{"report_id":"5dc76df9-6ae1-49e0-9c19-1fb25db46c86","version":0,"status":"done","tags":[],"date":"2026-09-02T15:02:52Z","url":{"schema":"http","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"172.67.197.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"title":"Stake EXTRA Tokens \u0026 Earn Rewards | ExtraFi","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T17:18:09.314369Z","times_seen":18239468,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"172.67.197.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T15:02:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.extrafi.io","ip":{"addr":"172.67.71.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-28","domain_rank":0,"first_seen":"2023-03-20T08:21:40Z","last_seen":"2026-03-28T02:36:07.610624Z","alert_count":0,"request_count":1,"received_data":11019,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"extrafi.digital","ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":15,"request_count":15,"received_data":4493049,"sent_data":7556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-09-02T17:11:31.64653Z","times_seen":93517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-09-02T17:11:31.669456Z","times_seen":3308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/react-store-1.2.2.min.js","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b43f4d7f4e463fc7e7b1696426f67598","sha1":"49ef561128d0fb806e2aa571be8a9313e0abed89","sha256":"ff1b223a088d67f9fb331dc3e310fda22b7a5363a7ec0c32529e8e05002c01c2","sha512":"38b6be180bacb686a38befc1e08554152fc48dd96ff4388c7b22e771ed9fc89b42257e7247e6dcebd19db47979bb8ab3295933a0cc8ade2afac26c182bf99e68","ssdeep":"768:8qUupconzxrLFNzm9+O8jpQZhmYGPJccncIfTShM8IZ5WI7figc/9cpcpBcyIWU7:/zDmp8jqZhChpiz5JKx0ob","tlshash":"e78381e5990b90e48e5621ded437ec05e4684923cdacf1a3ba2cdec2781df66c44763e","size":86357,"data":"","first_seen":"2026-09-02T15:03:10.727409Z","last_seen":"2026-09-02T15:03:10.727409Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-02T17:13:33.974331Z","times_seen":429173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/bdd5594e-2008-4b1c-babc-e1df306ad21d","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c012474a8d0cb99de983eb33bcc1078","sha1":"e3dc0335bc3e2baaa9cf8d1f8256ef0b84ac0409","sha256":"3ff58834183e0068e6d174ab84be2689dab3710f1e9b20d6bae371c6ded3e399","sha512":"d911074364f4db7754ce754267f51edd2f6492891277793cb4d0de8afede0d2174b1884bfa7f13f79ca49aa880fb8c4138605c4abf3997a1ea60b3b7f67898cc","ssdeep":"49152:DUGkwdNZngk26ydwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtdL:T","tlshash":"c8f523866d5be5f6cf5943a4b0ab2d0b28644d134558f1dae385f4c338acfb041ef92a","size":3324138,"data":"","first_seen":"2026-09-02T15:03:10.743243Z","last_seen":"2026-09-02T15:03:10.743243Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-09-02T17:27:06.256688Z","times_seen":3532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-09-02T17:27:06.268373Z","times_seen":3422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"89c643b44e9742319a2aba879d7c00e0","sha1":"9fd8ded76754739344be12e769abd5aacc5399df","sha256":"2c7170990b7a35be2f5e2b7862fab9e63dbeabbe1ab2497f180e8724bcbd6ed2","sha512":"d2a85b39adbc5cbcdf94a289242396f1826f7b09ad958ec63fedbdf7896d594ce6fa61579b926fb405220fca6fa7ecdcfe636113da891692b2525a0fa6ccd845","ssdeep":"49152:0CGkwdNZngk26yxwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtlF:u","tlshash":"2df523466d5ba8f7cf6943a5b0ab2d0b24684d13555ce1dae385f4c2389cfe041ef82e","size":3321635,"data":"","first_seen":"2026-09-02T15:03:10.746721Z","last_seen":"2026-09-02T15:03:10.746721Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/3699aa90-ee6e-4c9f-bb85-295ec4e2ba38","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bccc2a42250d621f7bf75843a6da01d3","sha1":"eca95c31ca2cd4e6b4450248965d8da3e69b22d9","sha256":"9936b38d6b294cda1119f35b7860766d0fb421bd316ce41933e87581d2c98b4f","sha512":"01fb6cb13dbc73b5f1bd18fe38b05c9a9680a1c141450a2c172c261fb5d6444161ee46eeda0553edfbffcc43d226671aefa5c0e61a2b86f9b1f54f9fce56d9ce","ssdeep":"6144:mmk7MotN4H2T/874KicQNod6F1+vRGuXXW6HQv+2tA/U:mmklN4P4RoVHQZcU","tlshash":"7105f851792b46b6ca6bb2bfc063188fc465a402d6cc60c5f88cdd81a79cf61b1d72de","size":795606,"data":"","first_seen":"2026-09-02T15:03:10.747921Z","last_seen":"2026-09-02T15:03:10.747921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-09-02T17:27:06.267588Z","times_seen":3486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-09-02T17:11:31.667107Z","times_seen":3352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a97d6ef5abced657bf5d46b969b239da","sha1":"212f1fc55f39b82d41e88c7628aec3b33d263afc","sha256":"fd3d3ea23ebc1d6ff9299cbe2cc651dfcd714b9be828c8ca2a81540e2f85eaf9","sha512":"6f35480a04c1360f72ae3d1dec34f1357b49fb10a7c7e6de8124e33a87b075127206686daa9145d40be27c4dd761f078d085a1f2538567c714ede67f66122c7c","ssdeep":"192:7mmQewTVPeY8DpuTM3kpVg9LuKXgnudSWXLPKPIlH4SjmnUYsCc0V02Y2pE2XuCh:7mmQewTYY8Fb3kjgTtLPKPIJgcx0V02l","tlshash":"8732c5b06a242ad911d604e20ace4f5d74f591611179dc249b3ef28a2fec3cab7d37a1","size":11308,"data":"","first_seen":"2025-08-01T04:17:54.885074Z","last_seen":"2026-09-02T17:44:26.479088Z","times_seen":1652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-09-02T17:27:06.251472Z","times_seen":3571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"extrafi.digital/0bf5f3261fc8f901fe3b6085105052ba9722bf5d.svg","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.976Z","timestamp":1788361328976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /0bf5f3261fc8f901fe3b6085105052ba9722bf5d.svg HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/index-DsX3WgBd.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M4a0XdgpAuMyJrg1%2BtsvQq38YMydKcBbpLQ0bpSiCUdzuzFS5txbIOFjFuL0ppGvfHUdAx7UrywrtSdC6g4ACb2SowrcnpN87wVBbFhu14pc4tw%2BKhTEpCIa2K%2FItCu8lhE%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=4,i\r\nage: 273\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a0fd6bf-67e\"\r\ncf-ray: a34d64e21c7cb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1662,"size_decoded":1871,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bed0fc747bf531a54b34e12245ff7074","sha1":"0bf5f3261fc8f901fe3b6085105052ba9722bf5d","sha256":"ca2995f6ce182d5c7fb2af81f64f4fae4435c55b797218d04ff988a9710a1b80","sha512":"57add99ba0bdd08be9333e20a93d4a9ba076161229146d51ac9cc2b49fbcfb6a5bb22159b80e84b067735f0fd8cdc5bf004c5de453e1c12425357587e3be4aac","ssdeep":"","tlshash":"bc3164aea3f01870e00983d64eb87cab349fe45afac9835c61b6271bb555df381215e0","first_seen":"2026-03-28T02:36:14.335908Z","last_seen":"2026-09-02T15:03:10.723717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T15:02:08.243Z","timestamp":1788361328243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:08 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nage: 273\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCP70JiRE%2FMGDDgjrV2Y9VbTcVRISVfKMX0pKGCuJuDxOniNJ%2BAUjKsotUq3VSQQOqqI3yr9qLIb9Mej7B3fOuv62%2BR8h7rAyJa%2BCHNIahdbPngUlVU2oxcwVt%2BPrr5KbaQ%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a34d64ddbc31b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":303033,"size_decoded":35367,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"c25ab352c548e3e71a00eb31c00d762e","sha1":"a7ba055837e513dcd993936da35694f25462efde","sha256":"2be580ab6165ac8cef0cee6881accf5afb36d2d6b057857c5115615665c86d67","sha512":"e7f296ac9763adeb5846f33970adc40cfb224c6aaa193dc1e2db9de7d43ae3f51419fe6c8d0439fc5d8f8b18f2183d025e7cbe654a260444b77978fa0056b479","ssdeep":"3072:ylomMW4bVfFNEeQubiso6IsJ3mn7GdtT8OF:ylomMW4bVfFNEeQubish3mn7Gf8OF","tlshash":"79543b048b6326b7b102d3b427a7b6ab2274f113d59ec93c3a8df1585f0960c95a7f36","first_seen":"2026-09-02T15:03:10.725563Z","last_seen":"2026-09-02T15:03:10.725563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":5,"connect":26,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/react-store-1.2.2.min.js","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.492Z","timestamp":1788361328492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /react-store-1.2.2.min.js HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:08 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\netag: W/\"6a0fd6bf-15155\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 273\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aK3GTaQLolqhukaBbOqfG%2FyB55p7%2BeMtLUgOX4s%2FSC6ZMk%2BktdU21x7rbr2k4WXGzvidiAmp6p6XtyKpPPDmgLCNeFV2pR5nH0FYHsYSN5pcI%2BmL7iG5zZihNJ8ey1eqsng%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a34d64df1c4bb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86357,"size_decoded":26607,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b43f4d7f4e463fc7e7b1696426f67598","sha1":"49ef561128d0fb806e2aa571be8a9313e0abed89","sha256":"ff1b223a088d67f9fb331dc3e310fda22b7a5363a7ec0c32529e8e05002c01c2","sha512":"38b6be180bacb686a38befc1e08554152fc48dd96ff4388c7b22e771ed9fc89b42257e7247e6dcebd19db47979bb8ab3295933a0cc8ade2afac26c182bf99e68","ssdeep":"768:8qUupconzxrLFNzm9+O8jpQZhmYGPJccncIfTShM8IZ5WI7figc/9cpcpBcyIWU7:/zDmp8jqZhChpiz5JKx0ob","tlshash":"e78381e5990b90e48e5621ded437ec05e4684923cdacf1a3ba2cdec2781df66c44763e","first_seen":"2026-09-02T15:03:10.727409Z","last_seen":"2026-09-02T15:03:10.727409Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/iconfont-Dt5Eq51M.woff2","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.969Z","timestamp":1788361328969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /iconfont-Dt5Eq51M.woff2 HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/index-DsX3WgBd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:09 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\netag: \"6a0fd6bf-22f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 273\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YH78Xhb4Y2GGO%2Bgj4ELu0oIjEIDl%2Fuzgw36QCVO1zjc0EUrt2qjkA2VXfcmTC5VogDJDBsmRE3l6S%2FXGb5icDfkv20hR1uCmx%2F%2Fhtoyb1HIRZAwHA9zl%2BLWesPHNPpJB8Ng%3D\"}]}\r\ncf-ray: a34d64e21c77b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8944\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8944,"size_decoded":9887,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8944, version 1.0","md5":"dd2f17b03a98bcd06822aca15fab14ea","sha1":"afda9283d3580f5119fd8e0a25db9cb316579a01","sha256":"9416cf13f535be14036950f6f6e37ea563cf7b355626ca9228f3dde00e270e4f","sha512":"c322f4867bb6dfebc39341837b96c05067732e75508b7d0852c25904ece7d64a71f465d56d12cd93911557ff92e2c4b4d2c011cdd2c8579374f989abd946b2e5","ssdeep":"192:Y95dumE7i9xgfupxFU4hkJ4WZAsXXFhybpV9/yaw+76S:Sqb7iMupxFlhjWGwFM1V9/MK","tlshash":"6902af5ef56dcf76c3e5a2a9887ecd1b62a5ebd4e4ad0c11b012148c0bce15612ee3dc","first_seen":"2026-09-02T15:03:10.728688Z","last_seen":"2026-09-02T15:03:10.728688Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/Roboto-Bold-BKtbn9Wi.ttf","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.972Z","timestamp":1788361328972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /Roboto-Bold-BKtbn9Wi.ttf HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/index-DsX3WgBd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:09 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\netag: \"6a0fd6bf-28da8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 273\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLUiYb4IpgpLi1n5HF%2B4nkIrsg9jfHjNToFZjt%2B2KQKbyz0id6jC6zulU4UVpGO4Ca7Aq5qyoDbl1kY8i%2F9l5%2F6bbeEnQJi4dAOH3YV5VfE8sQsutqIz9Fv%2FrGKcX3H9DIs%3D\"}]}\r\ncf-ray: a34d64e21c7bb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 167336\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":167336,"size_decoded":168296,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"b8e42971dec8d49207a8c8e2b919a6ac","sha1":"62442a18a9fe9457c1afeabf683d263a691b7798","sha256":"ec685a46105296fe46c8744da4a11cf8118ba6c11271941766f7a546df6aa7c7","sha512":"3bd40ac788d44626fd640ec67ef04ab0364816b5e8c831f2077bff8805cfe6890ca29274b476f933f6e96ddaa16f4e2f3f66c616dff7cd88cdcaff7dae8ca5e5","ssdeep":"3072:VBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09PJ4X4HXYXXXXXXLnqT:uX6XiuMPT/eK9cnfST80/","tlshash":"29f3f501d2479629cac6b2787c3cd3be1970e429bc6ba11735e4af3149c8945ec69bfc","first_seen":"2023-04-11T21:48:33Z","last_seen":"2026-09-02T15:03:10.729864Z","times_seen":6410,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.494Z","timestamp":1788361328494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 04 Sep 2026 15:02:08 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AssGi%2F6TG9tnB%2ByPn2cwsigu6Y1sKECY7rR92PUiWvzsOPEejO5wzRZRH4cnktfRWmu5vlwGIRW2EzhoFgMV2lxMrJZOse%2F1n%2BkSeGzIQgkJzex6%2BPPJZuIZOSER11e1tPM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 02 Sep 2026 15:02:08 GMT\r\nserver: cloudflare\r\ncf-ray: a34d64df1c4cb509-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-02T17:13:33.974331Z","times_seen":429173,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.extrafi.io/logo512x512.png","fqdn":"app.extrafi.io","domain":"extrafi.io","tld":"io"},"ip":{"addr":"172.67.71.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.966Z","timestamp":1788361328966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 23:47:30 GMT","end":"Wed, 11 Nov 2026 00:47:17 GMT"},"fingerprint":{"sha1":"01:D4:30:42:5A:D6:E5:21:71:1C:50:C8:E1:A0:52:A2:60:B9:CE:50","sha256":"EC:20:18:A4:D0:0E:0A:15:60:9C:E1:06:DF:B9:74:2D:8B:6E:E4:88:DE:2B:30:41:EC:00:F4:CE:22:7D:BB:1E"}}},"request":{"raw":"GET /logo512x512.png HTTP/1.1\r\nHost: app.extrafi.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 15:02:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 9921\r\nset-cookie: AWSALB=fq47nrLqAEpIfAtjZcslFl4YlSXUn5HtIafclid6DpvhaW6SM/nfdbHGJXKbUaDGxPMGA/NuKCtFBRlL2zjVMJcG8hm9aEY4tsmbLahip9VzaCpejZQDlNGn8Tyo; Expires=Wed, 09 Sep 2026 15:02:09 GMT; Path=/\nAWSALBCORS=fq47nrLqAEpIfAtjZcslFl4YlSXUn5HtIafclid6DpvhaW6SM/nfdbHGJXKbUaDGxPMGA/NuKCtFBRlL2zjVMJcG8hm9aEY4tsmbLahip9VzaCpejZQDlNGn8Tyo; Expires=Wed, 09 Sep 2026 15:02:09 GMT; Path=/; SameSite=None; Secure\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Aug 2026 03:20:13 GMT\r\netag: \"6a79436d-26c1\"\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdMVfWot%2FthsSwPekZ11HecVNrHiyUJfTiGAbo4PBscI3rh3zA1mIr%2BU0T0qWwYfQX0RnHa3ZQ%2BwebKyyk0yHwjcoiITPwnHk4%2B6272h3PFek3HHQEnPn0YfOzdRYOIN\"}]}\r\ncf-ray: a34d64e23a408deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"fq47nrLqAEpIfAtjZcslFl4YlSXUn5HtIafclid6DpvhaW6SM/nfdbHGJXKbUaDGxPMGA/NuKCtFBRlL2zjVMJcG8hm9aEY4tsmbLahip9VzaCpejZQDlNGn8Tyo","quoted":false,"path":"/","expires":"2026-09-09T15:02:09Z","raw_expires":"Wed, 09 Sep 2026 15:02:09 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=fq47nrLqAEpIfAtjZcslFl4YlSXUn5HtIafclid6DpvhaW6SM/nfdbHGJXKbUaDGxPMGA/NuKCtFBRlL2zjVMJcG8hm9aEY4tsmbLahip9VzaCpejZQDlNGn8Tyo; Expires=Wed, 09 Sep 2026 15:02:09 GMT; Path=/"},{"name":"AWSALBCORS","value":"fq47nrLqAEpIfAtjZcslFl4YlSXUn5HtIafclid6DpvhaW6SM/nfdbHGJXKbUaDGxPMGA/NuKCtFBRlL2zjVMJcG8hm9aEY4tsmbLahip9VzaCpejZQDlNGn8Tyo","quoted":false,"path":"/","expires":"2026-09-09T15:02:09Z","raw_expires":"Wed, 09 Sep 2026 15:02:09 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=fq47nrLqAEpIfAtjZcslFl4YlSXUn5HtIafclid6DpvhaW6SM/nfdbHGJXKbUaDGxPMGA/NuKCtFBRlL2zjVMJcG8hm9aEY4tsmbLahip9VzaCpejZQDlNGn8Tyo; Expires=Wed, 09 Sep 2026 15:02:09 GMT; Path=/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9921,"size_decoded":11019,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e6c54616fa2768b0e0518ef690ab00d2","sha1":"d9aa97239b5f0e2eb23ffe188764d1386cc80376","sha256":"57c7663fa4845a4831f4de346ad25e4f3093762ea7d8c9f379b36efff9c932b9","sha512":"cd3f986355564d92ec7fdabe28647ab1ae56cd9f896babcc2c11b475d1d0503c97c929740173ee037f9178f8db699c7b9c18b4d10187b9410051fd6a5e5894d4","ssdeep":"192:nSa4MlyE5yp6lOZI+uyOeWsqHr2VLKRUlq1TvJZkUj:Sa4Mln5ypwOufyOeeKj6XkUj","tlshash":"d622a0573fdde908c16d967de5a262c8c81e1a81400e1316c3fe11fd6a36577d8684d7","first_seen":"2026-03-28T02:36:14.358239Z","last_seen":"2026-09-02T15:03:10.731005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":12,"connect":1,"send":0,"wait":210,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/logo512x512.png","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.967Z","timestamp":1788361328967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /logo512x512.png HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\netag: \"6a0fd6bf-26c1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 273\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucJCtGCscMOBwtUH5fbtaVI%2B%2BiUB9tqHVaqcBv7l441PQnQiJq4keeOcqw8EeNq1OKJwxhWSMNL9Vc1AwLOErI7NyhGgUtKwJjncifQO8tOFJH7I9IhgGHbkbBZivUoKfgc%3D\"}]}\r\ncf-ray: a34d64e20c76b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9921\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9921,"size_decoded":10855,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e6c54616fa2768b0e0518ef690ab00d2","sha1":"d9aa97239b5f0e2eb23ffe188764d1386cc80376","sha256":"57c7663fa4845a4831f4de346ad25e4f3093762ea7d8c9f379b36efff9c932b9","sha512":"cd3f986355564d92ec7fdabe28647ab1ae56cd9f896babcc2c11b475d1d0503c97c929740173ee037f9178f8db699c7b9c18b4d10187b9410051fd6a5e5894d4","ssdeep":"192:nSa4MlyE5yp6lOZI+uyOeWsqHr2VLKRUlq1TvJZkUj:Sa4Mln5ypwOufyOeeKj6XkUj","tlshash":"d622a0573fdde908c16d967de5a262c8c81e1a81400e1316c3fe11fd6a36577d8684d7","first_seen":"2026-03-28T02:36:14.358239Z","last_seen":"2026-09-02T15:03:10.731005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/Roboto-Medium-CFKDKRMh.ttf","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.973Z","timestamp":1788361328973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /Roboto-Medium-CFKDKRMh.ttf HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/index-DsX3WgBd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:09 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\netag: \"6a0fd6bf-292c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 273\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GeSOYJ5NMuVX4jb6%2FGVKcIPPbzev%2FpEVmSn7tBM8rG%2F4X9P%2BCl%2BVmSPm50AmvaHH0CWVGo8kFljKuC6Obe8Q21PM0Fm0eayd%2Fgnnt4qbTJzfcgsPwS1o27Z%2F5uX3Ub4RqR8%3D\"}]}\r\ncf-ray: a34d64e21c79b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168644\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168644,"size_decoded":169606,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.137; 2017Roboto-Med","md5":"68ea4734cf86bd544650aee05137d7bb","sha1":"3c6a09fcc6a454924c81af7dff94fc6d399ed79b","sha256":"9d0d55a303bfd13b79a87721f65185e93f235e2d77fe398b2dca67ac519915f5","sha512":"5d55a41b845f3a3ae9b08cee5258348dfd83dac5f0a0e48159cd85c141c614a02f8f474fa683d2bfbc451d49dd3b749820662d403b2e3fd3f16a242eaca64115","ssdeep":"3072:wqmtn5wkex8r6Qym7KCkygAKuXylCC9ptSUXl8j/6afWRCgqdhASD/80/:n25wklN7T3QtSUXz7XfST80/","tlshash":"73f3d701d241bf25cac6b6787c7c93be4cb5e41abc4aa52730d9ab3159c8805ec58bfd","first_seen":"2023-04-05T23:29:00Z","last_seen":"2026-09-02T15:03:10.732239Z","times_seen":2140,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/opencover-Dwzd11IG.png","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.977Z","timestamp":1788361328977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /opencover-Dwzd11IG.png HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/index-DsX3WgBd.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:09 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\netag: \"6a0fd6bf-3001\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 273\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLKlzJ5diLZTHE20oYzzTehxQyFFEDxwwwa0qyFQ21xkFAJiMPS%2FwUB4pu7qt2Y608PnBqZhXBKia6jfu4x9Gfzps5PiB3PqbcNPDQCwxLz05UU1YJ7IDI7s539iotLJfYM%3D\"}]}\r\ncf-ray: a34d64e21c7db509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12289\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12289,"size_decoded":13219,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"fbaa669ae53c3ffb585ec76aebaa785e","sha1":"7afae6149c9b6611aeb13aa3b37d7690bff60b55","sha256":"ff5e4b1b31fcefed4adc1462c86f4d6a87a97c7befb401d5ca972f9665734619","sha512":"d64baa518b5b17794ac56889b93c1f6fe72584096b7bc0e882c0195cfd951581290c35aed710c06fbcdf77118f73586c441e830259833f242d4f683100b6fe67","ssdeep":"192:nrWJQZu4UVQ/FWefaO6L6A9JNXpi2gT4SLuri7uH9tO7ohooooooI:rnuMdLb6L6A9J9YV4NriCHTzg","tlshash":"16429fbf9e0b4f809b20c8a67c11d7ff267c68a33ea216cf98621bdb01c9953d5e4514","first_seen":"2026-03-28T02:36:14.371716Z","last_seen":"2026-09-02T15:03:10.732753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/secureproxy?e=jscdn/getFile","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.980Z","timestamp":1788361328980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://extrafi.digital/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://extrafi.digital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"favuqoms3qu8iyxpt641\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHkh7TmNiKGg4r%2BRfWG%2BddEvTy4SsjC4vaQUNHPtl2GGijThJRZ3ZvvFyjun5sLuBx0zgtESAzOaEufxZSG3yROUqQxcGB1YdZXxz3i04hOdmqRR%2BZQxl2e%2BiRYOY6QDJi1gjrM%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: a34d64e22c80b509-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3324138,"size_decoded":2558074,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"db8d7df1ffb0b9ad2ddab4e836a40a43","sha1":"ecc93f5a88377054664540fcbc582fa271c5a0ae","sha256":"3568a06d1decb1be00b1951e22239feab09e15efe3c5811e659ac816b74c3e49","sha512":"255caa18c86524f04480fd9a214b8b24aeb047413976676a50a0d345a3c133940be14d654310cd8ff145b57036bf7227b3cc61cad1b29c66e6d9150ba630e204","ssdeep":"24576:cmO+0b/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeKiz/eygT:DUGkwdNZngk26yu","tlshash":"612523862f9fe4e5df6d5bedf06b2c0e64109e471144a1a5e385e8c33a68fb040de52b","first_seen":"2026-09-02T15:03:10.733877Z","last_seen":"2026-09-02T15:03:10.733877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":582,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/index-BJrDVzkN.css","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.491Z","timestamp":1788361328491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /index-BJrDVzkN.css HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:08 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\netag: W/\"6a0fd6bf-284\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 273\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pJx3XZRAOuDLAGfJTozq7usltNSr85lXRPOyN7pvaBpNN0vGHERBY9tY%2Bo4PPUO%2BF4krxT2UgV%2F0mbms86IM6QFjdSmAdApR%2B1xaErdnLO3xuW0sVBIH8UIT2%2B4X59Sg17k%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a34d64df1c4ab509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":644,"size_decoded":1272,"mime_type":"text/css","magic":"ASCII text, with very long lines (643)","md5":"798825090faf6d2de1e29895195492a2","sha1":"0aba0a6ff970fe88f0d33fc676039578331922db","sha256":"287f840941b1e869fafc2e7afb702ca76671a51098cfb0bd65058cd652449984","sha512":"53a12165e6727703ed53b4edda40161f469cfd02d3733d1b8f72f314690571180826a853181b8c92ad8b77d13ae190b01179526954822346b5bdd3c9f6033bc1","ssdeep":"","tlshash":"5ff02b111875710891aa5cfe7cd40c8b993851177a8b81eacae6935dd19c5c96733648","first_seen":"2026-09-02T15:03:10.734973Z","last_seen":"2026-09-02T15:03:10.734973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/index-DsX3WgBd.css","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.490Z","timestamp":1788361328490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /index-DsX3WgBd.css HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:08 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\netag: W/\"6a0fd6bf-35b0a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 273\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xTeA9CtuEvcVR4qJmjk3%2F2bad8oLKvRQseUAU2wWRbBsYxWgLUE%2B%2B91i80aFVB%2FaOz0bCvsxv22vvgg2S7q9NjbsZaH%2F%2F6qHgQugP%2Fu%2BGRu%2FY83GBhLzW3PXD7a%2BIkFTCVM%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a34d64df1c49b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219914,"size_decoded":46364,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65416), with no line terminators","md5":"b3467371143224a274680748b04955d2","sha1":"76a2a4f8ed4adc37fe4749d41926cd37fb54fb43","sha256":"fd0c135627c1a6a219d0b0fc00104e3d05eb7bb9af7cf1824bf227dbb8ece51b","sha512":"4c58f024a3ec6733d8385cacf9f9ed7d9debfa3b15609c9c69e9510cdfac9f4eafedfc3943f274314b8527e41a36f79afada68ec4e9c38cb10a845bb8feb9ca2","ssdeep":"6144:atqLfDvei1gCrYYgzQJUEZ+4mnCWrgTbXICQWt/5:TDvei1gCr8B4CCbXp5","tlshash":"8b24d8216b55253eb527e33bb0c865ec3526a913c73703eea99236a9cbce3d11273744","first_seen":"2026-09-02T15:03:10.736261Z","last_seen":"2026-09-02T15:03:10.736261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/css2.css","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.549Z","timestamp":1788361328549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/index-DsX3WgBd.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:08 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\netag: W/\"6a0fd6bf-773\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 273\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06Hgjw0LmycPxU3Mb6HiFSwegLhroMLPmtUw16REkuR3vlBcSLPB4FONb7zBbtDtxES4Hkrv8VqLzMVn6wN3viPyNtbJImi2r%2Bb0i%2B%2FQN0uQVxRxFbTJzV%2FYo5gNnoJSx30%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a34d64df7c52b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1907,"size_decoded":1475,"mime_type":"text/css","magic":"ASCII text","md5":"02b50106c3334003b2528242dc4bfdd1","sha1":"4d988a986e5643d37c1dfb09767b2529bbe72f70","sha256":"6be796b03b76bbe6ce9e317d438714573462fa3e6d68d994e386bc3053597e52","sha512":"078088af54550ec59f08e6bff93b0c4aaa2d04d3222c0bc204a90f84ac6120f181c80e5df88238d13bc42ceff583b0d69eb5b6ceea5c2015a13608d150ed2661","ssdeep":"","tlshash":"6e415590046b9400eb872cd277cf7f366d9da244a045ca795ffe1898acded2213a5b4d","first_seen":"2026-09-02T15:03:10.737441Z","last_seen":"2026-09-02T15:03:10.737441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/Roboto-Regular-BHeBnKzs.ttf","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.970Z","timestamp":1788361328970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /Roboto-Regular-BHeBnKzs.ttf HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/index-DsX3WgBd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:09 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\netag: \"6a0fd6bf-29144\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 273\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7XUn%2BRYChSmEzuG0wS5rQ%2B7HDudGnzhWnpp1NLa%2BSOEjRG%2Fq6PvVBfhKnMnwr0PRKmSlpY7qMZpxtUp6xnDe%2BfDpVMhHjdgzw%2Bvxnv4tF4HWpqDyEImU%2FKTYe%2FgNnLkKjaQ%3D\"}]}\r\ncf-ray: a34d64e21c78b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168260,"size_decoded":169224,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"8a36205bd9b83e03af0591a004bc97f4","sha1":"56c5c0d38bde4c1f1549dda43db37b09c608aad3","sha256":"4e147ab64b9fdf6d89d01f6b8c3ca0b3cddc59d608a8e2218f9a2504b5c98e14","sha512":"e96b43b0ca3fd7775d75a702f44cd1b0dfd325e1db317f7cba84efdf572571fe7594068f9132a937251aab8bd1f68783213677d4953aca197195fbe5db1f90d7","ssdeep":"3072:5y2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0yH4yDuNOIOU7og2NE/:xOmCeu+bqPeHr0WUMxNE/","tlshash":"83f3d601d642aa19c6d6b2787c7cb3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-07T15:31:36Z","last_seen":"2026-09-02T17:29:57.601436Z","times_seen":11010,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extrafi.digital/extrafi_logo_blue_dark-C6QKxUlT.svg","fqdn":"extrafi.digital","domain":"extrafi.digital","tld":"digital"},"ip":{"addr":"104.21.90.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extrafi.digital/","date":"2026-09-02T15:02:08.975Z","timestamp":1788361328975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"extrafi.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 05:58:06 GMT","end":"Sun, 18 Oct 2026 05:58:05 GMT"},"fingerprint":{"sha1":"6E:F1:77:52:2E:BF:9F:AB:D1:B6:55:B1:CC:08:58:AD:F7:84:85:B4","sha256":"FA:04:AF:95:32:61:3C:E8:74:8D:EB:9D:CC:C8:D0:8A:EF:1A:45:13:51:01:6B:AF:53:D3:3A:10:E5:9C:4C:E3"}}},"request":{"raw":"GET /extrafi_logo_blue_dark-C6QKxUlT.svg HTTP/1.1\r\nHost: extrafi.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://extrafi.digital/index-DsX3WgBd.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 15:02:09 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7K3c0rMzha0pAC6RuUWUT7VssAJ35MhuXyg%2FwrTty%2BT4AAF0Wd9dCul450zH%2Bk7kHz8tLRGcc%2B%2BqxHmzw8bFY3WYj52yGNB3pnnWez49SJ6C7UFFgyv8pim%2FIlLwKlvS7Wg%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Fri, 22 May 2026 04:08:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=4,i\r\nage: 273\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a0fd6bf-1216\"\r\ncf-ray: a34d64e21c7ab509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4630,"size_decoded":2726,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d474232377f89e66376611f0ca6c5c78","sha1":"54d0fabba67ee45a50baaa18b210991738dbb23d","sha256":"8e76b9918e0ec3f6bee6862cd4ccad16b764cbfafe8191fca86f16c217075967","sha512":"e4fc9316b5202dcdc009d0e390fb4118526877151e5ee3ac76781891159f9c0666907d24e29c16472bddb722aeb95b6900bca3cd4696605a93779b9decc940fb","ssdeep":"96:dy3ZkhoncZtLmwLqV03UBZ9Kl8xLqbIWCZ+Q+qJn:dypkhocRR3UBZ9Kl8haD6JZ","tlshash":"30a156ce7fbcc0e2e483d2fefa0dc869250b24e659c64562c3a4bf0d74686d61d5a9c4","first_seen":"2026-09-02T15:03:10.739006Z","last_seen":"2026-09-02T15:03:10.739006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"extrafi.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}