025 14:25:15 GMT"},"fingerprint":{"sha1":"B4:0E:83:73:FF:09:5F:69:96:F0:ED:83:D2:7E:99:7E:72:06:A5:C6","sha256":"B3:77:12:90:79:DB:2B:8C:E3:15:96:12:C5:1A:A4:46:B7:DF:DE:AD:E2:6D:05:8C:AF:30:78:5D:DB:F6:F7:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nycethereum.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 31 Jul 2025 07:59:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Jul 2025 15:10:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjAETHv3oOmNAjZcEztBGYdQkdgIHVhH8XHGUBP81nrCoZlHUyGrsHqIsOQuCmFM7gkGm9NgGp96oUGsGFAQMyxdX2dS%2FD0%2FSSlvOjU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 967b8e407ce656aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":980,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (672)","md5":"89167c9cc5b6edf01a9feb246fa8e2be","sha1":"9a504893ed1dc4a5aea234839e7e7cc3a4809f6e","sha256":"2f8b9a28f9e41a8fba593744f0169898171a736d76ac9fbaf1adcf2c95973aab","sha512":"edc53697b616d79b0536656ce3519ceaea12ce40ef27c32eab38de15b1ccba4fb0b821289033ad2973d38712a50ec3bd5b71a9f01f1ded0c20cc8ccc2e362f30","ssdeep":"","tlshash":"2711d443dc06cc9a42719776ff76f02cc58a7508ea91fc50a8d561594dd4bdbcc15d40","first_seen":"2025-07-31T07:59:56.760788Z","last_seen":"2025-07-31T07:59:56.760788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":36,"dns":2,"connect":1,"send":0,"wait":90,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
