{"report_id":"6b59d25a-0fa8-4f7c-a213-0ddf987a4664","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-09-11T15:35:38Z","url":{"schema":"http","addr":"dapp-aic.pages.dev","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.176","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dapp-aic.pages.dev/","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"title":"SafePal Starter"},"submit":{"url":{"schema":"http","addr":"dapp-aic.pages.dev","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.176","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-16T15:35:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T15:35:17Z","timestamp":1757604917,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":35236,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-09-11T15:35:17.593460+0000\",\"flow_id\":993167905516371,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35236,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"dapp-aic.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":920,\"bytes_toclient\":3538,\"start\":\"2025-09-11T15:35:17.584531+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-11","alert":"Detects file containing Telegram Bot API","trigger":"dapp-aic.pages.dev/app.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"dapp-aic.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-09-11T15:35:38.89196Z","last_seen":"2025-09-11T15:35:38.89196Z","alert_count":2,"request_count":7,"received_data":97603,"sent_data":3116,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"dapp-aic.pages.dev/app.js","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"77949f968d2375c4be079805a53a1cef","sha1":"d57e528763e632e9275698b1bef3f94d49e8c21b","sha256":"6eb7229b7f2467fe7b33a998b34617aa1e378f12cc061c076f8f0d4bee9bf208","sha512":"e770c16cdc9f1ad712a3dc419f98ba4ac449385f97e8e9ff755b157301ea0c379e159cc88e1f134603a0a75f309b97f243505fa1a4f30de9cce88fbb57600728","size":21261,"token":"5677710241:AAGNZEWBd8dSleFuoEEk-CMCHK5AgYLApdQ","is_revoked":false,"bot":{"token":"5677710241:AAGNZEWBd8dSleFuoEEk-CMCHK5AgYLApdQ","user_id":"5677710241","username":"SpicyChickenCheesySwipesBot","first_name":"Spicy Chicken Cheesy Swipes","last_name":"","chat":{"chat_id":"-4974345429","title":"1","type":"group","bot_is":"member","total_users":3,"active_members":null,"admins":[{"user_id":1454555206,"username":"smthbeautifoul","first_name":"Ромчік","last_name":"","is_bot":false}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T15:35:17Z","timestamp":1757604917,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.7","port":35236,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-09-11T15:35:17.593460+0000\",\"flow_id\":993167905516371,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35236,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"dapp-aic.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":920,\"bytes_toclient\":3538,\"start\":\"2025-09-11T15:35:17.584531+0000\"}}"}]}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"dapp-aic.pages.dev/","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"703b05fb3750b2bea57ae9e10150ec2a","sha1":"a3b6c7c9bc914e27c62c23d7ca60623085e1f114","sha256":"2c1d1ef3787aace1d25bfefd82dfdd37afc2df581794811bf992e8c4ba40505f","sha512":"a0a8bb9025d0c7578d2028cdbe3357afe19a0b614bcdb5c2ba1840291f3afc4a184fcda604c827bc9217c86796f58e25df26f5dd062782012c6841aba23807f5","ssdeep":"","tlshash":"5bf04f8e8ffa8c370aa3702e1d0b4206223b46074085d954bfad57a25f82534d6abad8","size":480,"data":"","first_seen":"2025-09-11T15:35:41.14862Z","last_seen":"2025-09-11T15:58:37.219823Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic.pages.dev/bip39-wordlist.js","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69e1b1d6339a22882503ab3c492b950a","sha1":"0755d969c84560d066dfb7e82304b544bab91123","sha256":"d59ef1cc395b421baa5159917c2138342d2fe5c9f0eea838d7845ee802d6969c","sha512":"1051c1f1695902c89daf11cb851f3fe145ec56842e0f2f708d38d886235be55535180132d93e9e8a76ea54efab98073f25c0f9ddf01bbe69ec05cec5a4e3c3ab","ssdeep":"384:wI+5dcf49aVneJ+p8KFgZVGfITv9uRJc8NBkw93f2EH7JsoC7IChoXCKuYgebYvb:v4uYwtf2G7u2YebYva4ZGat","tlshash":"6e928e3cf617051b04e2d5583cd50582bba88b1a4386be1e579e826437cec3eb85f7ad","size":19654,"data":"","first_seen":"2025-09-11T15:35:41.146425Z","last_seen":"2025-09-11T15:58:37.213514Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic.pages.dev/app.js","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77949f968d2375c4be079805a53a1cef","sha1":"d57e528763e632e9275698b1bef3f94d49e8c21b","sha256":"6eb7229b7f2467fe7b33a998b34617aa1e378f12cc061c076f8f0d4bee9bf208","sha512":"e770c16cdc9f1ad712a3dc419f98ba4ac449385f97e8e9ff755b157301ea0c379e159cc88e1f134603a0a75f309b97f243505fa1a4f30de9cce88fbb57600728","ssdeep":"384:FwO876HHhH4vDL0lu8EUj0LFtAhkOZl/DVrGKsmyI3:FBy7QsUjotAhBRTsY","tlshash":"bda2736825fb14314a2361bfab9f610a3232401b3445ee193e5cc7551fc1b74abb6fea","size":21261,"data":"","first_seen":"2025-09-11T15:35:41.147468Z","last_seen":"2025-09-11T15:58:37.215692Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-11","alert":"Detects file containing Telegram Bot API","trigger":"dapp-aic.pages.dev/app.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dapp-aic.pages.dev/icons/apple-touch-icon.png","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp-aic.pages.dev/","date":"2025-09-11T15:35:18.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 06:05:52 GMT","end":"Mon, 01 Dec 2025 07:04:29 GMT"},"fingerprint":{"sha1":"34:08:44:10:D4:D9:22:19:35:2A:A9:71:38:FB:1B:C4:11:83:78:5A","sha256":"65:7A:4F:7C:13:DF:10:2F:B2:BE:03:6B:28:9C:D5:F3:07:3A:9B:BC:B7:74:4C:61:3F:62:50:F4:EA:F2:85:E7"}}},"request":{"raw":"GET /icons/apple-touch-icon.png HTTP/1.1\r\nHost: dapp-aic.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:35:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 4026\r\ncf-ray: 97d83bf25c2a0afa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0ce51829ed14209d5291a7b701ba9328\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9ribV5r60DXXBZSubg%2F7Wq98fBonX15xG6fRrP1ycyqhDFcysyTrZuBwdpNKMMgRwr7%2Bz5GCUVmdD%2BKtbCGWsgls%2FiQJ5IeTlpo4T85eP%2FIErEOYxIPe4dXllXaGbt2JyPTLFK4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4594\u0026min_rtt=1452\u0026rtt_var=3202\u0026sent=46\u0026recv=14\u0026lost=0\u0026retrans=0\u0026sent_bytes=36485\u0026recv_bytes=2601\u0026delivery_rate=6398818\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=61ea2ac1c7b8e3ea\u0026ts=348\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"aac6c392db98d7c2ccc364b9346916d6","sha1":"58549168b34f7173fb07d1c1dc33410bd26c76e6","sha256":"97e32f8c2b01b651105c96f51027a1bb09258e86725b57c97207e2a8b4284a39","sha512":"154465dfc7b6ec4a8ac37ba4f3856d463a8df8dddc59cafc16c4d6dfa5600c69bd304ce8f8d50c387b80c6f9425c064e46d5854450cc6e9b84878b594ae2063b","ssdeep":"","tlshash":"338108d4eb81bc1bf8b4614fc494f0964a08335054f84bd260d228bc2e07dea8ab3e65","first_seen":"2025-09-11T15:35:41.139648Z","last_seen":"2025-09-11T15:58:37.218221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic.pages.dev/favicon.ico","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp-aic.pages.dev/","date":"2025-09-11T15:35:18.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 06:05:52 GMT","end":"Mon, 01 Dec 2025 07:04:29 GMT"},"fingerprint":{"sha1":"34:08:44:10:D4:D9:22:19:35:2A:A9:71:38:FB:1B:C4:11:83:78:5A","sha256":"65:7A:4F:7C:13:DF:10:2F:B2:BE:03:6B:28:9C:D5:F3:07:3A:9B:BC:B7:74:4C:61:3F:62:50:F4:EA:F2:85:E7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dapp-aic.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:35:18 GMT\r\ncontent-type: null\r\ncontent-length: 15406\r\ncf-ray: 97d83bf25c2b0afa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"deea3d35ee4de4d60d445e3a4f2ac644\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ny9SIza13twSoam9%2BrX4ts34EaZQeKSoXEVm4s4SxhrBAj91hX9ttDDFqze7NENN2qnYW70lIvY1QtEB1Am3iaoCUKYxv4dsd2ncfgS57j0tWgQ3LiIpllXQSvEeNq9%2F3Iy%2FeJE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4251\u0026min_rtt=1452\u0026rtt_var=3087\u0026sent=51\u0026recv=15\u0026lost=0\u0026retrans=0\u0026sent_bytes=41350\u0026recv_bytes=2645\u0026delivery_rate=6398818\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=61ea2ac1c7b8e3ea\u0026ts=350\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3b468ec40e5baba25b38387ba9bdfde7","sha1":"322d14894a93143d3cf90c941fc97b882438ced3","sha256":"d2620726769cc36a7b5e21733dcbeeb710e20d9ea6a4360f288feb48e0d434c5","sha512":"d471894a2a3efc9fa1adbcf8af32b1ca5b634ccf924d09b2cdac476eb048b0186706a556995cab86d35f14c0d4e0632567d3d8e759c1734e73b172b7b55c6724","ssdeep":"24:nG4l4PjsDkn/pbBMS7709EN3wE3m2frsnDr/r/r/J9gobbWLw3M/fYzBBd7aix0p:lujsDEp6GfLAnDDDDTgWlB7LxGcnwD","tlshash":"5c62a183a6a3d88ddcc8eb7440214b765e769f8aa6915a35743fb03213b7442ecb3831","first_seen":"2025-09-11T15:35:41.141132Z","last_seen":"2025-09-11T15:58:37.203623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic.pages.dev/","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-11T15:35:17.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 06:05:52 GMT","end":"Mon, 01 Dec 2025 07:04:29 GMT"},"fingerprint":{"sha1":"34:08:44:10:D4:D9:22:19:35:2A:A9:71:38:FB:1B:C4:11:83:78:5A","sha256":"65:7A:4F:7C:13:DF:10:2F:B2:BE:03:6B:28:9C:D5:F3:07:3A:9B:BC:B7:74:4C:61:3F:62:50:F4:EA:F2:85:E7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dapp-aic.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 11 Sep 2025 15:35:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=D585RsU%2F7nTwrcdareGnW0Mq7nhR6RpYkpmGpCTlgio5tb2i1xVUp5tpCvndn4WVs94KfTglWAkWIYzQVQrHxSSEWag97RGFwtkpq7Z8xQWzJLRgOxsA93uD9TV4gkePaHqg2tc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97d83beed99656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6566\u0026min_rtt=532\u0026rtt_var=12076\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3293\u0026recv_bytes=1258\u0026delivery_rate=6350877\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=22cc58ca46528062\u0026ts=278\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7431,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (361)","md5":"9ad046cf18eb4b3b7a85f98de49d82f3","sha1":"bdf2eeed9fa9827fb715145084c389abc49aaee1","sha256":"fa255adf5369428e0f8a90ba9a23a78d99303fb17931bcd86842c547224865e9","sha512":"bc79191979e4d206c2d1a2d2ecd01063eb94f2d8b246c18d4a0ed8a63a01623465b3b6ef393e15c3373ec502daeaad807308ce1dece82b516507de9cbf70eb92","ssdeep":"96:AgmHjoNai0zD95x7H2qz0NUFHpo+MX5qm5IDTZfI1bWZyLytBVe:ZwjOC9zmHXJ5qIiELytTe","tlshash":"9ee1526002fa1c3a2113419aeb56761a3eb6a167974d12007aec6fe01fc3d9edc771dd","first_seen":"2025-09-11T15:35:41.142283Z","last_seen":"2025-09-11T15:58:37.20723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":40,"dns":16,"connect":1,"send":0,"wait":259,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic.pages.dev/styles.css","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp-aic.pages.dev/","date":"2025-09-11T15:35:18.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 06:05:52 GMT","end":"Mon, 01 Dec 2025 07:04:29 GMT"},"fingerprint":{"sha1":"34:08:44:10:D4:D9:22:19:35:2A:A9:71:38:FB:1B:C4:11:83:78:5A","sha256":"65:7A:4F:7C:13:DF:10:2F:B2:BE:03:6B:28:9C:D5:F3:07:3A:9B:BC:B7:74:4C:61:3F:62:50:F4:EA:F2:85:E7"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: dapp-aic.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:35:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"72fc50bcd598c81ba44f3cdcc3be7a45\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=j%2Fm8CwYdNazNsib3MsIzy4FXASluiK0H6gmZDbxTu%2BVGO5ouHzObNup9PjygEm2wQ1ey1%2BJF5waFagmxslhZaCH3JcRgJ%2FzyUEIwds8%2BSfzhpXRQyf1fpyhDZxpXhp%2Bpnvy1rM0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97d83bf19b890afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5374\u0026min_rtt=2244\u0026rtt_var=3214\u0026sent=42\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=33551\u0026recv_bytes=1932\u0026delivery_rate=5346790\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=61ea2ac1c7b8e3ea\u0026ts=248\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8647,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dd93609e2f15bd70180f8e01b4fd01e3","sha1":"74a952fce0aa4d05c86a31becb2274413f98536d","sha256":"1d317cfdd2a5d7037c05eff19862edfb02566f8cb13377864a8c8c76bffec131","sha512":"4b63c8443dbd33e21c7cdd1fe547bb7db1394ef3363af454f39dfd2544593be425660a5aff05e5925ca470709f3fe6650358082aaf69fa8bb38298dc999d2196","ssdeep":"192:qr1L+6+fEcRPcLMIphknPEfOb+unXgKfWSE9zyFd9/d4rnR/iWEVQ5HEqERr:qB82G","tlshash":"400221952ab32644741bd5e51ff7875823acc043804fcd6c37da368c8f4b2dd6592b89","first_seen":"2025-09-11T15:35:41.143565Z","last_seen":"2025-09-11T15:58:37.209687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic.pages.dev/icons/splash.png","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp-aic.pages.dev/","date":"2025-09-11T15:35:18.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 06:05:52 GMT","end":"Mon, 01 Dec 2025 07:04:29 GMT"},"fingerprint":{"sha1":"34:08:44:10:D4:D9:22:19:35:2A:A9:71:38:FB:1B:C4:11:83:78:5A","sha256":"65:7A:4F:7C:13:DF:10:2F:B2:BE:03:6B:28:9C:D5:F3:07:3A:9B:BC:B7:74:4C:61:3F:62:50:F4:EA:F2:85:E7"}}},"request":{"raw":"GET /icons/splash.png HTTP/1.1\r\nHost: dapp-aic.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:35:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 14127\r\ncf-ray: 97d83bf19b8c0afa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f0ae8eb80ae1a10e74c828dfa2cb3cdb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iRaENJwQSTa1NVL1byBfZr9JvPp7lGQCViXjRnbIdXeAG0dQrgiZYqNmdbMSUeDm5NL1Odi60V97s8hOKnlQHgYiSVobRohu3HCBAWCEUqnE8P9IfilvNFPylxr9Z9X%2FLaBzh20%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5821\u0026min_rtt=3139\u0026rtt_var=3093\u0026sent=15\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=4884\u0026recv_bytes=1888\u0026delivery_rate=499881\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=61ea2ac1c7b8e3ea\u0026ts=243\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b398eeb7494ba3824b4b157d95bb9112","sha1":"108340e3a161a188278774f108a16fe5993ec520","sha256":"be22c46bdc3d3eb523c8b23b793c4057debbcdccbd54b306c2d47e8648faf217","sha512":"a132fce8a47d329e8bc3e5348e7d285cd03074900c8e728c69f8b581f9e0bb3d7226f91c94e9971c53f7e05c4d1ca99ea04a6cf332accf27f131305a89e8d83c","ssdeep":"384:wOJNu1/Nnc+2Ul846vC16esVEy4ZavMkRMUgYRaMOOOOOAJ:wOLSk1vC8e1y/MjmaC","tlshash":"77521a24c19218bae4432f29bbb528c7869ad67de53de54873df0c872e47b50fd20c68","first_seen":"2024-01-08T00:36:04Z","last_seen":"2026-08-02T03:28:24.197015Z","times_seen":161,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic.pages.dev/bip39-wordlist.js","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp-aic.pages.dev/","date":"2025-09-11T15:35:18.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 06:05:52 GMT","end":"Mon, 01 Dec 2025 07:04:29 GMT"},"fingerprint":{"sha1":"34:08:44:10:D4:D9:22:19:35:2A:A9:71:38:FB:1B:C4:11:83:78:5A","sha256":"65:7A:4F:7C:13:DF:10:2F:B2:BE:03:6B:28:9C:D5:F3:07:3A:9B:BC:B7:74:4C:61:3F:62:50:F4:EA:F2:85:E7"}}},"request":{"raw":"GET /bip39-wordlist.js HTTP/1.1\r\nHost: dapp-aic.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"ccb796c5ada48f6c1d6acaf088251dd9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ot%2BVKpdoAb4P8Zj4IPp208dgp%2BsfAvcthnvQeJb7xOFAevCzZJ3Wb7Arva1olHx%2B89BFZuVJexAyvFXi3cLbJBQIQ1OVMqaLxyYqELnn19UEzuQctMyrYOYOfe22g2KVunCAgYc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97d83bf19b8d0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5821\u0026min_rtt=3139\u0026rtt_var=3093\u0026sent=14\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=4133\u0026recv_bytes=1888\u0026delivery_rate=499881\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=61ea2ac1c7b8e3ea\u0026ts=242\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19654,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"69e1b1d6339a22882503ab3c492b950a","sha1":"0755d969c84560d066dfb7e82304b544bab91123","sha256":"d59ef1cc395b421baa5159917c2138342d2fe5c9f0eea838d7845ee802d6969c","sha512":"1051c1f1695902c89daf11cb851f3fe145ec56842e0f2f708d38d886235be55535180132d93e9e8a76ea54efab98073f25c0f9ddf01bbe69ec05cec5a4e3c3ab","ssdeep":"384:wI+5dcf49aVneJ+p8KFgZVGfITv9uRJc8NBkw93f2EH7JsoC7IChoXCKuYgebYvb:v4uYwtf2G7u2YebYva4ZGat","tlshash":"6e928e3cf617051b04e2d5583cd50582bba88b1a4386be1e579e826437cec3eb85f7ad","first_seen":"2025-09-11T15:35:41.146425Z","last_seen":"2025-09-11T15:58:37.213514Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic.pages.dev/app.js","fqdn":"dapp-aic.pages.dev","domain":"dapp-aic.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp-aic.pages.dev/","date":"2025-09-11T15:35:18.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Sep 2025 06:05:52 GMT","end":"Mon, 01 Dec 2025 07:04:29 GMT"},"fingerprint":{"sha1":"34:08:44:10:D4:D9:22:19:35:2A:A9:71:38:FB:1B:C4:11:83:78:5A","sha256":"65:7A:4F:7C:13:DF:10:2F:B2:BE:03:6B:28:9C:D5:F3:07:3A:9B:BC:B7:74:4C:61:3F:62:50:F4:EA:F2:85:E7"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: dapp-aic.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:35:18 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"227dd219e2d9ed2f958146fddb3befaa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U5wiKE2msMbfeYEEyqK8W%2B0HPlYA8o0qTcpNdtTYmXjx9tYyFRiRYc6%2BqkE4F%2BXEJxA3WDReuhxSP%2BCSn6V6aNAcqjiYPMuVdmLMM%2B3yU3cmyCx5Nhdyn1gxiG7a6nIqMXzq4mw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97d83bf19b8e0afa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=5821\u0026min_rtt=3139\u0026rtt_var=3093\u0026sent=25\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=16133\u0026recv_bytes=1888\u0026delivery_rate=499881\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=61ea2ac1c7b8e3ea\u0026ts=245\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21261,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"77949f968d2375c4be079805a53a1cef","sha1":"d57e528763e632e9275698b1bef3f94d49e8c21b","sha256":"6eb7229b7f2467fe7b33a998b34617aa1e378f12cc061c076f8f0d4bee9bf208","sha512":"e770c16cdc9f1ad712a3dc419f98ba4ac449385f97e8e9ff755b157301ea0c379e159cc88e1f134603a0a75f309b97f243505fa1a4f30de9cce88fbb57600728","ssdeep":"384:FwO876HHhH4vDL0lu8EUj0LFtAhkOZl/DVrGKsmyI3:FBy7QsUjotAhBRTsY","tlshash":"bda2736825fb14314a2361bfab9f610a3232401b3445ee193e5cc7551fc1b74abb6fea","first_seen":"2025-09-11T15:35:41.147468Z","last_seen":"2025-09-11T15:58:37.215692Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-11","alert":"Detects file containing Telegram Bot API","trigger":"dapp-aic.pages.dev/app.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}}]}