{"report_id":"6eaaa414-5548-424e-a045-d49f0bd5f4af","version":6,"status":"done","tags":[],"date":"2025-08-07T02:21:12Z","url":{"schema":"http","addr":"bad-sushi.top/","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bad-sushi.top/","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"title":"Stake SUSHI | Sushi"},"submit":{"url":{"schema":"http","addr":"bad-sushi.top/","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-11T02:21:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":52810,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-07T02:20:52.090012+0000\",\"flow_id\":2109039622506211,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":52810,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":915,\"bytes_toclient\":1654,\"start\":\"2025-08-07T02:20:52.083683+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":57660,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-07T02:20:52.101390+0000\",\"flow_id\":1995276676264276,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":57660,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3438,\"start\":\"2025-08-07T02:20:52.094548+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":40434,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-08-07T02:20:52.111029+0000\",\"flow_id\":868156998716002,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":40434,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":922,\"bytes_toclient\":3519,\"start\":\"2025-08-07T02:20:52.100962+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":40436,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-08-07T02:20:52.114555+0000\",\"flow_id\":189743291999787,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":40436,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3445,\"start\":\"2025-08-07T02:20:52.108075+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"52.16.47.145","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.4","port":38036,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-08-07T02:20:52.206837+0000\",\"flow_id\":715266900368260,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":38036,\"dest_ip\":\"52.16.47.145\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-08-07T02:20:52.138116+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"52.16.47.145","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.4","port":38046,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-08-07T02:20:52.211374+0000\",\"flow_id\":863831966620682,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":38046,\"dest_ip\":\"52.16.47.145\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-08-07T02:20:52.138250+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":3267,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-08-06T23:18:19.038331Z","alert_count":0,"request_count":2,"received_data":938,"sent_data":854,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"binance.llamarpc.com","ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":0,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2025-08-03T10:56:27.139149Z","alert_count":0,"request_count":2,"received_data":8151,"sent_data":1009,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"res.cloudinary.com","ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2011-05-24","domain_rank":2520,"first_seen":"2012-10-03T08:31:44Z","last_seen":"2025-07-31T23:05:48.827322Z","alert_count":0,"request_count":19,"received_data":25440,"sent_data":10363,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bad-sushi.top","ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-02-27","domain_rank":0,"first_seen":"2025-08-05T20:45:18.591907Z","last_seen":"2025-08-05T20:45:18.591907Z","alert_count":0,"request_count":18,"received_data":3919605,"sent_data":8020,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"52.16.47.145","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":0,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2025-08-02T22:56:41.538486Z","alert_count":0,"request_count":4,"received_data":13414,"sent_data":2042,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-08-06T15:25:40.423241Z","alert_count":0,"request_count":3,"received_data":320484,"sent_data":1307,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-06T15:20:03.099982Z","alert_count":0,"request_count":2,"received_data":798862,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":52810,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-07T02:20:52.090012+0000\",\"flow_id\":2109039622506211,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":52810,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":915,\"bytes_toclient\":1654,\"start\":\"2025-08-07T02:20:52.083683+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":57660,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-08-07T02:20:52.101390+0000\",\"flow_id\":1995276676264276,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":57660,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3438,\"start\":\"2025-08-07T02:20:52.094548+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":40434,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-08-07T02:20:52.111029+0000\",\"flow_id\":868156998716002,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":40434,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":922,\"bytes_toclient\":3519,\"start\":\"2025-08-07T02:20:52.100962+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.4","port":40436,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-08-07T02:20:52.114555+0000\",\"flow_id\":189743291999787,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":40436,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3445,\"start\":\"2025-08-07T02:20:52.108075+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"52.16.47.145","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.4","port":38036,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-08-07T02:20:52.206837+0000\",\"flow_id\":715266900368260,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":38036,\"dest_ip\":\"52.16.47.145\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-08-07T02:20:52.138116+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-07T02:20:52Z","timestamp":1754533252,"ip_dst":{"addr":"52.16.47.145","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.4","port":38046,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2025-08-07T02:20:52.211374+0000\",\"flow_id\":863831966620682,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.4\",\"src_port\":38046,\"dest_ip\":\"52.16.47.145\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-08-07T02:20:52.138250+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bad-sushi.top/static/js/jquery.i18n.properties-1.0.9.js","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf3466c221ea851913cdee4fa966c386","sha1":"4299bbb2c505780b927a1c61a25888ed0d2d49e3","sha256":"6baa624dc013c94e79f71f9af775848c574c995f88d0512370b3457f6cf1d60c","sha512":"d466e59d1c94a51f5462b461f4b25f154d2633a73983702991497351cbb3ce828d5cd346f4effb4954a11aa9168ee1d6338a975cd474e6844e22f6b946f25ff9","ssdeep":"192:c+oDJtkMWXZu2PclZbfXx85xiXwSUXdNE+qkid3tM65BtgcRyz/MWQIGs16SUJQX:cfqMWY2PqZmQooNsEA1IS9hv5jP","tlshash":"9482b6087a050d1e46b233b02abd2888da79c47b5521a0f5b8dc77543f7cda942e9ff9","size":18262,"data":"","first_seen":"2025-04-07T11:34:04.636019Z","last_seen":"2026-06-03T10:20:46.382475Z","times_seen":686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-13T11:15:56.474797Z","times_seen":237649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/a442bf1e-015d-43f4-8eb8-97e7a3546d14","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a781c5346cf8e38c00b95a6e0c0893cf","sha1":"04e2008236b02be3a58b958ce19749339e5a9384","sha256":"4a70d3aee7a4b2740569c5b531f54c72df8b1ea17fa0ed45ca40cdccb921b827","sha512":"ac6a85209fcc5e16854ed5b3067a7688b7d227b7f043c8b7a08df9ec4f3c670aade7448d7cfaf549d71cb4e2627824f2504a2618629a2827529a11edb362e52f","ssdeep":"49152:65+42fw0oqSy+6Cho0eO5i2X4/U+Ff7SLYmzp1TPQQm74O+e7DQaa9zHCsLk27ZW:N","tlshash":"282696d9c805def94a99dadd933b82a0d4792745651c2684f8bcbcfda38cf2208f1953","size":4788976,"data":"","first_seen":"2025-08-03T10:56:33.323333Z","last_seen":"2025-08-07T02:21:25.391074Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9914b3b4d0adfeecb188d012186cb6e0","sha1":"dcb0b46bcf667d89e5733cafd0e2a5ad41d670fd","sha256":"bbd48654178ce26e725a9f36118dfeeb6f8b5d0deeb0748c065d220f47005d30","sha512":"dcafc8b9fb0dc371c069715f34d2df4fc3bd2a18bb468e8ec112db0541d077d4872eda653e3382599cd875974fd693fb6d0d7eebc2d3c907eb6f892c27d800d3","ssdeep":"96:ddO899cPrKWSHkcvzcvlcvbcvBcvYQcv1cv7cvqcvTcvPcv7cvHcvbcv/cvYQcvv:m5PujHxQqI2YN6oPwso0IcYNEFK","tlshash":"9402ac42ffa8a37474763ed80a7bb0019b741cb1db983f123f32169508d6b5474b69ae","size":8723,"data":"","first_seen":"2025-04-20T10:26:21.910219Z","last_seen":"2026-06-03T10:20:46.391181Z","times_seen":578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-12T13:49:20.666272Z","times_seen":31896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/5fc9f166-a912-4db5-8d67-2d14b4a25ec5","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-08-09T15:35:30.742787Z","times_seen":4177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6741ba6eb4f03dfa31a97fcfe7d16369","sha1":"23c34a20d37ad43aa81f60026ca3b9c25a8b657a","sha256":"f8babd7f9ce04b88c65b8cc1b69382b1d8c83c59e55b26b34ed13ae4e09b0645","sha512":"247dd2fddba4f20e0a26d75cbb7ef20c3e01c2ccfa6a8e795ee6cfed0aa692a595a03c9aab886109c2e8f2544432a6ffec76f8711a2fdfaef6b307bcbf84e9a6","ssdeep":"","tlshash":"3ed02ea856ea0b310323a224160b93863b7040173080e8893e0e81d81fee8a040af8ab","size":272,"data":"","first_seen":"2025-04-20T10:26:21.911267Z","last_seen":"2025-11-16T03:48:59.197992Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/0025a9ad-e12a-4d01-a339-9eb2e24e9c5d","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-12T08:52:20.165547Z","times_seen":5112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/d18fefde-64a3-4d6a-a784-6cab3dbf6772","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-09T15:35:30.742044Z","times_seen":5092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/layer/layer.js","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2eb1aaf732c36835784d91a17cb33989","sha1":"0c299dbb6354cbcffb908c137d50ca482f3b068d","sha256":"49bead7cfddd71b31ef110e012c1e2c72b8a0e7ef6688145214610a0aa481a16","sha512":"032612493a4486453c78c2ea81846ea0bb2ebb5f704b6795bcf2a8cf9b03ef4664c0f05f540f95c4487a2b5a430193774fd4d71ea41fca7b5603d8de1c063648","ssdeep":"384:CJ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:CJtu8CfS793QODbcI","tlshash":"e392d85ab550359321639069911fa90f30f24d22eb078858f16bf1fd1ebcda562b3f0b","size":19832,"data":"","first_seen":"2023-04-25T14:30:41Z","last_seen":"2026-07-20T10:43:52.781445Z","times_seen":829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-09T15:35:30.709021Z","times_seen":8490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-13T11:49:15.646124Z","times_seen":742743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c0d5c613239e83e931cd2e6bb4cb9b4","sha1":"fc01fd21a8e0255e2030441ff852b10b27b1be4b","sha256":"a7adc9db5a5b2fd5df8d217dced3fa05c826a0b60aafa7f42d11edda4b215317","sha512":"7478af56ab0dab47a41273bcfa8ec231a2df08932dbba82d5c51f0221f9dda9deec8796e091ad4cbcc559f2943bcb3f7b7ad7c5fad5caef4417edaa4e14c7660","ssdeep":"96:tWVwti1iARaTKwwCuHkaq26dHoMe0sCwxW2nUP6eDi6DLKPhxmMFZGPAcQmz71y/:Fi1iAwTKFHkaqO0T7LkNKnhhpM","tlshash":"1ab1e175b65812a4f13b34f45bdfb0052932160fc509de9bb42c86d21f59e90b3abec6","size":5248,"data":"","first_seen":"2025-08-05T20:45:25.269376Z","last_seen":"2025-08-07T02:21:19.923466Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/js/bignumber.min.js","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","size":18565,"data":"","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-08-12T17:58:04.956949Z","times_seen":824,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/js/jquery.min.js","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26aae2f13dc332df6e6f01e6657a03a0","sha1":"8cbb682f32cf5bf8702571399ccb57a77148f27b","sha256":"0108cf57a5359cdecc80699650b912a11731d0aeaec300d884a9d658ed96b295","sha512":"fb3c96f0ad4c712e1df1da8e8b3f687010e4722b4bea6c1f92270f03514aa6355e3fb48b0c15412423be1725c24dc5d1d2465eaf9f5c97436ec57c7d88219c9d","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrR:f+41hJiz6fhdlTqya98HrR","tlshash":"7883d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84347,"data":"","first_seen":"2023-03-07T12:04:04Z","last_seen":"2026-08-10T07:25:44.689004Z","times_seen":1094,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/avalanche.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/avalanche.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 290\r\ncontent-disposition: inline; filename=\"avalanche.webp\"\r\netag: \"7e74439e52b76c5e5e0a91b249206183\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:18 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=6;start=2025-08-07T02:20:46.597Z;desc=hit,rtt;dur=9,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=2178\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7e74439e52b76c5e5e0a91b249206183","sha1":"0c98ea0155d4ef3d96fd3595708855b5de7dae43","sha256":"fbaba472741915e440d7a1cb40254d1c48cbef1e73ae3a3b0af6a747888b9cb4","sha512":"ef7a6b2e45d5b5f775283e4eb15b84d5d9fc92ec3b66754a0dc6a003468c6e63f1b2ec99cb757e16c35e894a470f1d2196b45c825898bce730e22863e28a8d81","ssdeep":"","tlshash":"71d07d7660ac9ad1129f24a42755a316414d8c024d66f564a3da491ce0c45021092f14","first_seen":"2025-04-07T11:34:04.61493Z","last_seen":"2026-06-03T10:20:46.349274Z","times_seen":704,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/list/master/logos/network-logos/optimism.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/list/master/logos/network-logos/optimism.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 258\r\ncontent-disposition: inline; filename=\"optimism.webp\"\r\netag: \"5cfb7feeb6e91bea923286c20e8f4974\"\r\nlast-modified: Thu, 05 May 2022 19:44:05 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-08-07T02:20:46.597Z;desc=hit,rtt;dur=9,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=11182\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cfb7feeb6e91bea923286c20e8f4974","sha1":"8c3708d60b4f5b3dec64ad62e3f6493d099f7b68","sha256":"c58cfef726dbb851e554f457ba14201c3c3c4875bbf465d77a7bdce34d62b0c7","sha512":"2271cf216d0da1459c373296d72c259cb225308125916b7520b84c34abb9f9f5e823d708d4bb0c3edcb5eff466082b3d5d49fbf83e6c8457babcfa0a688065fe","ssdeep":"","tlshash":"dfd02ec38fe0f2cf3a3a89da22271c00b0309894339046a2aa890740b003f927a02b1e","first_seen":"2025-04-07T11:34:04.603851Z","last_seen":"2026-06-03T10:20:46.347289Z","times_seen":706,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/arbitrum.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/arbitrum.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 496\r\ncontent-disposition: inline; filename=\"arbitrum.webp\"\r\netag: \"d599dbec55b24e736284fc2623700592\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-08-07T02:20:46.602Z;desc=hit,rtt;dur=8,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=3813\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d599dbec55b24e736284fc2623700592","sha1":"f0bc8bb117e29ba042739bba71aeb7bdebe9d8ca","sha256":"a7f37d523f36ac2e6abe39c356e733047419314462a85237ad9344ad7127eda0","sha512":"c82188e1fa27bbb3c47ada1c55051016229bc9c84eb772fe078d1685e10b4723ca7dcde1a03b76b9d5430e6a6390ba2d28ed339031dfaf4867491222ecf4606b","ssdeep":"","tlshash":"f2f0540a09e749d0445677d1859e259c02208b71c144bcdc07f3aa8e87f69436d0a134","first_seen":"2025-04-07T11:34:04.621924Z","last_seen":"2026-06-03T10:20:46.385079Z","times_seen":706,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/layer/layer.js","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/layer/layer.js HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Jan 2022 05:27:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61d3dad4-4d84\"\r\nexpires: Thu, 07 Aug 2025 14:20:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19844,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19752), with CRLF line terminators","md5":"2eb1aaf732c36835784d91a17cb33989","sha1":"0c299dbb6354cbcffb908c137d50ca482f3b068d","sha256":"49bead7cfddd71b31ef110e012c1e2c72b8a0e7ef6688145214610a0aa481a16","sha512":"032612493a4486453c78c2ea81846ea0bb2ebb5f704b6795bcf2a8cf9b03ef4664c0f05f540f95c4487a2b5a430193774fd4d71ea41fca7b5603d8de1c063648","ssdeep":"384:CJ8cuj0z4VfS7ShA3BMJOoM6bs7hwI9b4Zrxy:CJtu8CfS793QODbcI","tlshash":"e392d85ab550359321639069911fa90f30f24d22eb078858f16bf1fd1ebcda562b3f0b","first_seen":"2023-04-25T14:30:41Z","last_seen":"2026-07-20T10:43:52.781445Z","times_seen":829,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.16.47.145","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bad-sushi.top/\r\nOrigin: https://bad-sushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T11:51:57.48642Z","times_seen":17870963,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":154,"dns":42,"connect":33,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://app.sushi.com/images/chef.svg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://app.sushi.com/images/chef.svg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 494\r\ncontent-disposition: inline; filename=\"chef.webp\"\r\netag: \"38ea5c1f6ca42ffe426f0f892036aba2\"\r\nlast-modified: Sun, 23 Jan 2022 02:31:13 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=4;start=2025-08-07T02:20:46.611Z;desc=hit,rtt;dur=5,content-info;desc=\"width=22,height=22,owidth=22,oheight=22,obytes=93196\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38ea5c1f6ca42ffe426f0f892036aba2","sha1":"5551bd6aae36e9bb9bc0a9bba0232785d5b27c7e","sha256":"ad0a76c89956fcf0505aab998d9f9f9c51b2ad958d75ddb99c140025ac9e6371","sha512":"c34f106c7130b3b48f3d8ccaa58468c503302c489d66de41b96347fd0d830184c5902ce0363a15c86404ce917a796d32ab6b580c175f201887aec4a6e9f96a24","ssdeep":"","tlshash":"d3f00e35608130ee4d5351646ca33ffa2b4a18b584513583d9384a84252d654c73a86d","first_seen":"2025-04-07T11:34:04.610001Z","last_seen":"2026-06-03T10:20:46.347924Z","times_seen":706,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":99,"dns":42,"connect":1,"send":0,"wait":6,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/mainnet.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/mainnet.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 214\r\ncontent-disposition: inline; filename=\"mainnet.webp\"\r\netag: \"bd03cdb4b57baabe3f0e5e029d139d07\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:19 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=6;start=2025-08-07T02:20:46.596Z;desc=hit,rtt;dur=9,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=6327\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 32x32, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd03cdb4b57baabe3f0e5e029d139d07","sha1":"def9ec0cee4aa2231150a409b9b93af1324d7236","sha256":"77c5d4287e1047bcaca077d84df3f075ce5286d3f76bb6d926691fdf3860e822","sha512":"f64af9c8af172d43cd5ea9b1861eb662fb77b793df44901cc59a54643a7129d70c7fd1fdc1bffde3b1e645a6a4eb113c5cc9f879594f1d30d2de5f04690124a2","ssdeep":"","tlshash":"20d0235f854405c8da15346514210ff1cc594d61cf67dcd556e51d3a7b180cf75e1145","first_seen":"2025-04-07T11:34:04.617184Z","last_seen":"2026-06-03T10:20:46.346625Z","times_seen":706,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":80,"dns":49,"connect":1,"send":0,"wait":9,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/fantom.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/fantom.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 653\r\netag: \"030feea8d18bb8d67c9382a57fe41adc\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:23 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-08-07T02:20:46.597Z;desc=hit,rtt;dur=9,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=9962\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"030feea8d18bb8d67c9382a57fe41adc","sha1":"152f68cedaee9cf0ad9685bd13d197e32c96f8cf","sha256":"8cce1bd87ee7df9f7ffe0e0aa3984b8748c5448c341daaa9c353ca0bb0735361","sha512":"c5747dce3e6267ba8963d54b886fef9d3c12c3e4427990c0c8775d622c01c82ddfb37a4c9fb44617890747404cde00f084799ef6bdfbcfbcd4ec7594ebb6ceba","ssdeep":"","tlshash":"31f0232fd3be8301d6462bb88325730643461761ed0a8f0e21c3752da76b0479d81aa0","first_seen":"2025-04-07T11:34:04.613746Z","last_seen":"2026-06-03T10:20:46.376504Z","times_seen":705,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/autocompleter@9.2.1/autocomplete.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/autocompleter@9.2.1/autocomplete.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2102\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 9.2.1\r\nx-jsd-version-type: version\r\netag: W/\"1778-T/efyFDYUSEmqnfjRzQWaoXGxew\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230172-FRA, cache-lga21930-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 3088430\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e6%2FnvBgWVzQTWdW91c23lRIJSAwYl81zENsULw81Zm9n9V5HqJrvNu%2F1zQ3oRMws%2BNdvS9gy0EonnEdPUwpBtx9N9xw2mrfLGXiOMjIhUX0UjU1HeIITzb2xuQP02Lea%2BnA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96b34c1cd99b5694-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6008,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5512)","md5":"a86b4d0b78aa81ae3448dd179e63a6a1","sha1":"4ff79fc850d8512126aa77e34734166a85c6c5ec","sha256":"ad210c53d6d3b61146779594a306e0d0f48272ebf884284700613baa05919c74","sha512":"57be2c72415b2964b5d7b971f6445d62c7221d2a74be7e83245355f9990ddc29b3a54ef0e8cf885700796a0710f05ec5b49cb2a8b5cad580a87350250d091953","ssdeep":"96:mhrNV4lDBSEBnEMuZPo6paG9o2UKqB9PxtAdBzF9EvOViuhV33G:mvm45Mui6kB2UxjEdkSk","tlshash":"18c1757e3b0036731ac771e7959fb9421e782563e90e4c00a039ee943e3cee93667995","first_seen":"2024-08-13T22:13:15Z","last_seen":"2026-08-05T23:59:47.242744Z","times_seen":673,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":57,"dns":4,"connect":4,"send":0,"wait":11,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/telos.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/telos.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 724\r\ncontent-disposition: inline; filename=\"telos.webp\"\r\netag: \"90906ce533abebdb3c73028cb3d45e38\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-08-07T02:20:46.602Z;desc=hit,rtt;dur=8,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=8607\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90906ce533abebdb3c73028cb3d45e38","sha1":"f3becab3c002fa0c148502da9f78cea998cd59b0","sha256":"f40938730da4129013f9e95fe5a290ade4bfe7c4f337a0c466fa73fa5d2e637e","sha512":"01b8d621691d61d6dbfca1d3fce496285c40902ccb8ad9750d3394b7cfc59012127e268d69ad85f5c50060b7a90a6d713b9b14ad2e5d3eceedf8c0644ed0c93c","ssdeep":"","tlshash":"dd016034129ae98a5d26f8f040c3272158a5aa6b0828b7fa09487700d212a5ef0587ad","first_seen":"2025-04-07T11:34:04.630518Z","last_seen":"2026-06-03T10:20:46.350531Z","times_seen":701,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/icons/favicon.ico","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:48.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/icons/favicon.ico HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:48 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15086\r\nlast-modified: Fri, 19 Aug 2022 19:39:28 GMT\r\netag: \"62ffe6f0-3aee\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"2d9fd3050b348ff710c48fc1eaa299c1","sha1":"e09be2276f644036097bb50f88d1cc4d30dc026f","sha256":"aa58c0d6b5056402871afca422d34080d36b00c90a4368b5ed661459cc12438e","sha512":"962477589971c0f5bd7941d9e9df077237ef333098caef6cef6fa5615a1fbe9d3154070674e1f03c1aa6c2f77260cb11c32280f981999943c12d0415eda1ed9b","ssdeep":"192:jm6yEEE0EEEEEEEEKEEEEEEEEEEEE/EEEEEEEEEEEEEEE6YEEEEEEEEEEEEEEEE/:jm6HEsyJcKmQQk5YxE","tlshash":"d462a4aeb630d698d151583dcc79cf9d036fbe6a5c44b686bdd8330e2af22841c3b915","first_seen":"2025-04-07T11:34:04.607148Z","last_seen":"2026-06-03T10:20:46.38832Z","times_seen":702,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/language/strings_en.properties?_=1754533247359","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:50.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/language/strings_en.properties?_=1754533247359 HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:50 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1146\r\nlast-modified: Wed, 18 Dec 2024 20:23:58 GMT\r\netag: \"67632f5e-47a\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1146,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text, with very long lines (317), with CRLF line terminators","md5":"f524621c6a3045994b856ccb4de4ecb1","sha1":"2651d2a46f9bd08217757d0e38ce94ae26a1c6ac","sha256":"82ef5d6f13350281e6da0556a33f3d3538a0eac4fe37f2d97681ec530d5185c3","sha512":"46a64390b2ac14d1851425a990dc1282b4b3194829eb45989009ffe6c2aa64f2346ec003923ff0acc8fd2b7bdf7054d49b75e8a8b83941b7a08a4f432c791581","ssdeep":"","tlshash":"a021afda27411a501d527d703afa6491d784209373f048f8d8dc5d88ca7bf9aee71f82","first_seen":"2025-08-05T20:45:25.114297Z","last_seen":"2025-08-07T02:21:19.892241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:51.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 02:20:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 96b34c162cfe56c9-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 676348\r\nexpires: Tue, 28 Jul 2026 02:20:51 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=plxLEUXlBbULFZc1io2q5%2F1YIeOutN96yFB3s%2BKj18T9NS3mBKP551I0vts8iOReYzlwq8neUjLhuiPbUvOEPe0sREEJ6Uwer6Tb%2B6tb5LOGR9O3QqehjzrvvOqec4vv3XIdQ6fo\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-12T13:49:20.666272Z","times_seen":31896,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":21,"dns":2,"connect":1,"send":0,"wait":11,"receive":3,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-07T02:20:45.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:45 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 01 Aug 2025 08:20:16 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c78c0-282ea\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164586,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3706), with CRLF line terminators","md5":"ffab0f6596baf2ff95c94e1d9e35f557","sha1":"ecbfd92d9b7daf544cf313b88caec97e38936920","sha256":"3d8bbc7036ca4461b430745b0470e2fd04e962ab3ecf2f6660b807f293853da3","sha512":"75c4df067516a090d793b5a1ccf75bb78982fc55cac45aa9a8787e906383df8f99415c230c3e32b013618fc52cc4882c9af75bf669f5cd0167b4be518abeb07d","ssdeep":"3072:Od7cdsxkJL5EWVIQLp8rlmWffA1CkbjdKftTdzPpfBXDvz0X2xeCWKN:3oZ","tlshash":"99f3c73132c0066f9177c6e0b971b769e6168617cba6d19cb7fd13a39b8f8009e33664","first_seen":"2025-08-05T20:45:25.184411Z","last_seen":"2025-08-07T02:21:19.893974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":363,"dns":1,"connect":175,"send":0,"wait":192,"receive":0,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/image/usdt.png","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/image/usdt.png HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 831\r\nlast-modified: Sun, 28 Aug 2022 23:11:28 GMT\r\netag: \"630bf620-33f\"\r\nexpires: Sat, 06 Sep 2025 02:20:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":831,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 48x48, components 3","md5":"3f6bb112bffd54f9780ab93608235a90","sha1":"edbfa4f2d2e7db65a1382d8431e10df68888facb","sha256":"0bb95ff96b6753574ff160891c1159a8f5131e6cb4500d5c0279ee47c24472b4","sha512":"6d28fc8125e082b64644012fe27d1cdf41dc6b89bcd4da08b010ac22131b34456e0c6726366dd562227126382afa447d1bfcec25409475b578fa87d9230f5e13","ssdeep":"","tlshash":"ec01415fcf8ec21bf944bb35a47a432bcf0db219d483a6aa45d210f66476fd488518c6","first_seen":"2025-04-07T11:34:04.611203Z","last_seen":"2026-06-19T03:29:39.233724Z","times_seen":705,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/fuse.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/fuse.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 740\r\ncontent-disposition: inline; filename=\"fuse.webp\"\r\netag: \"1feff172d88d3891d5f52276eea6a10b\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-08-07T02:20:46.602Z;desc=hit,rtt;dur=8,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=13852\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1feff172d88d3891d5f52276eea6a10b","sha1":"d94e9ed76f4b2a20880fb62e27aafd7a6a3bdd20","sha256":"fd45af725d0f5264dadf079a1cdee5b0cc230182e434c3ccadfcbf0cf4189f53","sha512":"9c548363c95b29fc47f693d38c0274c2b23aef59751ee397e080ef5fe0693e80e46b30e136d1621139bbca062165911e22b3819532a1bdcecd6d5f7bea1a161b","ssdeep":"","tlshash":"0c016ad2b957815945e9513c5bdc78195780ba8635d3a501417d787022f037cd737de4","first_seen":"2025-04-07T11:34:04.63517Z","last_seen":"2026-06-03T10:20:46.378137Z","times_seen":704,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/harmonyone.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/harmonyone.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 554\r\netag: \"30f05ca8a9b000fdbdf4496876c6137d\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-08-07T02:20:46.597Z;desc=hit,rtt;dur=9,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=4041\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":554,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"30f05ca8a9b000fdbdf4496876c6137d","sha1":"8b10fdc295a71727b858e8feae9706604c4479c3","sha256":"d8b9fee4aceb04c143d5de613e4bfd772bf63def40e253a0f64869fc1a0cb9cb","sha512":"2ba0f2a41f8eb0d66e88575eff80b612c6d8d58bda099f718e72177fcd001b4a30ac5a83ae7f090deb558b9d4fab8755e73aa607868afbe4402cad4ce7d1085e","ssdeep":"","tlshash":"2bf0dcf277d43923ee045eb81564d331ef35689bd585ab8a0683a5242d295836f2193c","first_seen":"2025-04-07T11:34:04.634442Z","last_seen":"2026-06-03T10:20:46.381162Z","times_seen":703,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/js/bignumber.min.js","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/js/bignumber.min.js HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Sep 2022 01:55:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6310112c-4885\"\r\nexpires: Thu, 07 Aug 2025 14:20:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18564), with no line terminators","md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-08-12T17:58:04.956949Z","times_seen":824,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/secureproxy.php?e=ping_proxy","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bad-sushi.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-13T05:58:08.703701Z","times_seen":9040,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/metis.svg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/metis.svg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 260\r\ncontent-disposition: inline; filename=\"metis.webp\"\r\netag: \"f5ba0627e2bb180844a7da5cd656b58c\"\r\nlast-modified: Wed, 13 Jul 2022 17:14:44 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=6;start=2025-08-07T02:20:46.612Z;desc=hit,rtt;dur=5,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=3793\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f5ba0627e2bb180844a7da5cd656b58c","sha1":"8db9058952dbe0c7c80321d4bb01dc10c2dd0716","sha256":"ed7c452ffa7c8301470c90113620b6618f456f58f3720a2fdb958cfd70f7679f","sha512":"e7c28bf50a5b6a5b853c86ba8519614891e1dcf73694f29fa611c49b9205f331a6ef1d3c35efa93ac1de8727adcb8bb45ab12fd46f50d261888994059dbebb06","ssdeep":"","tlshash":"ccd02b4d0897711451027dd257e68a006621d9049f12c046d6cb156d8af10c08975b34","first_seen":"2025-04-07T11:34:04.604936Z","last_seen":"2026-06-03T10:20:46.352538Z","times_seen":706,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_48,q_auto/https://app.sushi.com/images/chef.svg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_48,q_auto/https://app.sushi.com/images/chef.svg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 494\r\ncontent-disposition: inline; filename=\"chef.webp\"\r\netag: \"38ea5c1f6ca42ffe426f0f892036aba2\"\r\nlast-modified: Sun, 23 Jan 2022 00:32:41 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-08-07T02:20:46.606Z;desc=hit,rtt;dur=8,content-info;desc=\"width=22,height=22,owidth=22,oheight=22,obytes=93196\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38ea5c1f6ca42ffe426f0f892036aba2","sha1":"5551bd6aae36e9bb9bc0a9bba0232785d5b27c7e","sha256":"ad0a76c89956fcf0505aab998d9f9f9c51b2ad958d75ddb99c140025ac9e6371","sha512":"c34f106c7130b3b48f3d8ccaa58468c503302c489d66de41b96347fd0d830184c5902ce0363a15c86404ce917a796d32ab6b580c175f201887aec4a6e9f96a24","ssdeep":"","tlshash":"d3f00e35608130ee4d5351646ca33ffa2b4a18b584513583d9384a84252d654c73a86d","first_seen":"2025-04-07T11:34:04.610001Z","last_seen":"2026-06-03T10:20:46.347924Z","times_seen":706,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:51.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 07 Aug 2025 02:20:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 96b34c183f6a56ae-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1333087\r\nexpires: Tue, 28 Jul 2026 02:20:51 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pxmirpJOHQFDTccDKVsAmM7bDitTpgBWmIYrgHwtwBQcRaJ17ya%2BO62fU4Jil%2Ffxe0B7A9Xfk2V%2FS%2BuYNKCyecV3F2wv2fP6TZSjaFfDv%2FHFTSHe1b5kUy%2BmCveO7CUVtR0fzp%2Fd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-09T15:35:30.709021Z","times_seen":8490,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/merkletreejs@latest/merkletree.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/merkletreejs@latest/merkletree.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 49570\r\ncf-ray: 96b34c1cd9995694-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.5.1\r\nx-jsd-version-type: version\r\netag: W/\"38b62-hb7yiPDOf36GeGwNtiLPc6Lfotc\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220103-FRA, cache-lga21963-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 8923\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gMmsDiQW1WKXA%2Bp5MdcApTC9WYH3xa6rOTYHYu%2Blxm%2BvFCNbL6yY4xGLzqkcMtPuKKNFXKrlcN6wmax%2BANVgIPNhXJ7O%2FzBtOKBYKbWxtJJFE8amI56H4j2MrvbNMoZNlkE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232290,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ea425bcaf8d5bcc4cd1b787a9067be7c","sha1":"85bef288f0ce7f7e86786c0db622cf73a2dfa2d7","sha256":"8dfd04b5d4631811c6f25b7ebd6d0444222afc0a7ab5a740320731b0e50f08ac","sha512":"66ee506a0e657b1fe597d6434c186db3ebbc12f5f540d29689dbb1119efbbc8cae1b1edf9e6682cbf602f4540be1b2f61af725ee1ec2036c5b57ab817f01362f","ssdeep":"3072:ZcBVt9NAALrlr9KorpLppLR8Cs4HOIFV99:Zo9NAAvOYRVssOIF/9","tlshash":"ae342ac53685a0a583da71a8043f980fb176a827405cd484e928fcf59cfce9956bbf7c","first_seen":"2025-03-02T05:43:21.853177Z","last_seen":"2026-07-08T12:41:40.125836Z","times_seen":1308,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":56,"dns":6,"connect":1,"send":0,"wait":14,"receive":3,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/image/wbtc.png","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/image/wbtc.png HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 418\r\nlast-modified: Sun, 28 Aug 2022 23:11:29 GMT\r\netag: \"630bf621-1a2\"\r\nexpires: Sat, 06 Sep 2025 02:20:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 48x48, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"311a92f4fd9f89e67b3d0e54a51465f2","sha1":"b5a2a2075d34d22635b660b923dad0464b6bb29e","sha256":"43e3c81281509419baec632a380e7ac1cf59ccb01db6845b80b65f14d8fe7d76","sha512":"6b5dc0d7e116298b899c27404fe4d055d43d6aca1ef351cbfd8d87331328fdb07aeec62fdb17e50152a25be12334fd3c8708cbff3d5cf9e979c8b1d8f7029223","ssdeep":"","tlshash":"3ae0239050c825f0ad0de720b3c2770105b4da4693b4ce7a05079cf7109018082d7b05","first_seen":"2025-04-07T11:34:04.61234Z","last_seen":"2026-06-19T03:29:38.325417Z","times_seen":704,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/gnosis.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/gnosis.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 378\r\ncontent-disposition: inline; filename=\"gnosis.webp\"\r\netag: \"f578054363bb0326eabd07d77074fd20\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=6;start=2025-08-07T02:20:46.596Z;desc=hit,rtt;dur=9,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=8746\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f578054363bb0326eabd07d77074fd20","sha1":"d6a3c2f1692445fee937a8b0118c320b23aeefa1","sha256":"f47d348f1fc042a74e18fc139798552dbdc3d60c41c32b51fc9b15361f8fc5e6","sha512":"1dce79c7012733af423605b494c40c40d0f054cf4d65a62f19da018deb2ad209e24d1860906d1bc160b603f21d4022cbc5f0cebd83158fe3eb1bde80c53fdde7","ssdeep":"","tlshash":"a9e0f19c5d8013852ad709b55d72e0c00c3139035305a67135c62568f6118a826f08be","first_seen":"2025-04-07T11:34:04.633603Z","last_seen":"2026-06-03T10:20:46.379546Z","times_seen":704,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/moonbeam.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/moonbeam.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 576\r\ncontent-disposition: inline; filename=\"moonbeam.webp\"\r\netag: \"705402485a65af1084b1b6a4d42d8ebf\"\r\nlast-modified: Sun, 23 Jan 2022 06:54:31 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=4;start=2025-08-07T02:20:46.598Z;desc=hit,rtt;dur=9,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=3403\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":576,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"705402485a65af1084b1b6a4d42d8ebf","sha1":"4c86d5ccf115984752f80ef256825df5c650d38d","sha256":"7521fcc19e1b734a6e4d8e7d776d03eb904bbbc5009c3b0e8d14cbfbe05f44b9","sha512":"ceeb24e62f663d81223564c4cb4237b37292b52e401f22423b2946db4671b59b102cb0fd18f2e109bcbfa1a50114cbbed423aacda029048db1fb79d329a760fc","ssdeep":"","tlshash":"5ff0419cd3d0f7a8f391144c9a1c1742036200b04ac2736aa2bec704696c0611e3b8e9","first_seen":"2025-04-07T11:34:04.62059Z","last_seen":"2026-06-03T10:20:46.37728Z","times_seen":706,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/celo.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/celo.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 729\r\netag: \"f441e139eff0559a9f73577f58a84ede\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:30 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=4;start=2025-08-07T02:20:46.604Z;desc=hit,rtt;dur=8,content-info;desc=\"width=32,height=32,owidth=500,oheight=500,obytes=31154\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":729,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"f441e139eff0559a9f73577f58a84ede","sha1":"ff39bbd9a6208aaad00f81654a84686ddda0db5a","sha256":"d732b72d8b9027e89cdbcb4f19ed1cb84d7e3f08f9294a0572a79444175f8849","sha512":"8d953b13fe23dffaed77f249f73c69466e2a7b827a6b283a18d4e2101ea9ab1a18425a122e8642d5f67dd3fc89cfd0ba3332e4429d2fac0406e0f2972a94d399","ssdeep":"","tlshash":"d401990393455459cd7ce235c01036f563169359901954cfbf91c101aba703d1f63e78","first_seen":"2025-04-07T11:34:04.606072Z","last_seen":"2026-06-03T10:20:46.358193Z","times_seen":706,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bad-sushi.top/\r\nOrigin: https://bad-sushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 96b34c19ad745697-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1465\u0026min_rtt=605\u0026rtt_var=798\u0026sent=11\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3637\u0026recv_bytes=1271\u0026delivery_rate=5464150\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=da4cb5bc5bd5d2cb\u0026ts=147\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":16,"dns":1,"connect":2,"send":0,"wait":130,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/image/bad.png","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/image/bad.png HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 16 Aug 2023 00:57:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64dc1ee6-e7e\"\r\nexpires: Sat, 06 Sep 2025 02:20:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"b99363cb9cdf09ac065fa6f8d04d0d0e","sha1":"eea6aaea3e002d9f054721cc98e4a1776cf6c9e9","sha256":"bf1da2f13e8e138de2011cc67f7418f97da8e88b88ef968a213f7cb48633fbae","sha512":"06592b5eb20c142b5585516ee2bc84887d1f21dcff9ea65c13eca984175627fabf5093541c503ad3b48db2505ff1c0cd57f864b842099bdad46a6c2c5f66b081","ssdeep":"","tlshash":"11719ea15c3d1c3b381c0f7159a847481bb852aa1e050d8691506bbec3433b0d6dc970","first_seen":"2025-08-05T20:45:25.156507Z","last_seen":"2025-08-07T02:21:19.906781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/image/eth.png","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/image/eth.png HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 826\r\nlast-modified: Sun, 28 Aug 2022 23:08:18 GMT\r\netag: \"630bf562-33a\"\r\nexpires: Sat, 06 Sep 2025 02:20:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":826,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"55c83a614034818029ede9c8b1c035a2","sha1":"c3090069f2e88bb6b34bb1db184c566ee23fa508","sha256":"be98029dac523269f53752b8ceb98e7616f147558f93b5f0c33a3ab4db67cb7b","sha512":"66ecdaa42fe606fa9d0b5af2b0de660879679fd511f9833fe838631d6df3406ae980bc8a2951e4335a70f0599301dbe0189ca60a81542162b245eaa09376f1b3","ssdeep":"","tlshash":"8501d6d28920410f527222a969b01d37430529b4ae2a8fd00c862b0b3170eed4606196","first_seen":"2025-04-07T11:34:04.619296Z","last_seen":"2026-06-19T03:29:39.595716Z","times_seen":566,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/moonriver.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/moonriver.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 522\r\ncontent-disposition: inline; filename=\"moonriver.webp\"\r\netag: \"78fb8d51620ff169cf177a67d94036c6\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:29 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-08-07T02:20:46.597Z;desc=hit,rtt;dur=9,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=8842\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78fb8d51620ff169cf177a67d94036c6","sha1":"1ff6c4425c83349d6a4ad1ac99589fb642604065","sha256":"6e954d7716418feea8d1d9ab78657c1d2a7140ad3c26df19595e2e5e4a9c0595","sha512":"532a04351e29bcc2b51344704d526c268e4b67cf60f494c4790ae90749af025606eeaf867b3069dce3c8a7eb93991d2d00cbc48243d37db98c41d0c1041852e7","ssdeep":"","tlshash":"7ef0753fc3c4a85530763f83a137336c960e3d03a6931811520f12eae4b8d066643c5c","first_seen":"2025-04-07T11:34:04.600236Z","last_seen":"2026-06-03T10:20:46.38455Z","times_seen":704,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bad-sushi.top/\r\nOrigin: https://bad-sushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 96b34c19cd7e5697-OSL\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1475\u0026min_rtt=605\u0026rtt_var=1038\u0026sent=8\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3270\u0026recv_bytes=1271\u0026delivery_rate=5464150\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=da4cb5bc5bd5d2cb\u0026ts=143\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":28,"dns":4,"connect":1,"send":0,"wait":107,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.16.47.145","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bad-sushi.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://bad-sushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 6f7a43d62e1df4738c57314a6ce8a7ad\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4902,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2188b7f1b90a143020f7faf12d10e91f","sha1":"e6a95e4d574d05948b7c8517861a71e6f69b38b8","sha256":"4a8dd94310fc027a042dc9ca0311f20e9341084839e00b8d7a830ab52cdc8096","sha512":"08e8f648099fac2b075f96396f2f9056ac526f12e5843bc16d07fd725fcd74abeed4021a9ed64f53ef3e1dbb57a707ebee71bc51b230f5b5ee4200c2da1d7b1c","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:r5TB2SzAT/7kSRRrze3k","tlshash":"e6a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-17T17:24:07.906471Z","last_seen":"2026-08-09T15:35:30.717016Z","times_seen":4827,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.16.47.145","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bad-sushi.top/\r\nOrigin: https://bad-sushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T11:51:57.48642Z","times_seen":17870963,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21213\r\ncf-ray: 96b34c1cd9985694-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.22.2\r\nx-jsd-version-type: version\r\netag: W/\"133ba-WReNYqad43m10eNbyETxDuSJfM0\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230029-FRA, cache-lga21971-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 29298\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aPok5MvtiePPHJGfU9HqNvcwWsPLV%2FoXqzKwtWMFs974e9gtcwRq8b2v%2FeXwpIrgXLOzySVEam7ox218eLMIrHQkPz8WnMh1onOq04jdCKUpv2ZwYoILczWNpjliBoEKSrA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78778,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48078)","md5":"65940383743a18085781fdb15de27011","sha1":"59178d62a69de379b5d1e35bc844f10ee4897ccd","sha256":"51af1f280e04d65ed14aa4f91ce8cad26fcfad2c0fe355c54ecfbeaa6b567b2f","sha512":"ac172aaed145b763f1146a777df6ff9440b3de962bd83a05d455a69cc2f2eaa55d00e9da420d82e302bce26eb82b7e9a2b4ab1908985ae56ff00a80ea1e4ef4a","ssdeep":"768:czSRp5DI6wGsbJ/PWmM+ZEVxqFoRkme1LArQogJ5fRjYTYUhgC3X65Zx1+MmoeOA:cws6mJ/PXZnmwLUyegJlZAyQE/pbR+","tlshash":"3773f8916a04f03776ab41ae65d0e3047af99505fcb74854f42cc8804fe7d4f2ab7aba","first_seen":"2025-06-30T05:33:37.951502Z","last_seen":"2026-08-09T06:53:45.319521Z","times_seen":964,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":52,"dns":7,"connect":4,"send":0,"wait":11,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://app.sushi.com/images/logo.svg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://app.sushi.com/images/logo.svg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 918\r\ncontent-disposition: inline; filename=\"logo.webp\"\r\netag: \"48f98a26aea202ad7316b0f42dccb2ef\"\r\nlast-modified: Sun, 23 Jan 2022 00:08:27 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-08-07T02:20:46.609Z;desc=hit,rtt;dur=6,content-info;desc=\"width=32,height=32,owidth=512,oheight=512,obytes=4251\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48f98a26aea202ad7316b0f42dccb2ef","sha1":"97abff01d48d83db76784483b5d87ba3e2fa0ed8","sha256":"5b1ea5bb644f5266c0448e2fe3d405c757aa1e26749735ffeaad9802901fe73d","sha512":"bd80da4661c981b5430310e0db304e3079dbdb04c40f6b87975bfbda9e3af1462669ac986d66a7956c8757e50e5ed42955c67803680eba58621102f6feaa500b","ssdeep":"","tlshash":"5811bb45d2356255a639dc3306ec56ac2c7c7d543e3184d707763a9fd824c0213f5e4b","first_seen":"2025-04-07T11:34:04.596029Z","last_seen":"2026-06-03T10:20:46.383005Z","times_seen":707,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":90,"dns":51,"connect":1,"send":0,"wait":6,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/js/jquery.i18n.properties-1.0.9.js","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/js/jquery.i18n.properties-1.0.9.js HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 19 Aug 2022 19:39:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62ffe6ef-4756\"\r\nexpires: Thu, 07 Aug 2025 14:20:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18262,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"cf3466c221ea851913cdee4fa966c386","sha1":"4299bbb2c505780b927a1c61a25888ed0d2d49e3","sha256":"6baa624dc013c94e79f71f9af775848c574c995f88d0512370b3457f6cf1d60c","sha512":"d466e59d1c94a51f5462b461f4b25f154d2633a73983702991497351cbb3ce828d5cd346f4effb4954a11aa9168ee1d6338a975cd474e6844e22f6b946f25ff9","ssdeep":"192:c+oDJtkMWXZu2PclZbfXx85xiXwSUXdNE+qkid3tM65BtgcRyz/MWQIGs16SUJQX:cfqMWY2PqZmQooNsEA1IS9hv5jP","tlshash":"9482b6087a050d1e46b233b02abd2888da79c47b5521a0f5b8dc77543f7cda942e9ff9","first_seen":"2025-04-07T11:34:04.636019Z","last_seen":"2026-06-03T10:20:46.382475Z","times_seen":686,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/icons/icon-512x512.png","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:48.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/icons/icon-512x512.png HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 19 Aug 2022 19:39:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62ffe6f1-11d82\"\r\nexpires: Sat, 06 Sep 2025 02:20:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8dbad42c7d00c2930136f562702664bc","sha1":"7bfd2a25a6fc0af20b1d179fe2cfc188955a035a","sha256":"3902689b806083649d3c99ee6e6d35222c824562792a24d8c12de1d711ca6df6","sha512":"f7e223e7e7b6f7b386cacfc6a406231804634fb4b0abed619fac5af8e1e4842aebc9fa5e58d19dbf715b31bc8a8c5efad0e7e5276b64c832e7c3a0487bfc623d","ssdeep":"1536:43EQhVlYoWIC8WZa5WdVaCUKDcTRWf64FtJRgYFty1saicrtU0VzWLh:sEOlcIlWZa5WsKDioTJRnXylice6Ah","tlshash":"b263f12edf802d74eac55e4f3094fdd897ae8069b682f455a920c68561e43f9cfc482b","first_seen":"2025-04-07T11:34:04.631395Z","last_seen":"2026-06-03T10:20:46.353648Z","times_seen":701,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/css/da7b6eae53d62a5c.css","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/css/da7b6eae53d62a5c.css HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Aug 2022 09:46:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"630744f2-13ecb\"\r\nexpires: Thu, 07 Aug 2025 14:20:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":81611,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63844), with CRLF line terminators","md5":"6b1545a84bc7b83d4f98efa655fd93a4","sha1":"583759b7d6860fe64798e7bc86b0b17c17313eb3","sha256":"2b96c612708b06a35f2823df9bf439dc747dd03e7e8550de06720fed42a55ab9","sha512":"e5b9a9dae3e52db55201030828546534e8e88b6653b84120c2485b22f34b594b868422b8a469f9be228023a123b09c2949a9c939985ee12973362534792f7c67","ssdeep":"1536:Yk8/vqwvmwaUSqGcYhUB3M5HSMTuqNU+3Gh:Yk8/vqwvmwaUSqGcYhFwMTueU+3Gh","tlshash":"f583a46dba51103f7c2790f5c2a8fe9db11ab1c4df3626e6bd8221019be27f70c66614","first_seen":"2025-04-07T11:34:04.608474Z","last_seen":"2026-06-03T10:20:46.378871Z","times_seen":683,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/axios-8.2.11.min.js","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /axios-8.2.11.min.js HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 01 Aug 2025 07:53:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688c7260-33b481\"\r\nexpires: Thu, 07 Aug 2025 14:20:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3388545,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bbe095dfc7c996b3089cc1cfa34afa8e","sha1":"8f5e0f773d7c6c36ef7fa938f3ad3ecd43704590","sha256":"1913160453649de73e9f0a8e0e60b04b01369ac78a8dcf22a0117f475782a259","sha512":"896c96fbca6bd590db66c84086c113856fb4ec66eaa561ef99046c78094e88c72edf724d29726bc3b7664468ad4313c6abe6f36b6280bf05da2db9125a577902","ssdeep":"24576:0HxrQvjTCKdPD6x8OXXXkk999sb/YWmLkwsOukzMSPbg+lsVo5e:0RU7TCKdPmXXkk999CGkwdNZG","tlshash":"b92501c5298240a48f084bafd5ea2e49e5438f26d6c836fbed09ec057474f7181d66bf","first_seen":"2025-08-03T10:56:33.30465Z","last_seen":"2025-08-07T02:21:25.363888Z","times_seen":116,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 07:26:29 GMT","end":"Tue, 09 Sep 2025 08:26:26 GMT"},"fingerprint":{"sha1":"8E:B7:5D:9A:A8:64:5E:C2:9A:28:80:55:95:52:D1:88:E8:FC:DA:61","sha256":"A1:1D:06:95:42:1F:25:37:FA:B5:63:4D:9E:03:4C:B3:A6:D2:44:34:10:99:2D:40:07:35:CA:D4:06:42:DA:C8"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bad-sushi.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://bad-sushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nx-cache: false\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lfYGkTBHBYluq%2BinNFvIvD3gC%2FQr0lY%2FmgVscBYzrhlYR8FRk224Fgd5XhZprR7%2F7EVUcnDt%2B6Y8wJFhQ5%2B%2F4o0VVx6YNkgMnC68b9Ipz9%2Bt1Pn7YUl1ockO2uWTUYLv6ZGNkplk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 96b34c1cb8c856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5921\u0026min_rtt=458\u0026rtt_var=10870\u0026sent=10\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=3979\u0026recv_bytes=1535\u0026delivery_rate=6787500\u0026cwnd=255\u0026unsent_bytes=0\u0026cid=c4fb9406ca0adc13\u0026ts=607\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-09T15:35:30.721565Z","times_seen":5261,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/arbitrum-nova.svg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/arbitrum-nova.svg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 294\r\ncontent-disposition: inline; filename=\"arbitrum-nova.webp\"\r\netag: \"3db81c8998c1f444e61baf395ca605bf\"\r\nlast-modified: Tue, 09 Aug 2022 17:36:24 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=4;start=2025-08-07T02:20:46.611Z;desc=hit,rtt;dur=5,content-info;desc=\"width=32,height=32,owidth=128,oheight=128,obytes=1573\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":294,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3db81c8998c1f444e61baf395ca605bf","sha1":"91fffc820fb8c355371e5f6d3d1a25ab4b2dda0d","sha256":"73fc519d14480fede397b68e4681aef4e939dbc4de8de8a79d0f6b7566115758","sha512":"f040f30132acb95fec0153b798c055e87616bebd72592cebd04091b3a453bc42ee56a5e683a72fe325694439ccb7460017e1ebed012c70bcc63886d88eff2322","ssdeep":"","tlshash":"47e0275bc47d62848ce0f748d1473f577c3725847b4312476f9dcdd044172c7a151551","first_seen":"2025-04-07T11:34:04.625872Z","last_seen":"2026-06-03T10:20:46.386534Z","times_seen":669,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":63,"dns":40,"connect":21,"send":0,"wait":6,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/polygon.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/polygon.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 614\r\netag: \"5ad2c9ee0864d61261661a8e7fb87b08\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:28 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=5;start=2025-08-07T02:20:46.612Z;desc=hit,rtt;dur=5,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=3678\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"5ad2c9ee0864d61261661a8e7fb87b08","sha1":"ae7a5e25ee3da9251ae108e45137476d97719aaa","sha256":"a517e53a32d4dbfd9c0bba6d287a9a2fb5fc6af407579bec31eb2b751f5cbb83","sha512":"5b7c7c6fa0fd23260cf51faed0872f4f3aaed48b700076f03cc42dc8dc34532faa798991d610ddfb33243146448db71bbed2ddf854e54cc09791ac764ab2f9fd","ssdeep":"","tlshash":"eaf0c0271b819b82dc681f7d106057503bc5991064526ffa51c17d765bb50362c72349","first_seen":"2025-04-07T11:34:04.59879Z","last_seen":"2026-06-03T10:20:46.37534Z","times_seen":706,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":62,"dns":42,"connect":21,"send":0,"wait":7,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/js/jquery.min.js","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/js/jquery.min.js HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Aug 2022 03:38:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"63084021-1497b\"\r\nexpires: Thu, 07 Aug 2025 14:20:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84347,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"26aae2f13dc332df6e6f01e6657a03a0","sha1":"8cbb682f32cf5bf8702571399ccb57a77148f27b","sha256":"0108cf57a5359cdecc80699650b912a11731d0aeaec300d884a9d658ed96b295","sha512":"fb3c96f0ad4c712e1df1da8e8b3f687010e4722b4bea6c1f92270f03514aa6355e3fb48b0c15412423be1725c24dc5d1d2465eaf9f5c97436ec57c7d88219c9d","ssdeep":"1536:oP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrR:f+41hJiz6fhdlTqya98HrR","tlshash":"7883d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T12:04:04Z","last_seen":"2026-08-10T07:25:44.689004Z","times_seen":1094,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/layer/skin/layer.css","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:47.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/layer/skin/layer.css HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Jan 2022 05:27:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61d3dad6-36e0\"\r\nexpires: Thu, 07 Aug 2025 14:20:47 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14048,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13967), with CRLF line terminators","md5":"bc204604a91fcdddb0e0b2a2fda5ec52","sha1":"7b50547ac18b5443d4fd843e3c812ce3ff6a20fe","sha256":"37a4c15690401bff641efe29c6138421e9464e2fdb35d4cf72b7ffd6638fc687","sha512":"3c3974cb103e12ac6390562ca7d8937a609e778298df5285fdf009d3ffe61798002439340a121ece4d752c72c0c60e6130cbfe0497ee3462497d135fe4d660f3","ssdeep":"192:9OcW0PmLeWVrrzztBm0T9zBKgwBnsY5Cb+RX:9PW0ijVDJbTyGY5CGX","tlshash":"415202e144811299b0278611d6dcbeba32f88d53e5630dbef2573c1f874c6dba2b6247","first_seen":"2025-04-07T11:34:04.626874Z","last_seen":"2026-07-17T08:24:27.733641Z","times_seen":813,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Jun 2025 07:26:29 GMT","end":"Tue, 09 Sep 2025 08:26:26 GMT"},"fingerprint":{"sha1":"8E:B7:5D:9A:A8:64:5E:C2:9A:28:80:55:95:52:D1:88:E8:FC:DA:61","sha256":"A1:1D:06:95:42:1F:25:37:FA:B5:63:4D:9E:03:4C:B3:A6:D2:44:34:10:99:2D:40:07:35:CA:D4:06:42:DA:C8"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://bad-sushi.top/\r\nOrigin: https://bad-sushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\ncf-ray: 96b34c19df9756be-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=7AM%2FjZlI19P2sbmO4cXVl02kkDGdLqPxYfT4aHBA6wzS2rzuvTTk0Hx88wx5Hkc5MhXmTc3DR9xgwTlrgV4ZNYYM8BxJJlAyW6f7PJdFz%2BWcZAgAHwuwZa6yBju0mOb7xxdCWGCR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=561\u0026min_rtt=458\u0026rtt_var=199\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3274\u0026recv_bytes=1282\u0026delivery_rate=6787500\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=c4fb9406ca0adc13\u0026ts=357\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T11:51:57.48642Z","times_seen":17870963,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":26,"dns":1,"connect":4,"send":0,"wait":327,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/css/style.css","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/css/style.css HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Sep 2022 22:12:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"631faed8-497\"\r\nexpires: Thu, 07 Aug 2025 14:20:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1175,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"a39cc3af0664a35820a97bfb228a280e","sha1":"3698f5bff1b91601cf9b418d9b473a8be3eb9577","sha256":"d851aca3e8bfb7e6476ca07e419d693f131034563919b655760c64f23a09b9e7","sha512":"8a46dda2169f6e4e24f2be35f207f812f6a6b9c7a7ba226d75b72c083e9b3695751df5b8b03eac6d6014abd59a2698af73131bf0854f2fb0fc5f67902bd2610a","ssdeep":"","tlshash":"d421f11b9490420a91b7cf7564762b3bcd57594ec943734af883b254cf2eb570a70d50","first_seen":"2025-04-07T11:34:04.602753Z","last_seen":"2026-06-03T10:20:46.354189Z","times_seen":684,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bad-sushi.top/static/image/bad-1.png","fqdn":"bad-sushi.top","domain":"bad-sushi.top","tld":"top"},"ip":{"addr":"107.172.83.150","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bad-sushi.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 May 2025 14:33:36 GMT","end":"Sun, 17 Aug 2025 14:33:35 GMT"},"fingerprint":{"sha1":"E4:15:B3:01:48:7F:58:46:12:46:E1:F0:02:40:F8:16:74:40:02:DA","sha256":"1D:6C:72:22:D5:36:5D:7A:8E:99:3B:D9:C5:D3:4D:B8:36:A9:38:C8:B4:1D:A4:12:CA:60:F4:6C:D4:19:F1:0C"}}},"request":{"raw":"GET /static/image/bad-1.png HTTP/1.1\r\nHost: bad-sushi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 16 Aug 2023 00:57:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64dc1ee8-5f40\"\r\nexpires: Sat, 06 Sep 2025 02:20:46 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"597f0ebaa6c72b36c75d56885385b6c4","sha1":"01873f3c36af4ac86b50d0573a351f0a406b9528","sha256":"8bf104d384b4cc8a2a937746317798e69a5bf968d62405ed97bfd8e973086e5f","sha512":"6d6118006cc47d2eff6bb6379ff6be1526020ed5d1dea23d1a4a58e7a963e767ab81b648ff4367d5b8684c8e769e72c250f2fc34922ec3e2497e82be41fef5d0","ssdeep":"384:eSgj7xIpnS1OnCzm0OkgSrjCCRKgEk9s8U7yftvPAkrA4k/n2Ika+87lyIVOZYNC:eSIkSxzm0O6FMk70ySkE4I2KFVOZSC","tlshash":"4eb2f10df14c8a029aee4baba0b9643078050381625b54fd7ad7dfd7f9ae4c414ace95","first_seen":"2025-08-05T20:45:25.188144Z","last_seen":"2025-08-07T02:21:19.91607Z","times_seen":2,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"res.cloudinary.com/sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/bsc.jpg","fqdn":"res.cloudinary.com","domain":"cloudinary.com","tld":"com"},"ip":{"addr":"2.18.172.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:46.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cloudinary.com","organization":"Cloudinary Ltd"},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Wed, 18 Dec 2024 12:38:55 GMT","end":"Wed, 14 Jan 2026 15:36:44 GMT"},"fingerprint":{"sha1":"3C:38:41:3E:81:35:9E:7E:6D:34:B2:E4:FB:E2:0B:55:E7:BC:5D:73","sha256":"9E:96:F3:6A:FA:51:39:20:97:7E:1A:D2:2F:6C:88:79:5F:BB:D8:55:56:68:5D:D7:33:F9:B9:7C:9B:EF:3D:59"}}},"request":{"raw":"GET /sushi-cdn/image/fetch/f_auto,c_limit,w_32,q_auto/https://raw.githubusercontent.com/sushiswap/icons/master/network/bsc.jpg HTTP/1.1\r\nHost: res.cloudinary.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bad-sushi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 658\r\netag: \"073f20ab692964f421b8488218f66b18\"\r\nlast-modified: Sat, 22 Jan 2022 23:59:13 GMT\r\ndate: Thu, 07 Aug 2025 02:20:46 GMT\r\ncache-control: private, no-transform, max-age=604800\r\naccess-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Robots-Tag,X-Content-Type-Options\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ntiming-allow-origin: *\r\nserver: Cloudinary\r\nstrict-transport-security: max-age=604800\r\nvary: Accept,User-Agent,Save-Data\r\nx-content-type-options: nosniff\r\nserver-timing: cld-akam;dur=4;start=2025-08-07T02:20:46.609Z;desc=hit,rtt;dur=6,content-info;desc=\"width=32,height=32,owidth=102,oheight=102,obytes=10257\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":658,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"073f20ab692964f421b8488218f66b18","sha1":"934b809e8d32824a07bc3ec5f978d2ecf970ded5","sha256":"de9bbb1d1f6bc48bec47f6ea94a22b56364333b23652ed08c6dfc200e7ff7a73","sha512":"dc9afa0cba6818361b29e99e0efdacd720c17b2b9e0bafc535aa6aeaf28084dedf311be80161f2ae0dcf4ea07e59b554303ac0a8cfa9a9043264e01a0306ac1f","ssdeep":"","tlshash":"4001dd237448e52acdf6ab3160105378675a614e925e51cebc9590b4bf4a85d2804e66","first_seen":"2025-04-07T11:34:04.629691Z","last_seen":"2026-06-03T10:20:46.374656Z","times_seen":706,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":62,"dns":52,"connect":2,"send":0,"wait":7,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.16.47.145","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bad-sushi.top/","date":"2025-08-07T02:20:52.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bad-sushi.top/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://bad-sushi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 Aug 2025 02:20:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 2cc7d0be982dbecc697ffd464e188b58\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-09T15:35:30.721565Z","times_seen":5261,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}