{"report_id":"7296a399-bd82-4de8-a1e7-f72757c7b2e9","version":6,"status":"done","tags":[],"date":"2025-10-15T06:06:13Z","url":{"schema":"http","addr":"defirew.com","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"172.67.203.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"defirew.com/#/","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"title":"DeFi"},"submit":{"url":{"schema":"http","addr":"defirew.com","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"172.67.203.244","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-19T06:06:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2025-10-08T11:41:56.664577Z","alert_count":0,"request_count":13,"received_data":36087,"sent_data":7586,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":6,"received_data":174240,"sent_data":3254,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rpc.walletconnect.org","ip":{"addr":"52.58.124.212","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":891779,"first_seen":"2023-02-11T03:06:43Z","last_seen":"2025-10-12T05:57:22.190688Z","alert_count":0,"request_count":1,"received_data":1576,"sent_data":524,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":3,"received_data":26969,"sent_data":1440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"defirew.com","ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":40,"request_count":41,"received_data":6569235,"sent_data":20269,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"defirew.com/","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ef257788d9bde64210616757ab004c3","sha1":"e137bec9e6bbec104a170b99134b907624179f99","sha256":"c3b90278496032d1ee33dd8386ead6b62420d242b6ff097bad02c90d05ba678f","sha512":"407187ce9dc56e217ad443ee391499bf0f9aadc8b0326e12990e3f36752d93e0650b1f7415b3430576a152eaa16eb01437c5be32a67a4523120e949ea3ad73e0","ssdeep":"","tlshash":"a0d012cf0191860627f36413ce473204b17301ef4848a9017d0c46907f5835f9b2ebca","size":201,"data":"","first_seen":"2025-03-03T01:24:27.403834Z","last_seen":"2026-04-18T04:17:10.312314Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/index.4baaa34e.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0190c6507f11b298903470cc04b91978","sha1":"0704b0b461cfa844e1b98e75c148066280ddee24","sha256":"715cbd01379dd852d509a872284cdc05b3f008ca3867f114c96239b498640e52","sha512":"82eb1fbb7a30ecc7e568c163b182b9e72c10f8dd12961a4e87c66cef49fd5ca05b8709da10884b15df7e9a42e7bce2001f8f8eec042aa57c0638e8e73d84ac66","ssdeep":"24576:APK8teCYl43C0TDDDs2Ua/JuvKFuqtrHmQiKSLYV0:AJUa/MvwrHM","tlshash":"59258d7633ca3035079a528670de3105f3ba5d36b609a0f8e5e8895a24f1b15d1bff3a","size":1027358,"data":"","first_seen":"2025-10-14T15:50:45.288996Z","last_seen":"2025-10-15T06:12:03.861744Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/5911.4b6e4d0c.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93c33652ba4626a2e5c98806c2d58b12","sha1":"ac72a814beebb510e2ed2f26df9b545b06bae8b4","sha256":"18f0436c36ac54df28cb22347fe6a71396acf1ffdf78e26d17298d0299c7e8a3","sha512":"4638aaa5fce9ab0bd3102a90b78155ef8079bc6136ede608215cdf5ff1aae52d6abd870b7e96b2e316b8540b8411fd2848dbe4240d3b9539d0e2ca02a3ebcda8","ssdeep":"48:AQVQNVTILM559VWndUZvzLieeo259CfTZ/D1YD84dCCLZP6gJlNBpStN64BX6H8Z:6OM5lEiL6obc7UhnKBQkMp","tlshash":"6bd1a995a1d2d0a4677dec536a8688e3ea3733792e4d34d0fc949f8807f2a47d17206e","size":6685,"data":"","first_seen":"2025-10-14T15:50:45.078608Z","last_seen":"2025-10-15T06:12:03.563411Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/2202.36a933e2.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5a1556c2b2627c6af310d9c2e3c0f7b","sha1":"90795e4a36e6cfb509600722e3f02e52189c6181","sha256":"4f3ca1309ebbe033018c4f0571d3ae2256d47389e8d7f99b53c77200b55026b6","sha512":"9c9ebbbdb70e160fe6cb56e3faa76ed981ec5fa1c1ac1f1d71347e68ff0e539a714a92f65cfb48b0d46ff056002da33e826baeba4c6907eed8123bfb577b1b9c","ssdeep":"768:8QXSyz5Yw1u/B47aPPJRJjThbd5ZVt0eiNgbp0nhn:qqk7NhJohn","tlshash":"5fd20bd2f3da206d9bf83684555f2100b154bee5a80ac96db9bc38e715ec401e47afbc","size":29032,"data":"","first_seen":"2025-10-11T04:55:45.231725Z","last_seen":"2025-10-23T13:03:10.339223Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/3367.f43dab1c.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d21275f4f7b796b921c043202d90cae","sha1":"dcd1cb106d1c2f58e2baedbb09ddb2196d6e9320","sha256":"b687a38e695a8be7e587b3239d3a9d6ce409f99a6ba08058c73bfd4a8d94081f","sha512":"bb0f73fb82037820bf23ebc2b43046271b3b81a1c8ceb8f9df497c8dbca8027395ac15b196e9698878d8a9f8c5fc82816e21331efcb3790125146c0f65dc8b6e","ssdeep":"","tlshash":"ceb02b502c857a3c33bb31d004c5035c28a72060b41da0d32f710c70c061c4c06b00cd","size":126,"data":"","first_seen":"2025-08-01T10:27:47.869873Z","last_seen":"2026-01-05T00:27:58.952847Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/5107.b980a43d.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9da5f8c83a21257226a6f4d577cc8504","sha1":"71a26812300b55e258dcd1eadafdc9d64b8d15ba","sha256":"fa4b72ab1e340b78304ac247069f8075b5c62dcb2e6b2e20076cc56596f84e03","sha512":"18bfbd7ed4c3fb8e08c29b6be27c4561275f3ac6280cdfb36bd18e4b92a2d555051ab0535caba0a2f250e58c1de7e393345bee6255991710ceabce5981001879","ssdeep":"1536:Yya0LAx37TK4GvsLIou868l845Xm0cAjRk4aq6+Z:YpiAxS4KMIou8Vl84VmJTY","tlshash":"2b537c15a18be4ffec6d6061a10e2a30f4793ff58061e44af63cc96596d8d64370ebac","size":61169,"data":"","first_seen":"2025-10-15T06:03:32.973946Z","last_seen":"2025-10-15T06:06:22.830335Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/1979.f816e099.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1c0d8b048322b7fb6c056a1e4c4f730","sha1":"f3715cbb7a394ad902fcc0c3adbc7bbd4aab776c","sha256":"6037b49184a916c4a2213a5203af5ecfb4df5b46f1b9263fcc2e2dc60892182e","sha512":"11a3959a2860e6db9c061f15fdc4986887ad9eb5a00516ff3b018cc39e50295f9c82be21f505e3f8355cb5d0910bfe14acb72e22ae2041bf184f091b858be9f6","ssdeep":"3072:GpeZxPKUnVs9ZlAzIpjxA/tiHuKitrB7t:LZxPKus/HDA1iHuXtb","tlshash":"55a34b9032a0f13157eb50e770765207e334692cb84c847cb6addcebad69a5d6326f38","size":104110,"data":"","first_seen":"2025-07-27T10:11:44.211872Z","last_seen":"2026-01-05T00:27:58.968864Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/3860.cb579428.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6643a0e97215ed9025bed712a985e6e","sha1":"67ea12b9303aaad1662b94f407ce46dd748db501","sha256":"8e8e7bc6d5fe7ce87a5362458de45dc71e91a4a98d66dd40af32a73cfa07b965","sha512":"d5a065ee888bb9cb546c8c97ae5fe42f9a94523544c08a003e8610ca489c2fd0519fc7d5db1fb1c753bdde6547f005c2bbc065e0d166d52ca1330dc725622117","ssdeep":"6144:xpQQ82ol7YDyomKCYzLrM+xt2BaN17Cf2/slpXaFO+u:zQQ82o5Y2ok2marCO/cp0OH","tlshash":"45b419dcb291b425439721b0447f150fe33a694da80a85a8f669f4da7cbc44e623bf7c","size":498327,"data":"","first_seen":"2025-07-27T10:11:44.190937Z","last_seen":"2026-01-05T00:27:59.008559Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/js/web3.min.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce5bd54ade787e3757d0d32ff267280a","sha1":"33daa933561e55f9988e2be25448078f97ef0db2","sha256":"f03340295d792adb763c777eaa96039aa831c2402bd7cbc970db44931fa736b8","sha512":"11ca21748cd36a3ee4bcfd3298cdd188ac5a9ef7f01af8ecae6a2e15139e2dbb485cd5e04010d479eeb0adfecbe1b8304a25c66512e2d8094390e4385ab08a62","ssdeep":"6144:iNajiG1YOdqCibdPB8c118X1Unf9F9CvU9sT6Q479FwwQPvi6naRq3A7Hpa:ic+skHYW79FlDpa","tlshash":"98d44b847690f0a10bdb50e554b70002f334b965701d94a8b7b99cebbea9ecda137f39","size":642428,"data":"","first_seen":"2024-12-04T22:03:33.643534Z","last_seen":"2026-07-27T14:16:57.648471Z","times_seen":2211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/chunk-vendors.a85b18f7.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e0c81a5e0b69d3aa20a6e7bcd142a76","sha1":"37d004cb594a9805531db934df3aea7de117e444","sha256":"d78bd47b3c1c32d7c0e2803cc73ae62c98769d88101cce3c61466ed5cba8bc3b","sha512":"6d0321523f8a4564f891498949deec62cf0f5b98e46e377fb54a21280d7270a4bbc57406fc311c1df001b6cf4f163ca0b058c46e34503194be7a8ffc1f78713d","ssdeep":"3072:BYFU1rsrvnfMdJ3tNafe8kW+MWo343wXJUXG4NoaS12DSuHFo99cOYq3i:qkr+Mab4dGiHy99vy","tlshash":"a754f6cdb291b0b207e760f5402f150bf23b6959a80e84a4f665e4e5acbd94e9137f3c","size":292741,"data":"","first_seen":"2025-07-27T10:11:44.15378Z","last_seen":"2026-04-18T04:17:10.308533Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/4110.c0e51aba.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab6d7940c95fcc8a05c0964394c104af","sha1":"e61e91158d05968a78c0ca58c683e5862241fe9d","sha256":"708c69cd561e30a97b2f0a3c8a21d9aa2ed2449f055d4fe8deebbbc6a0f1ed95","sha512":"8c64767f4993cbffc0ad1164f18ffc678d41381b13e09c3f51610780719fae4ee1c162dbce5e0ea62b082790b89aeafdff8a9dee7be60507957ae613f7ceeda6","ssdeep":"49152:DTKoPRK8TruXxo8848koAUBGDs23yFOzE7WfbYGNgg:NRTbIyFFg","tlshash":"a1955a8073a1f039179751e858bb1401f334a45a740d846cb7ece8f7afa9989897bf39","size":2048254,"data":"","first_seen":"2025-08-11T20:59:06.6054Z","last_seen":"2025-11-21T14:29:57.643325Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/186.462eabe9.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"269ded748a8aeb0f69c55faefc243f6b","sha1":"bb8807ad206337a819f94f3ee2b5a72e335f064a","sha256":"7583113bc766027dd910e5f1a6ac7d55931c0d59f78f6eac8481000a4f8d8217","sha512":"3d04e62ce1faa3aff540c3a61e5f89323bdb238e748c23861ec4dda128ec8c0eb3ede43ac698c01bfa6a7fe0c8dba3c1387252a245170a804679c9bc9675bd67","ssdeep":"768:BFvWbP4R5q6QBphgBP4R30e4G8GSQAopVL+AalfSSw3cQH0EeF:BFObP4R5q6QVR30e4G8GzAopTbcQH0EW","tlshash":"93437d20a8d3e27add6fa151514e3930e4363fe4d420d087fa788cb4a9d5d64671eafc","size":55273,"data":"","first_seen":"2025-10-15T06:03:32.998908Z","last_seen":"2025-10-15T06:06:22.918904Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/1060.cd1c15f9.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a8ff5dcbef8709830accc0137297c77","sha1":"f74ffc4cba02e13be598fa504161cc0cee4e9081","sha256":"f63aefb5515f3d5a3b4e58853fda77a18c9d7f80c9f05bcc6ef63387ad522893","sha512":"2f19676d22527b4434d528b89027f5346c12a320d81f9101e8dd8b6c5a303cf627ceba8166208a5e7b45082f3aebda0dd8a3f4e987c01dc56417a36e6332559d","ssdeep":"192:Qsp4Bmwly7Gn7+XLgxepe+Z/D8q0PHO8PPHAUUMiWAf+pPV8vDzKkgJNWte8Vi2i:QQcmwc7Gn7+X0xAxZ/tmJL6of","tlshash":"49f1ea58666398bd2622f3ca17ff07542124b4431c17dcbe32fc55d84f8866c1da6e76","size":7692,"data":"","first_seen":"2025-07-27T10:11:44.195259Z","last_seen":"2025-12-03T09:18:27.885765Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fredoka+One\u0026family=Montserrat:wght@400;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:50.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Fredoka+One\u0026family=Montserrat:wght@400;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Oct 2025 06:05:50 GMT\r\ndate: Wed, 15 Oct 2025 06:05:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10051,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dafaff8cc1c7415c879444dda500ba0b","sha1":"0d03c6ef2e351d9a2c7a0a6024e85c566e2cec03","sha256":"00e18884c0a1a6b3ced77016a2f511d68d62878215ff7df118b0b87c7c1e6a46","sha512":"b2e2d9e1e4d057643e76b72760611c6c4bd0eaf57a4f9cf087fb8301eaf92577128014800f67cc7fa15aaaaade73f04ce6dd1e7c14f645fc3dddde31ac861375","ssdeep":"192:2wbCRo7TbOmupRS719Ocu6RB7W+OjuTRU7XPOKuMR77wIO5u8:byQ4ajdfMfPE","tlshash":"2322bc91105ba500e7472cc923cf7e26dd4e61627494c579bffe2ca8adeac224325b3d","first_seen":"2025-09-18T15:29:39.116952Z","last_seen":"2026-07-08T23:41:54.079162Z","times_seen":140,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":57,"dns":0,"connect":7,"send":0,"wait":19,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/5911.4b6e4d0c.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:53.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/5911.4b6e4d0c.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:53 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"68ee0838-1a1d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSyFyiEz5ovJn%2Fy3jiCk5CinBws09icjHVmIIBCuOziwKXX1LcqBlNsYbne2Z%2FXn7I7vyqB2xJO5ijj23WOdypDTIg%2BItXxzAbON\"}]}\r\ncf-ray: 98ed20969e9f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6685,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6685), with no line terminators","md5":"93c33652ba4626a2e5c98806c2d58b12","sha1":"ac72a814beebb510e2ed2f26df9b545b06bae8b4","sha256":"18f0436c36ac54df28cb22347fe6a71396acf1ffdf78e26d17298d0299c7e8a3","sha512":"4638aaa5fce9ab0bd3102a90b78155ef8079bc6136ede608215cdf5ff1aae52d6abd870b7e96b2e316b8540b8411fd2848dbe4240d3b9539d0e2ca02a3ebcda8","ssdeep":"48:AQVQNVTILM559VWndUZvzLieeo259CfTZ/D1YD84dCCLZP6gJlNBpStN64BX6H8Z:6OM5lEiL6obc7UhnKBQkMp","tlshash":"6bd1a995a1d2d0a4677dec536a8688e3ea3733792e4d34d0fc949f8807f2a47d17206e","first_seen":"2025-10-14T15:50:45.078608Z","last_seen":"2025-10-15T06:12:03.563411Z","times_seen":9,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/team.d15770ac.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/team.d15770ac.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 14143\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-373f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrCY%2FAEeWlSIh1tsrxPHA%2FOiZyQTz38YUvSTaYM%2F6GBc4Fqhiu1d6Mlun1bKGsk8QCyOKOZOnCI%2FPBw335ATAUiA7MHWLkhJEPc3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20a999432efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 320, 8-bit/color RGBA, non-interlaced","md5":"05c4ba342a51f3e4a7527a6433e00397","sha1":"72e069a58f80db92d0526ab4d3c511ef6147f0e1","sha256":"9068b3a3eb2491602f4d3fda29ad0cf3572a55faf51a965db5de0e0139564cc3","sha512":"22d14c58e0ccea035624b429fb6961517249268548c489ad09dd60d204d7ae1a26a4eaf6f9d32f261516a900408146139ad14ed322021f5c621a6047510607ab","ssdeep":"384:2iIoMRn6hBcuOCsjU7DNLUX4VKwse/4v9zfi2bmFL:2iIoM8q5ORwpLH62s","tlshash":"a252c1d85a6fc649ecee9497a647673f42f70da3c8b332531122f8160812c0e419fb5d","first_seen":"2025-08-01T10:27:47.898655Z","last_seen":"2026-07-15T03:56:36.786241Z","times_seen":65,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":606,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/icon-withdraw.9b673b19.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/icon-withdraw.9b673b19.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 33267\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-81f3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhHIy3CNd069xGAtPEaswNb1AIeAE4TRsPwgQWlKk5B1%2FJVqGeifkBgcXdskO2ORSnB4c%2B2yzfI2dpjhYggOKlRNqf5r%2BmgEKjdZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b48a752efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 177 x 177, 8-bit/color RGBA, non-interlaced","md5":"293000c552221501eb62bbce2ac92f05","sha1":"109077da885e235a5d69a58f20e13559b75429b8","sha256":"357ca3560727f5e8364abef9f0395172dc3a8aca83311263a57fbfff83c4a32d","sha512":"6b3e2c083469aa410c6181f4e006078e601e35d52ef50b2ae21e387e2ecbe5638eb3e4a421b0636a354ccc7a91dddb7109daf450497e663209401f87b5513d41","ssdeep":"768:fH6t1ooDZIvURMlZuD0Zd60esF00r9LOeX4VAinTGjG:fH6t7ZISMl4D0ZMgF00Zyc4VdnTGjG","tlshash":"b3e2f161e2f224bdf0e6ef65e00deee41bde540252d671601cb997d22ccb631c051bea","first_seen":"2025-09-19T04:24:17.64155Z","last_seen":"2026-07-15T03:56:36.784407Z","times_seen":62,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/41d04d42-da3b-4453-8506-668cc0727900?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /public/getAssetImage/41d04d42-da3b-4453-8506-668cc0727900?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1452\r\nserver: cloudflare\r\ncf-ray: 98ed20ba2d830b59-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 80168\r\ncache-control: public, max-age=31536000\r\netag: \"cfIBgbS-WAFgZUOOKJGP6fnCtOfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:58 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=294+2 c=0+2 v=2025.7.3 l=1452 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a93dd349a5fd1ed9361de97195e3e09c","sha1":"84c1f402075d3d247d52ba8df9ec30272fca1f58","sha256":"a1e40b02198365213323c48f1ccd4b2ea8945df4ee94617faf8232ba4c19855a","sha512":"b4f12e7697181c9f5045636731012f5df336975d0c4245afd5afea9c628f11d0f1a6b31fb9e4a95e6277d185c2acf471ac4e8a7d32b8958d9659906a116c5ddb","ssdeep":"","tlshash":"4531a743a76c94a24493f4017b88cbce1d24641b7926c8fa22a846c8e5bed41c269cf5","first_seen":"2024-07-07T11:58:42Z","last_seen":"2026-07-25T16:20:04.445056Z","times_seen":1218,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":66,"dns":1,"connect":1,"send":0,"wait":42,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9\u0026page=1\u0026entries=3\u0026include=f2436c67184f158d1beda5df53298ee84abfc367581e4505134b5bcf5f46697d%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2Cc03dfee351b6fcc421b4494ea33b9d4b92a984f87aa76d1663bb28705e95034a","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /getWallets?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9\u0026page=1\u0026entries=3\u0026include=f2436c67184f158d1beda5df53298ee84abfc367581e4505134b5bcf5f46697d%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2Cc03dfee351b6fcc421b4494ea33b9d4b92a984f87aa76d1663bb28705e95034a HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 98ed20ba2d900b59-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=43200\r\nexpires: Wed, 15 Oct 2025 18:05:58 GMT\r\nlast-modified: Wed, 15 Oct 2025 06:05:58 GMT\r\ncf-placement: local-OSL\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4048,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d3b094ef8010b7d680197e245e3faad0","sha1":"c4b96e2eaee5df456ccd355242df6a45f02adcd2","sha256":"5a3e89c6d26a24758b721c83704d6c210c653a481db542a952f11c9d7fcdd29a","sha512":"d3390bc2ed6b4b854d5f2a556ad64a90362e7813825be255c8d2e4ea5d4cd2258a50e30e6de91cd017022acd6c71d8e7cb9ea014cc8d4b67cde36fd4c7ddf884","ssdeep":"","tlshash":"8e81739f4bc09db68f3487c4f55ee9eed43ed04b81cd68daa1b2893480fe9976212061","first_seen":"2025-10-15T06:06:22.705921Z","last_seen":"2025-10-15T06:06:22.745962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":72,"dns":1,"connect":1,"send":0,"wait":50,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/73f6f52f-7862-49e7-bb85-ba93ab72cc00?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /getWalletImage/73f6f52f-7862-49e7-bb85-ba93ab72cc00?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1000\r\nserver: cloudflare\r\ncf-ray: 98ed20bb7e9e0b59-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18906\r\ncache-control: public, max-age=31536000\r\netag: \"cfRMNMx7h0m2-_fAD9P7SygyPPfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:59 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=21+3 c=0+3 v=2025.10.7 l=1000 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7aae514c4eada8141a37a9035f55e164","sha1":"d25d7fbc63b22b825098116ebbd65896f6ed6bc5","sha256":"e5710984e7f46092329faf76466920cec1f9fef2975e3f0bae48ed87d06aa9a0","sha512":"e888f76d362655ca1064e7359d96ebb8009c92c3a52534110f9d46c06e59dd44ae71c0c28c69c22d0c6ff23d5625135792f40c7904b690a07c99b392904ebb04","ssdeep":"","tlshash":"4e11c89d4bf55e17d356d474901f5f8304b2f6ad0c51c261cac6649d44740dc3e4691f","first_seen":"2024-06-14T11:01:45Z","last_seen":"2026-07-27T13:56:26.721778Z","times_seen":266,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/receive.63fc7435.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/receive.63fc7435.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 81208\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-13d38\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P51oXn%2BDkCCWXj%2BbuCe3zk8X56QRNAYn7IRO7AIfQ%2BOnoNdyabcY5LlFI23jtKMDN4feOwT6LYeSP8yzELrqD0gx8AJA1bVCY5zr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20a999422efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 291 x 291, 8-bit/color RGBA, non-interlaced","md5":"1187a7bb85e6fc3978c34bfb3a378f37","sha1":"93d67895bb111b72535941db67349e44dc87e7e3","sha256":"81dd8f18f8b69fb15074a1f6c67cdfdbe4c18de1910f95804a947f75a43d0312","sha512":"2482f43aba935aeb701dbb31d06af8702920cb6c7a0b3a37d7ef5474a21c9a876ce47476ca58e79c3594738fbd170dae764e8e9d66c18bf87f0be4c4f32344df","ssdeep":"1536:Gu9RQzCB9g/lFhFgnVlTSDWrFCoOATMSous+p78dgfnZBPx9QQUQqhXD:LWzCB9g/5FgnVFRFCoOANs+zfR94Qu","tlshash":"5e830237f8dbce1d1ea6017b0af2145399684db448e1a995773916fdbf82c9ed0409cc","first_seen":"2025-08-01T10:27:47.88346Z","last_seen":"2026-07-15T03:56:36.806125Z","times_seen":65,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/js/web3.min.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:50.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /js/web3.min.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0IsCxu%2B0Q0c2px5mk8KJVStYwdK%2F%2BZ3FgaiXEVk%2F203Vcn0QV%2BFT6d1tJ9U%2B1JCTxrtqGz%2B5sTp5qFYmOffTBtnZZoPZgQOMAEQ\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68ee0838-9cd7c\"\r\ncontent-encoding: br\r\ncf-ray: 98ed20876a4c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":642428,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"ce5bd54ade787e3757d0d32ff267280a","sha1":"33daa933561e55f9988e2be25448078f97ef0db2","sha256":"f03340295d792adb763c777eaa96039aa831c2402bd7cbc970db44931fa736b8","sha512":"11ca21748cd36a3ee4bcfd3298cdd188ac5a9ef7f01af8ecae6a2e15139e2dbb485cd5e04010d479eeb0adfecbe1b8304a25c66512e2d8094390e4385ab08a62","ssdeep":"6144:iNajiG1YOdqCibdPB8c118X1Unf9F9CvU9sT6Q479FwwQPvi6naRq3A7Hpa:ic+skHYW79FlDpa","tlshash":"98d44b847690f0a10bdb50e554b70002f334b965701d94a8b7b99cebbea9ecda137f39","first_seen":"2024-12-04T22:03:33.643534Z","last_seen":"2026-07-27T14:16:57.648471Z","times_seen":2211,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/css/chunk-vendors.8a8f331d.css","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:50.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/css/chunk-vendors.8a8f331d.css HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3ox5%2FNVhlFeUkaZQe3SG6GJrHn6Y3m9Qt4hHDZwI4ge00tQzVQOK09h50BgrguLrx0sDJg8vvjuMSXvf%2BHn34IL5PLyENYkuXjs\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68ee0837-12845\"\r\ncontent-encoding: br\r\ncf-ray: 98ed20876a591525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75845,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"308ae22f281248e9484c5fd850b7920f","sha1":"8f2c94b913364e7e30ecaff9ec2f1bf004918419","sha256":"a085c38ed450e695a4de242b664303261544306b41881b95d82db9c45aa8859d","sha512":"acae075ec8d49495750c2a89b8712a4cc25c5c432bb75f741eb40f378fcd03a9b41e5c02ea0af9248c1d5be26fb0c9c0c8ce43c211506128fd779f1819500c68","ssdeep":"1536:VfQbFNJ+jqkiHc4rx3WqyrtpqoSWEDZQU1k1fM:VSrxmNH9yDdgfM","tlshash":"1673f8b699c412dc732bc912cfc0f6e8d259e222d9810de5f206661e4fd7b8511a6f3e","first_seen":"2025-07-27T10:11:44.193341Z","last_seen":"2026-06-17T20:08:34.730685Z","times_seen":148,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:54.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Poppins:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Oct 2025 06:05:54 GMT\r\ndate: Wed, 15 Oct 2025 06:05:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"04bbe03bab4d95eb132eb967c4aa89f9","sha1":"e82318720b95b16b2228a5ebc6a9164e9027d7a7","sha256":"fad5e5a7350f92d0c278508e0f7057d993e8db7d552ebd25336dac7fadce6047","sha512":"cda84549edda5cf738349eb46318b0dd90848e07047b5a6bc54338aebee1b858e26ea07e8253efb8949cb1a2b4a5ad165f19489c61e8711ea2f5233a9a49e1f8","ssdeep":"96:SO1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEauN3OxMacOxMaUJc+ukOxMarN3OpQ:4hHdPgKQFVwa3RzJZ","tlshash":"0fa1aed1087be114ab831cc123ce7d37ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-19T04:24:17.708991Z","last_seen":"2026-07-26T18:19:29.271199Z","times_seen":1171,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/icon-earn.d7c35d02.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/icon-earn.d7c35d02.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 30872\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-7898\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rtw4PaLvkU3vQ5yPccp0BK5dkbtLtrGjrLQNkJZaWNBWf%2BGUt6OWqjDzdhbvvJ7O79x26omPEZ%2FLPgreD%2ByNQa2WjcuKom%2FHaTwZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b48a762efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 153 x 153, 8-bit/color RGBA, non-interlaced","md5":"188b3ed41ce6ace45ade49c45d3e164e","sha1":"1b1d8f726268b00105d66e3c2ba8d4875a4f42a4","sha256":"f48c8183b49713a1bfa1fe472e6aa8b853217340148a71ace28dc79a8c6db570","sha512":"cb770076a6fed668df340e04c09898bbe472e2dcba0b4ca377f7850c46afb579ef6326e581040248762dad5a0aec8eed74509f49c78ef6b5e36928ace7ed1b5c","ssdeep":"768:DRcn6PphgDZf4ZNfOiCPX703nUMLvdig1mzOE33nZCyy5eN:DG6BhcZAKnrQUA1Q6E3pRy5eN","tlshash":"03d2e09d66b36182a07b4a72c049c3ab663dcf374062bb9df5bb0d16ac75db5b1e0800","first_seen":"2025-09-19T04:24:17.698619Z","last_seen":"2026-07-15T03:56:36.820309Z","times_seen":63,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/radial-bg.17585ae6.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/radial-bg.17585ae6.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 84502\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-14a16\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BdjpU4L9%2B0yH0QBzTCWrWSDEbpfM69Epvvi9xui0dLeN%2B8d92U8e7s3jeJ%2FXGkpYzunJhhRzMCscT0t%2FlFFNPW0790cs3Ifwd2VD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b4aa7d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84502,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 341 x 675, 8-bit/color RGBA, non-interlaced","md5":"23e63822ad18e8970e93d4c87e57bc95","sha1":"d5f248217c7d800bf36d599e8afb980552aeb801","sha256":"8ada1369ef6018dfd70c15da68c1aeeef391da6a3cebd92812c0cf0dab53dea3","sha512":"95b4ad452e55a3c72b4e023a47b7f7d8d476f40278342f5ba8c2ec491c21cbd0cf0b84e9c1453b25153b1e555122e1753df0ddbb77578b171887f7456a367dff","ssdeep":"1536:KkoP7cIQF7fqmaUw6By8EOjzBohCd9M8YSUm+s89pDO2:5oot17aUw6By8EOjq4M8YSG7O2","tlshash":"c1830291d69bc9716dd921f317fe36ec084129b54d16f8c912cf28e163ac903dc8aee2","first_seen":"2025-08-01T10:27:47.829971Z","last_seen":"2026-06-17T20:08:34.737285Z","times_seen":64,"resource_available":false,"data":null}},"time_used":967,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":385,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/css/index.8dfff516.css","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:50.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/css/index.8dfff516.css HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BJZT6NAB4SIATZCsdHZ6BSCqJ%2BxdOF%2FX55g%2F1yAah4sGIGrdbYYbYLXBSl5TPqpfDzr6d3%2FvMHzRBmj44Rog2SylVlNuffTZQ6Y2\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68ee0837-a312\"\r\ncontent-encoding: br\r\ncf-ray: 98ed20876a5b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41746,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41746), with no line terminators","md5":"e6fcadc4c7315a741f97e327eafa7e12","sha1":"0444142e042462e6b6e6c6a7f6325b4590d5231a","sha256":"b57eb19cb5b1e5ac00cea15d5977bad1e2a511a0f51b8798338dcb6eccf1cb86","sha512":"111a77600888e4376ca2057456eaf08fa1fea3ef52a0cbe0bd7facbd0983df2f13ab3ae4d8bfad108083cd912efe1ab8a6dbc0eb727c8c6127092e950eefe708","ssdeep":"768:oNn337Ckf86acrznv/zxV/g0J/eKwCHkVxP6NOFpGpnTppF0KxCsMiV95hR9HjRl:S337Ckf86acrznv/zxV/g0MKw33Ytpp/","tlshash":"ad136eb16b49111bb47fc58a68d9fd588c39a4c3e4024faeb53723574eca39336e5388","first_seen":"2025-07-27T10:11:44.184678Z","last_seen":"2025-10-23T13:03:10.335004Z","times_seen":41,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/btn-ai.f987618d.gif","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/btn-ai.f987618d.gif HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/gif\r\ncontent-length: 604547\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-93983\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEU7P8TyTLbZmfFmMmfHAYCyipHQnTsMtAceV7ldDPlZMfZlUyCFv4oEykbGlupoDvuEHS34qjZWimjnBqk67FaG39ZCdkT9I%2FAu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b47a742efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":604547,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 510 x 227","md5":"71da39b3e43defd508d51071bbffbc62","sha1":"7d700115d90662a508ddbd45d12a4cabf43cbedd","sha256":"4c21898c83803f7fc794560b1eeb30272473fd599e502a2ce304a267f39fae0b","sha512":"dd38fed202192e2be64f4f93072bc134316ccafc81d87008942d4a54bb49d7bacaa4b1a9742f5d1e246891768e7cd0128db1f1eb4894f819d94eb4459cf1c81d","ssdeep":"12288:Zt9gzgNjA0e9lhv7tPwpZuKiMIE9PruUu/MDoLyd4s5919jgnWsAMIoRII9X/ve7:6t5lhv7tgkKYoiULtP1mnUI926I","tlshash":"18d412ef88751fc2dd6651a53a0d22d49fe531be24fbaa3314d0ba4ccb8e83914e4b45","first_seen":"2025-08-01T10:27:47.905609Z","last_seen":"2026-07-15T03:56:36.7821Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":981,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/mining-icon.da6091cc.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/mining-icon.da6091cc.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/assets/css/3367.75e7702c.css\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 285254\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-45a46\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IbZ9Xv%2FC6bqnqSE64aICvlkvFXVtUAZ9Qc6hazFZ9lrt7gYucATFL%2B2EPonwEzaaX685k4iLIwDn8asFN5AWqEBOKhoZrJCELFOi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b58a972efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 542 x 457, 8-bit/color RGBA, non-interlaced","md5":"ed131c7ada02f6a7157cec956d544b4d","sha1":"22a7ac51592991f1fcc17a62b7d3ccd5eba22bec","sha256":"c2f12528f805d941ae7391dd07678efee203e5b28356de41fc28ded171bd8146","sha512":"e3a5755428811449079b6829d3ce3e385d43b8299c2717eeacfb981308b225a278e1f6d1ac5fcecca05caa2935324095bb3d7cf9faf248feae48806109a9609a","ssdeep":"6144:Hr1526SbIZgLkHCCcbMRcYCXAd71W3cnF5P2PJIr8CGvxbIw2WpKKzwu:Hh526FZgL2CVMMAd1W3cnF86r8xJ2Wo4","tlshash":"825423a01cf5d86f2c91d413fe29832cb5c85bc0c3f92145a53f1a3d875ae69e29663e","first_seen":"2025-08-01T10:27:47.893568Z","last_seen":"2026-07-15T03:56:36.774691Z","times_seen":63,"resource_available":false,"data":null}},"time_used":1355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":583,"receive":772,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/1979.f816e099.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/1979.f816e099.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"68ee0838-196ae\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UkcHL6oUbOyP3CVZxBg%2Bnzj1oWR%2Bs7yuWS44tfn4M%2Ff7zq44daOI8BmnYJU5%2BDDAdS4o4717BRlRvwepS%2BkT4SfTuaCwEG1XWiX3\"}]}\r\ncf-ray: 98ed20a9793e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104110,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34388)","md5":"d1c0d8b048322b7fb6c056a1e4c4f730","sha1":"f3715cbb7a394ad902fcc0c3adbc7bbd4aab776c","sha256":"6037b49184a916c4a2213a5203af5ecfb4df5b46f1b9263fcc2e2dc60892182e","sha512":"11a3959a2860e6db9c061f15fdc4986887ad9eb5a00516ff3b018cc39e50295f9c82be21f505e3f8355cb5d0910bfe14acb72e22ae2041bf184f091b858be9f6","ssdeep":"3072:GpeZxPKUnVs9ZlAzIpjxA/tiHuKitrB7t:LZxPKus/HDA1iHuXtb","tlshash":"55a34b9032a0f13157eb50e770765207e334692cb84c847cb6addcebad69a5d6326f38","first_seen":"2025-07-27T10:11:44.211872Z","last_seen":"2026-01-05T00:27:58.968864Z","times_seen":56,"resource_available":true,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":567,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/api/plan/planOPtionsList","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"POST /api/plan/planOPtionsList HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nContent-Type: application/json\r\nContent-Length: 50\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lxrdXCpZX9FW0dhJiEICj1aDD4u5whYu1b3BjdR4%2B5QaWGHKtfIZNQrBsNtDtq3E47jwcUViVXi8hu1PrO4oaJGsuckc5xp8OBKz\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98ed20aa99612efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":524,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"051933f4376d7c463bcff27417398bd8","sha1":"508b6531d9358eb71831d8e585fc38ff9c887fb4","sha256":"07812b152b738c70c6496394669ccb96b3b890f7c7dd28215916ce79eefd68af","sha512":"7f92b287de62cdd581ace3f4ff304190038a2860ff583eac1c7c6f40cf2e8ca95bfcd8188ba98d930c64685a935c3ea8ec54cec1e3c2f14840d1ee1ecf4b2469","ssdeep":"","tlshash":"71f0b4e782b91c348f8451f2c5087405d589664a1c46c85adeaefedb82552f24d3aa8a","first_seen":"2025-09-07T17:40:00.131459Z","last_seen":"2025-10-15T06:06:22.796996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/img-banner1.84a5b3eb.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/img-banner1.84a5b3eb.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 286207\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-45dff\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIuZ4c%2FOblhxEF41UD%2FkrTe%2Fw91xh0VDmsXIAjCZdmq0MHQRS%2FvwAnjBcHVQ8ssMtaNA7U8P3sICPnc3ftwiFD7nKVrAngdjh2MW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b4aa7c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286207,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 457, 8-bit/color RGBA, non-interlaced","md5":"7d23152368e6fd0a670632530f876635","sha1":"1e44b6ea048d876a8bc3e11533a2dabe94b164d4","sha256":"eb47309679a1dc62a1057c665b1ea62c0f88c5c14cf0e22dca108187a5b8587f","sha512":"25dcbe97f3f207ce27e314e01334279d71635385900ff70011832f767f3e03d25b131e0d50f896e41cc86fe3e471d3769d8a3fd967ed5b6abd0bbb9dfceacc29","ssdeep":"6144:lCjHYBpQ974OusbkIRgoZQSnkX6Kvt8eToWa+KFVhDtoOoh8F0YOrbxxXRPS:IYBG141kkD+kZFTw+KNtg8FdOnxxBPS","tlshash":"4554233135bd7c1627bcbe5ace39186b0881c9dd9da6084dbc2f592e726bb1b410c47b","first_seen":"2025-08-01T10:27:47.835351Z","last_seen":"2026-06-17T20:08:34.707882Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":833,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:59.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Oct 2025 23:36:06 GMT\r\nexpires: Wed, 14 Oct 2026 23:36:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 23393\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-28T13:58:04.056061Z","times_seen":248229,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:57 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMVCR9W8kPcVfkJf1becsut%2FvHLxUeeW8VkVI%2FdHj7ukmU0bnlyBr9Tb0rsgUFZoskkQZ4Hiy84P9iRI0%2B4dwK6MY4PVZtwDND5F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 98ed20b0ca1f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T13:56:22.333504Z","times_seen":17580760,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/chunk-vendors.a85b18f7.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:50.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/chunk-vendors.a85b18f7.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4%2BfCwQd4IO3L7r70PvZdYAmMpq8xK4wDXK970KH0ITVuzg%2FecYU6V8VdHnGgmtJu04Bt9lcfY%2FhbXW2EXRRJB4YQGp8e1vrE0f%2F\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68ee0838-47785\"\r\ncontent-encoding: br\r\ncf-ray: 98ed20876a561525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292741,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6e0c81a5e0b69d3aa20a6e7bcd142a76","sha1":"37d004cb594a9805531db934df3aea7de117e444","sha256":"d78bd47b3c1c32d7c0e2803cc73ae62c98769d88101cce3c61466ed5cba8bc3b","sha512":"6d0321523f8a4564f891498949deec62cf0f5b98e46e377fb54a21280d7270a4bbc57406fc311c1df001b6cf4f163ca0b058c46e34503194be7a8ffc1f78713d","ssdeep":"3072:BYFU1rsrvnfMdJ3tNafe8kW+MWo343wXJUXG4NoaS12DSuHFo99cOYq3i:qkr+Mab4dGiHy99vy","tlshash":"a754f6cdb291b0b207e760f5402f150bf23b6959a80e84a4f665e4e5acbd94e9137f3c","first_seen":"2025-07-27T10:11:44.15378Z","last_seen":"2026-04-18T04:17:10.308533Z","times_seen":58,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/0c2840c3-5b04-4c44-9661-fbd4b49e1800?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /public/getAssetImage/0c2840c3-5b04-4c44-9661-fbd4b49e1800?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1512\r\nserver: cloudflare\r\ncf-ray: 98ed20ba3d990b59-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 69789\r\ncache-control: public, max-age=31536000\r\netag: \"cf3ispWE62A-P6WwAnoXfYmxdffmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:58 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=440+5 c=2+3 v=2025.7.3 l=1512 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1512,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4d2d4c960bb4cfffa4482fbf2c7f2de9","sha1":"f0362b531e6a030f0af62c88dfbe43fbc8fbb037","sha256":"e03de82996a25e996279f6018e54cddf1e3660d9302c2dc4c9a86421f0c58614","sha512":"6aa82cec09ea0bd75988df0261d636476dc915a2f1497a48504d5c2cf854ad2b12206cd03daa969fa3fe5c6eb302cd7899ecbeff9ea9804fefa45cad198b73a2","ssdeep":"","tlshash":"0a31cc8f6448c0f355b7a03638b503bbe2ac694b321e0455d1126a0ed237d9ecb6d1e6","first_seen":"2024-07-08T23:13:45Z","last_seen":"2026-07-28T08:08:02.919411Z","times_seen":1505,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":73,"dns":5,"connect":10,"send":0,"wait":39,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/5107.b980a43d.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:53.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/5107.b980a43d.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:54 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"68ee0838-eef1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1xRuBTdsCg2PEI6szS2S6Gv%2FdPwwBCutRwKIu0Roth%2BNbZ59nIxFFeRBTZZUnKH%2BxpkZTaRafOaZFLlX2Mu1NJAFCmzpfFxyJoLe\"}]}\r\ncf-ray: 98ed209a8f0a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61169,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61161), with no line terminators","md5":"9da5f8c83a21257226a6f4d577cc8504","sha1":"71a26812300b55e258dcd1eadafdc9d64b8d15ba","sha256":"fa4b72ab1e340b78304ac247069f8075b5c62dcb2e6b2e20076cc56596f84e03","sha512":"18bfbd7ed4c3fb8e08c29b6be27c4561275f3ac6280cdfb36bd18e4b92a2d555051ab0535caba0a2f250e58c1de7e393345bee6255991710ceabce5981001879","ssdeep":"1536:Yya0LAx37TK4GvsLIou868l845Xm0cAjRk4aq6+Z:YpiAxS4KMIou8Vl84VmJTY","tlshash":"2b537c15a18be4ffec6d6061a10e2a30f4793ff58061e44af63cc96596d8d64370ebac","first_seen":"2025-10-15T06:03:32.973946Z","last_seen":"2025-10-15T06:06:22.830335Z","times_seen":4,"resource_available":true,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:54.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 11:50:33 GMT\r\nexpires: Fri, 09 Oct 2026 11:50:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nage: 497721\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-28T13:51:42.269252Z","times_seen":384584,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":90,"dns":1,"connect":21,"send":0,"wait":21,"receive":2,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/icon-hashrate.68ac2007.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/icon-hashrate.68ac2007.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 9579\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-256b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HVfziSugq9FjYNPYKAwwOLTkM60v81kSrV3c1PicYImoc344apq06MDegxGtk%2FfVMxj79Y811k%2BKtXegPa%2BoFYsv4ZgGShV2GVS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b4aa7a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 59 x 59, 8-bit/color RGBA, non-interlaced","md5":"5469cd02fcbb7e5d43f925fd26c1a574","sha1":"5a3124b096d6336cf1606bdc7b1338df2bf1e01e","sha256":"2c25202d09034a655bd83313e1290743c5bb31da90b9d037fc6ffdabf5f60bcf","sha512":"1e59dbb039a6d5d9d98fb0614f08b94c378135a46cef47a6319766e7cda8a3f79f4f733a7c8cc1b6826e247f929dbb3b86b3a17e15914f1e5d4a664dbca23725","ssdeep":"192:wreWuJ8hIO4TRebsTUfAIyf3BwaIdM+kXVmOsE/KGOh6encvp:wreWuFO4tumSdc9ICdyGPecR","tlshash":"2a12c0d50db5c8e20b02ec91c528f3862d779510b511ecebe69802bb7e8df81306757b","first_seen":"2025-08-01T10:27:47.907111Z","last_seen":"2026-06-17T20:08:34.7432Z","times_seen":64,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/41d04d42-da3b-4453-8506-668cc0727900?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /public/getAssetImage/41d04d42-da3b-4453-8506-668cc0727900?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1452\r\nserver: cloudflare\r\ncf-ray: 98ed20ba3d9b0b59-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 80168\r\ncache-control: public, max-age=31536000\r\netag: \"cfIBgbS-WAFgZUOOKJGP6fnCtOfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:58 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=294+2 c=0+2 v=2025.7.3 l=1452 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a93dd349a5fd1ed9361de97195e3e09c","sha1":"84c1f402075d3d247d52ba8df9ec30272fca1f58","sha256":"a1e40b02198365213323c48f1ccd4b2ea8945df4ee94617faf8232ba4c19855a","sha512":"b4f12e7697181c9f5045636731012f5df336975d0c4245afd5afea9c628f11d0f1a6b31fb9e4a95e6277d185c2acf471ac4e8a7d32b8958d9659906a116c5ddb","ssdeep":"","tlshash":"4531a743a76c94a24493f4017b88cbce1d24641b7926c8fa22a846c8e5bed41c269cf5","first_seen":"2024-07-07T11:58:42Z","last_seen":"2026-07-25T16:20:04.445056Z","times_seen":1218,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":72,"dns":5,"connect":10,"send":0,"wait":37,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/api/config","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:53.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"POST /api/config HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nContent-Type: application/json\r\nContent-Length: 50\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:53 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nset-cookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12; HttpOnly; Secure; Path=/\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QFN9MxNkKrMv8trkhu3b7%2BvixpeM3GJFpKENMopiNMsCK4P9BVY%2FiPCthgH4kD4zplsrPqSVEZ%2FdmsjQThYPbPfekJcHEeRwbz9W\"}]}\r\ncf-ray: 98ed2097eeb42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":12270,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (12262), with no line terminators","md5":"852c6214a36d9a4221491e75aa40f0d8","sha1":"85513b9893e556c7934ff7a5f695833af9b15c8b","sha256":"023cf18b397f3efef3364b64817ad88164ebe657dd294afecf460eb4994d121d","sha512":"76276e1dfa1a3725ca30838d74783e9929c4dc515289c731494cb68081497617c20292bf8872baa4f1b169d534b7b6180bcec458f484c91a84f94ef14c085b77","ssdeep":"192:YhF4cLu9s5u25MaL1nDd/QlDCHOni0Q9d4hQQpUL1LngIz69V:YhF4ci9s5u25MaL1Dd/QlDqOniB9d4hJ","tlshash":"7442ec80bc443eae1111be39a97f80f460cb36d6485d0755968bf53e02ec662bdb2d6f","first_seen":"2025-10-15T06:06:22.631439Z","last_seen":"2025-10-15T06:06:22.841781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/3367.f43dab1c.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:53.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/3367.f43dab1c.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:54 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"68ee0838-7e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2dYIoM%2BMmDhH4MnUgIcNdsuc9ebxO3FswtBhAx4W1TYIUJm9jyeVUjkNXD7vAb%2BVtJmYgNDled3IyoqDFJp3u0lshlFFLoLVGDC\"}]}\r\ncf-ray: 98ed20996ee42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"1d21275f4f7b796b921c043202d90cae","sha1":"dcd1cb106d1c2f58e2baedbb09ddb2196d6e9320","sha256":"b687a38e695a8be7e587b3239d3a9d6ce409f99a6ba08058c73bfd4a8d94081f","sha512":"bb0f73fb82037820bf23ebc2b43046271b3b81a1c8ceb8f9df497c8dbca8027395ac15b196e9698878d8a9f8c5fc82816e21331efcb3790125146c0f65dc8b6e","ssdeep":"","tlshash":"ceb02b502c857a3c33bb31d004c5035c28a72060b41da0d32f710c70c061c4c06b00cd","first_seen":"2025-08-01T10:27:47.869873Z","last_seen":"2026-01-05T00:27:58.952847Z","times_seen":13,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/api/help","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"POST /api/help HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nContent-Type: application/json\r\nContent-Length: 50\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pvu48yuItvyMuAB1HfnhmnVSXoYI1XthA1k61YGKR33Nsw8tlazkICvqpz%2FNPxUiO8BucmkqvUUwf07%2F0OV4Rdqq%2B7DXdB4ArsGd\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98ed20b4ea862efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cdc6b029a6f7ecdfb37dbe4b3dedc930","sha1":"39d542826ec702a3abcb2bd076e882716da23f35","sha256":"1c9d0b55ddbfbeef5100e85626d10b1aa5ad3ff03569a022338b1087205b812d","sha512":"c3a37475f9804101ecffbc443a6496b3900cc10078d2620e53dff084c3a037ce2b67eb3903f5e8b368e99c776d237b812a3899b5df8bca28536df33452fcba7c","ssdeep":"","tlshash":"edb09261a8191e2726834451209a7d084a5c7347ea954c74884daf7946fd4792522b25","first_seen":"2023-10-31T03:45:57Z","last_seen":"2026-07-15T03:56:36.808681Z","times_seen":61,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /public/getAssetImage/07ba87ed-43aa-4adf-4540-9e6a2b9cae00?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3090\r\nserver: cloudflare\r\ncf-ray: 98ed20ba2d910b59-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 10433\r\ncache-control: public, max-age=31536000\r\netag: \"cfmK10fIs0rtXK3D1w_qZdnstVfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:58 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=1092+6 c=1+5 v=2025.9.5 l=3090 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3090,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8e093ad4a0e0bf420966897e5d52611","sha1":"90172a764ff649c9553d8e84ada46adcb73f33ed","sha256":"4a00efea74245ceacea37a3e83f0a4a2830236143357d3c57e96c4dd154d593f","sha512":"50b07fcc6d1c5460e69613f4509eb8323b11b6634ea8f268bf541eeec6271bfc5852200c34f385ad82d44c3e3f70122e783f1669d9d356d65be4ee82a20d6546","ssdeep":"","tlshash":"d7515d250e57bb7f0fa7793b2e97c313955320052e06b200b624f75101940863bf35da","first_seen":"2025-01-22T15:25:28.982905Z","last_seen":"2026-07-28T08:08:02.916901Z","times_seen":1211,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":67,"dns":1,"connect":1,"send":0,"wait":32,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /getWalletImage/7677b54f-3486-46e2-4e37-bf8747814f00?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1318\r\nserver: cloudflare\r\ncf-ray: 98ed20bb7e9d0b59-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 17603\r\ncache-control: public, max-age=31536000\r\netag: \"cfVAcZ3w6iX14DvHKhBFs4CgkyfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:58 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=20+8 c=3+4 v=2025.5.2 l=1318 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c26e45cae3d02d9942ed0380e587f9ca","sha1":"da974aef55c1f343f5888d3952771b0b2fa7b389","sha256":"0d7589be044acdb28633fdf313cc6adaa15a19b27de85eb6b14ddc125e6e1a45","sha512":"6048fd686819e5253cfa0206543bf1033cb8d68c7630734c4aa74bf77c1b8754e6cc69cd96159d4627d7951b5e82b61874b08c999da6a4e0c8d08be21cda7b88","ssdeep":"","tlshash":"7a21f86840e5036cc993d8bac116c03494eb02bbe74eb668123071d172b60178a93df2","first_seen":"2024-06-21T17:22:35Z","last_seen":"2026-07-28T08:08:02.866413Z","times_seen":648,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/icon-vip.dee94ddd.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/icon-vip.dee94ddd.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 31441\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-7ad1\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Y0euLYhcStRxi3XvJ0dFQaBF8Fa9NJu8rsgZq35YsDy2tP26Sv%2FOB2P891mM7f9aBxK7kkqq1NqtA%2FuMuCcsn3xe%2B%2FPtxGcVHe6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b48a772efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 153 x 153, 8-bit/color RGBA, non-interlaced","md5":"a092a74bab772755d262977a791e36ae","sha1":"6b869b41d539953bd874c1010d3965afe4318cc8","sha256":"d1970d02a1817e9521f4a75da24c53b47c37c5ed8b54aebf832d3f15e150d594","sha512":"40db0433dc7e0c7e6edd87478dc131745ad97aa9f14e63e8cf5330a89d12d87ed017f0b731310a03bdbfd2fc8883a6a1e6a3dc11c5a60ee74939e0c55c691b4f","ssdeep":"768:JjqT+ms21u3ZUHp7p+DueYAENYXUqe38HNE9mu:GC2OZWADcAMs20u","tlshash":"ffe2e1bc3f8892e5f9d09056a941fbcfe2789fa4b366c904716c6d81d3d4f040a26bd9","first_seen":"2025-09-19T04:24:17.684746Z","last_seen":"2026-07-15T03:56:36.772396Z","times_seen":63,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/icon-loop.4cde8534.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/icon-loop.4cde8534.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 27518\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-6b7e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9QtN6su%2BBZgyVbcsg7mWoR3PZLqvF4peQZXjvh7ly4UuH0DB3uUtI%2F57M8MM9d8iw%2BSmVb%2FkpDUrPK%2BhQx0wYIUdtX84GhVT%2BBZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b49a792efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 153 x 153, 8-bit/color RGBA, non-interlaced","md5":"d4d24a4f8c0b7952307c7132beb5e877","sha1":"eab2c9013c98e4f221ac6050ec4d7d2e2a3808f5","sha256":"383708f64d5e0527e9d7f8ac37a06386d4a18e6681db1048a5747950670c0a71","sha512":"539e922672db67c0f92a6c6ead3abbddea17890bbff0a42bff5ced39c1bcf472fca5a550dd9df0ad759ded69b409e42210f92533ec69ed0d5c0da926578cb7d0","ssdeep":"768:EESL9hsniTSdOTDExI86EoJJQTQ/RjQiz3N:0KiWQPuVKzjQK","tlshash":"d1c2f1c88abf79bd4caac50b837d653ea0b9bddf67b9806c5cc4683c4074d4b5a86301","first_seen":"2025-09-19T04:24:17.717466Z","last_seen":"2026-07-15T03:56:36.815228Z","times_seen":63,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /getWalletImage/eebe4a7f-7166-402f-92e0-1f64ca2aa800?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2190\r\nserver: cloudflare\r\ncf-ray: 98ed20bb7e9c0b59-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 6754\r\ncache-control: public, max-age=31536000\r\netag: \"cfPi3Q2pR9-1VkL9hnF0Qjwt9_fmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:58 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=19+8 c=5+2 v=2025.10.3 l=2190 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06ec24d6d0f8cc15531022c1d2d10ed5","sha1":"a35dfc22eac4a148d164ba1c0c0a30622d996cd4","sha256":"c17fc5b943b9ef6f7b6ddd64e34efbe217a7328513c76dbf33aed86c0019793a","sha512":"47054745bf01743c5756f0cb8a021dca767c880bbe1ec98a44d6819d6395d991dd88def918500862b763955f09ff0b31a7e8876e4178fd2b0aaaf7711df24557","ssdeep":"","tlshash":"eb412940ad424ea8e6031af82fac34a8555a0d6f64478c0d8029f336325fdd2bac4f6a","first_seen":"2025-03-04T08:48:45.474684Z","last_seen":"2026-07-28T08:08:02.92218Z","times_seen":474,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-15T06:05:49.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:50 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQO6VT%2BJjSCnLbbBwOI1rJ%2FAOllk7N4ED%2BcM4LOxzLhSKWpJb31ABlWH4oiUvZPunIpyHDYLG4Wm1x6DCbFmJ%2Fx1fBaCHQ9yc86K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98ed2082e9a01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2161,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1438), with CRLF line terminators","md5":"26c1e6fc2fe39bf3470ba35145e20035","sha1":"72cb2240fa23307b829ba7cd7cd107b517462a6b","sha256":"6a30dd835fb7ae0d7a5549a790264d93c444e15608e8a44feef481081492029f","sha512":"87798c898e9e4885217c5201045508fe9611de1a94d9da46c0faf32dc6853f9e1341785ed0aa8ec83433378ce4ee8ae393eb86c70d36cf94f4097f1fe526059a","ssdeep":"","tlshash":"ff410de398104d1d16718a72e9a6f10a997aa068d458ec99b4dc60ee4be0fc78197f32","first_seen":"2025-10-14T15:50:45.182337Z","last_seen":"2025-10-15T06:12:03.560347Z","times_seen":9,"resource_available":false,"data":null}},"time_used":983,"timings":{"blocked":198,"dns":0,"connect":1,"send":0,"wait":587,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/4110.c0e51aba.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:53.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/4110.c0e51aba.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:54 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"68ee0838-1f40fe\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NgDQNf4cAJigSss536%2FlRXstGBSPvX3vwKxkx1EiTifowZZlheLUg7bZzLqC2kPxvHuYWazdPVFYigsOffRgW7uhImqEiHFtgnmR\"}]}\r\ncf-ray: 98ed209a7f052efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2048254,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46765)","md5":"ce5dab20fe2fcc77b1656d3b595e54dd","sha1":"109c7ed95be47a18e4307bb2367f2ebfa9964d5e","sha256":"a491fdd3ac00a6ec3e9fafcac3f56f150af97c20663ce6a78c69842475e5cc3e","sha512":"75798b016231ae7b25086a471c86caaced6c24f176534228888a4142264a796bc764752c7433e49d9aa3ef5a124f519cfea9a12a8f513c660d7f34c04d222d08","ssdeep":"24576:QiTKoPRKPkTruXxo84tr4EZ98uSSWQLxHB3grCNOcRyzEE9LRHIreSamSoAEyY6D:DTKoPRK8TruXxo8848koAUBGDsC","tlshash":"a7254b8073b1b02957a711d414ab1401e234a85e640e40acf7ece5f7bfe5ac989bbf79","first_seen":"2025-08-11T20:59:06.579522Z","last_seen":"2025-11-21T14:29:57.614666Z","times_seen":39,"resource_available":false,"data":null}},"time_used":1922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":1341,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/css/7669.e94c88f1.css","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/css/7669.e94c88f1.css HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\netag: W/\"68ee0837-4f3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2iHM8vDsCJHooVggp0hHW9xK8sw4BrUm8bwcnuJwNwuBIlH7pY5nA3WGPrhapUtIW9SDTvdX7u7RclIRjeOayFySrFEuzMHaVyA\"}]}\r\ncf-ray: 98ed20a989412efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1267), with no line terminators","md5":"e232aeb002998f97977ba63eab01842e","sha1":"668f9aa08627fc1445e7bd594f8ba1ccd79a59ae","sha256":"da77b478ec537efff887e9530297a3934abb943837f3192acfa18b861ccdbd47","sha512":"c4623cd2500173484eb6941740025e6a964de26a1d49415757093bded4e3b1c5217f407385deaa001ea0e9851a79fafe1134bd3cd9e401cac9fabb1f43dafbcd","ssdeep":"","tlshash":"0e21ee7153032d28e82788c736f1e352a104c512d257cfb69a57b5a2cce72db252370d","first_seen":"2025-10-15T06:03:33.3916Z","last_seen":"2025-10-19T14:24:31.070922Z","times_seen":6,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9\u0026page=1\u0026chains=eip155%3A137\u0026entries=4\u0026exclude=f2436c67184f158d1beda5df53298ee84abfc367581e4505134b5bcf5f46697d%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2Cc03dfee351b6fcc421b4494ea33b9d4b92a984f87aa76d1663bb28705e95034a","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /getWallets?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9\u0026page=1\u0026chains=eip155%3A137\u0026entries=4\u0026exclude=f2436c67184f158d1beda5df53298ee84abfc367581e4505134b5bcf5f46697d%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2Cc03dfee351b6fcc421b4494ea33b9d4b92a984f87aa76d1663bb28705e95034a HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 98ed20ba3d970b59-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=43200\r\nexpires: Wed, 15 Oct 2025 18:05:58 GMT\r\nlast-modified: Wed, 15 Oct 2025 06:05:58 GMT\r\ncf-placement: local-OSL\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4900,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3b0fa90a091348233ff971b4d7c641ef","sha1":"8a3d07ee2830e82fcebd9bdb5a4411ebb0f6bb53","sha256":"41f4b11c8e84f1482339e9ec42bc5331ad65feb62204740b669a19f1dff0c640","sha512":"0460bcad50bb51ee7317ec92bdea32985f9f6356235031ec5d31f2788eeef5ee058e74b0f04ccf5b982ab2aa97fa5bfa9185cadcd8aaccade476b9fc8a7e8ac1","ssdeep":"96:spFvmM6v5PMrhYSJmdw9vYNiC+82umXqxTvldohKHR8izpm+vlH:UeBHduw+BaR9dJH5U+dH","tlshash":"9ca1239f8bc09da79f7483c4e25df9ddd83ed01782cc98eaa8b1893441bd85b73015a6","first_seen":"2025-10-15T06:06:22.839801Z","last_seen":"2025-10-15T06:06:22.903336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":75,"dns":5,"connect":16,"send":0,"wait":40,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /getWalletImage/45f2f08e-fc0c-4d62-3e63-404e72170500?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 454\r\nserver: cloudflare\r\ncf-ray: 98ed20bb7ea00b59-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4055\r\ncache-control: public, max-age=31536000\r\netag: \"cfUhkIr6pXeZzg1ZKkKbDihKqDfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:58 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=19+8 c=5+3 v=2025.5.2 l=454 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d0be57955d7f50dd9f7754b6dc10309f","sha1":"1120733df2e8f9bfde2f713c1de00711d356d4ef","sha256":"a29fe26a43771dee6d0de34f06c4aa118119e919a370bf6b37b89d89eb157547","sha512":"b115424fbd8acbdaa1fa6efc5e7f9b447adaa80ea67d542fd77c68fa0748f993670f6befa7458019db1243b2056f03872c714a500260333b50fd2aec778fc95b","ssdeep":"","tlshash":"02f05c1dc884c9a0bb9834cbe8a2089b02504ea0cba61a320a052dca102f45b0d5aa71","first_seen":"2024-07-08T23:13:44Z","last_seen":"2026-07-27T13:56:26.724742Z","times_seen":492,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/bff9cf1f-df19-42ce-f62a-87f04df13c00?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /getWalletImage/bff9cf1f-df19-42ce-f62a-87f04df13c00?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2356\r\nserver: cloudflare\r\ncf-ray: 98ed20bb8ea50b59-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 36487\r\ncache-control: public, max-age=31536000\r\netag: \"cfaTCrjpacWJuqV5o58ulLeqp_fmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:59 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=20+6 c=4+2 v=2025.10.3 l=2356 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bd6e008d46c0a066bc6c0aac19afbbe5","sha1":"07e1119604e23a43c48944d63195c32b9abea690","sha256":"73e949222e63cad11d0161f059a896dd90a45de74ae22684f8fa4753252e1097","sha512":"db29c6a4b440bf07f9e15f8e32cd1f33de1dd94f5ec1a22ec4b1365429b5e56d02ef833b1c3c9f8734920f09f9ed43e89a47c2daf80370d736dbe91a67498b25","ssdeep":"","tlshash":"fe411ae60c992803a6840e1fac51982808527b683a879cd7bf3066129b9fc6173d71cc","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-07-27T13:56:26.696161Z","times_seen":368,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:59.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Oct 2025 23:36:06 GMT\r\nexpires: Wed, 14 Oct 2026 23:36:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 23393\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-28T13:58:04.056061Z","times_seen":248229,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/navigation-bar.d42f860f.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/navigation-bar.d42f860f.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/assets/css/3367.75e7702c.css\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 41546\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-a24a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAqAidPdVqb0wNoeCvz4Bo3OaWxDZth4%2FKYzCLxwmA55UIQ1svrB2N%2BkwYFwufn%2FpcLSSQxUk21epLTZiHJ2p1tBw%2Fn206SQuirq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20a9d9462efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 590 x 184, 8-bit/color RGBA, non-interlaced","md5":"fed74a73e6e9200ab5bd2ff6f1d78a34","sha1":"3aec86d9a42496710ae0baae79eaff2e70189246","sha256":"30310345d4802640a2e6926507c8234c15ce7b0d0241bc3b5c179dc594af1c9d","sha512":"bc70e00aa30153847c08bbb2e092c91d645a7f4b56836b33de1f7ee553e60c483f440ea5da67d9402008ac98ff1d0e3c4b391b33615af7320fd59de79bb082e0","ssdeep":"768:CjONcWTBmQUeJgUZG6idzuNe0tcTP6Bhw3Tf+lsFC8xHHMjPVHQ2:Q6JsQ2zuNe0tprwawC81QHl","tlshash":"fa13f12ddef774029cbb7423c65666f1695fb6fc0a9769e8c3a6419135b202c7ee0900","first_seen":"2025-08-01T10:27:47.871375Z","last_seen":"2026-07-15T03:56:36.779296Z","times_seen":65,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":585,"receive":384,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/186.462eabe9.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/186.462eabe9.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"68ee0838-d7e9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tdH0Het9O1CQGEa%2BodX59VJ2vAb%2BT39u%2FiPz2jKNHpUmJAnZCiGQN2z46hf4s0Q0uFnL%2FmZIxwMGPStKs%2FYlmP7Uh%2BPZ5U%2BrjQy\"}]}\r\ncf-ray: 98ed20a989402efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55273,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55266), with no line terminators","md5":"269ded748a8aeb0f69c55faefc243f6b","sha1":"bb8807ad206337a819f94f3ee2b5a72e335f064a","sha256":"7583113bc766027dd910e5f1a6ac7d55931c0d59f78f6eac8481000a4f8d8217","sha512":"3d04e62ce1faa3aff540c3a61e5f89323bdb238e748c23861ec4dda128ec8c0eb3ede43ac698c01bfa6a7fe0c8dba3c1387252a245170a804679c9bc9675bd67","ssdeep":"768:BFvWbP4R5q6QBphgBP4R30e4G8GSQAopVL+AalfSSw3cQH0EeF:BFObP4R5q6QVR30e4G8GzAopTbcQH0EW","tlshash":"93437d20a8d3e27add6fa151514e3930e4363fe4d420d087fa788cb4a9d5d64671eafc","first_seen":"2025-10-15T06:03:32.998908Z","last_seen":"2025-10-15T06:06:22.918904Z","times_seen":4,"resource_available":true,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":595,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 12:57:50 GMT\r\nexpires: Fri, 09 Oct 2026 12:57:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 493688\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-28T13:55:02.722318Z","times_seen":284068,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/css/3367.75e7702c.css","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:53.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/css/3367.75e7702c.css HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:54 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\netag: W/\"68ee0837-6308\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eYEdXaRM19wGkJ5awYTybKK%2FWeVy5Qz5rIii%2B%2BGDVCehu1UsVi6kMLxjc0hdSABWnXJDa9QK4wl6yyDkq9CE%2BGybHCzrO8zTcmsA\"}]}\r\ncf-ray: 98ed20996ee22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25352,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25200)","md5":"62b9bd20c18a663d01d506a1c5b72862","sha1":"4971c5f5f49b1fcab1680c617378084cfe0032db","sha256":"6b34f3a77440ddba28c621f120f63730cf7b26f42f47eda8998e5d51a65e9ca7","sha512":"a713c7518397a3280f42f4d21bfb9fbc9eebd2c5cc23b93f0b994320ecd7939f1c1242018aa7c79ee24785c2aed773c207dfaa73b18f780a182caace12750848","ssdeep":"384:VwckoivPvNP7n5MhezqcbAHaJhL6IPRNoi+ifh:DkBvtTn5mSqc0HaJAUfh","tlshash":"68b209716b85353cf17bc16f74e0a64c901dc842f69b9faa6623b2728ac71c32975389","first_seen":"2025-10-15T06:03:33.110495Z","last_seen":"2025-10-19T14:24:30.837355Z","times_seen":6,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":608,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 15 Oct 2025 06:05:58 GMT\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-28T14:03:03.861597Z","times_seen":38294,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/api/help","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"POST /api/help HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nContent-Type: application/json\r\nContent-Length: 50\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fO97oHgTG6aDATQ5Sd1qWe70DrZ90cy3Qji1hJaO%2BAsDMqCvJzWb%2FrPTDkybY8Gj7au%2BXsUrvfAVs%2FtE1b19XCBkoC9lcDnAtP9\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98ed20aaa9622efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cdc6b029a6f7ecdfb37dbe4b3dedc930","sha1":"39d542826ec702a3abcb2bd076e882716da23f35","sha256":"1c9d0b55ddbfbeef5100e85626d10b1aa5ad3ff03569a022338b1087205b812d","sha512":"c3a37475f9804101ecffbc443a6496b3900cc10078d2620e53dff084c3a037ce2b67eb3903f5e8b368e99c776d237b812a3899b5df8bca28536df33452fcba7c","ssdeep":"","tlshash":"edb09261a8191e2726834451209a7d084a5c7347ea954c74884daf7946fd4792522b25","first_seen":"2023-10-31T03:45:57Z","last_seen":"2026-07-15T03:56:36.808681Z","times_seen":61,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/icon-wallet.ca4d61b6.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/icon-wallet.ca4d61b6.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 36129\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-8d21\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hsHX%2Bh1bjNdo9GA%2BV9d2XeQXIYAimjCwl%2F7sPBS4UHNywm9KaAigCkW2pAKbzmg%2BFD9CPMyOPakefUiTFxfjhBBsYNOnVDp6nO7s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b47a712efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36129,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 177 x 177, 8-bit/color RGBA, non-interlaced","md5":"1ca28f21eb701159393f037095e496ad","sha1":"a5a58cdfd2310710653050dadb781a38e36a5cda","sha256":"95c8ec18da8708a0f2c8e5540ab7c2dba3b5b6997a955d18d6ab1eb88792a58a","sha512":"c60f10cb049bd1437183443a0af01b46da57359a08cb63dacbd7be47b53491b5bda0e99560666efd83fe74bc249fe5f96e88cde6c168c3a32b87fafc982d2952","ssdeep":"768:500NhcAenPf/7gA6wyWNMLCjIQlxGFlywOVNB7XEaTRF9:S0kHTgfHKEQlxNVNJEal","tlshash":"b2f2f23b255006b26b7eede662466c90381766af9537c2dd5e4d78723fe1c00e42f319","first_seen":"2025-09-19T04:24:17.682712Z","last_seen":"2026-07-15T03:56:36.813575Z","times_seen":63,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /getWalletImage/252753e7-b783-4e03-7f77-d39864530900?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1264\r\nserver: cloudflare\r\ncf-ray: 98ed20bb8ea20b59-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1035\r\ncache-control: public, max-age=31536000\r\netag: \"cfNST3q60e3DEaxemhB1mMC8dRfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:59 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=20+2 c=0+2 v=2025.10.7 l=1264 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a59ccce4090b66e6adfe363df40ac9f0","sha1":"d02fe751dafb8202db62931f44cf1e7673c7b430","sha256":"f374fd161e2abe943efdd445069ac1ff036e3317e9fb9d89ea0359a6d0584d52","sha512":"d93353fb79572007a6819315626193551a6f458d820647167b459ee324c32da3564473b25bc0ac9044860474f6eaf68e066809628376d0269e2cb446fd87ccfb","ssdeep":"","tlshash":"2921b7daf0b8e204840f1a2a4d66bc6b762f2d307f626a85395daff2424041e35d82b4","first_seen":"2024-06-14T10:37:34Z","last_seen":"2026-07-28T08:08:02.864736Z","times_seen":584,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/2202.36a933e2.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:53.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/2202.36a933e2.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:53 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"68ee0837-7168\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UIpSXWPIi%2BeDcrM2jQvzVdlGINDYwRBDz8k1yk5G2Ud0pN7fo5oNfQpbqfJ3NSYWXzwn6xbI4SabH8Mit2ck46DgHIfadZ7JBFjD\"}]}\r\ncf-ray: 98ed209a7f072efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29032,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29012), with no line terminators","md5":"b5a1556c2b2627c6af310d9c2e3c0f7b","sha1":"90795e4a36e6cfb509600722e3f02e52189c6181","sha256":"4f3ca1309ebbe033018c4f0571d3ae2256d47389e8d7f99b53c77200b55026b6","sha512":"9c9ebbbdb70e160fe6cb56e3faa76ed981ec5fa1c1ac1f1d71347e68ff0e539a714a92f65cfb48b0d46ff056002da33e826baeba4c6907eed8123bfb577b1b9c","ssdeep":"768:8QXSyz5Yw1u/B47aPPJRJjThbd5ZVt0eiNgbp0nhn:qqk7NhJohn","tlshash":"5fd20bd2f3da206d9bf83684555f2100b154bee5a80ac96db9bc38e715ec401e47afbc","first_seen":"2025-10-11T04:55:45.231725Z","last_seen":"2025-10-23T13:03:10.339223Z","times_seen":23,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/favicon.ico","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:54.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:55 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IpW4UW3W%2Bgi5UXDiMXWWXSNubLYICqS9TeJaKzEt8nC%2BHU5vrMXW95fVM%2BpolD4WBJSFve46%2F%2FbO6X60iVQQ8%2BDJ9jZ6glfXVIYW\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20a05fe62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8259bd2dc96b69fffb7c7e1f3411275e","sha1":"e945be7ea901f4a7cf170e184711c81bcd3527e6","sha256":"c375e42b6328de1880de1424a93267d573a1afa2ed37f72a35d8218f6880dd58","sha512":"b6c638e4421bf99ca1c8156247c5af6233e696f956f72cfccc88ac1521bc3d9c4ec6d2fc33e9ad78dd7eb95735543d9eea96dd5caa27878b8bc5c6a5a7dcb8c9","ssdeep":"","tlshash":"48c02b2d35137c4cc5a3317432c37080c0da833764ba41128440800331cf2a98ac7397","first_seen":"2025-05-03T23:55:22.499243Z","last_seen":"2026-07-28T03:02:07.433223Z","times_seen":18169,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/api/get_config","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"POST /api/get_config HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nContent-Type: application/json\r\nContent-Length: 79\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L58fMqvADUUszYnyJnqEIeAismJ0gnv8HZAjnNi4JFBZJFIKupD92Vc7SN28xuf2qxiCOgGsOwL9SR08oKWW21VoU7NFrh1BdnmK\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98ed20aaa9692efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ede8cbfa471233a4167154a5fadbfb82","sha1":"1d7228326ff5d7d633a4c3a5fd6c588092a8f519","sha256":"9967c0be43c794c26e988d10a8fc979bbaed3fc8a6690880d1f2e60a84c4752f","sha512":"5a2b23232bf997cc87fe978c637bf582aaf24b575c631b8fe4a74ef0748456ea9567327b25a9fb52d4c98f2dba0eb8a648a3a59d353410b8e1acd23886c976a1","ssdeep":"","tlshash":"7eb0128097acfa300fc18685721b7c094d24306738a85cb48c3d6870739e97d394492d","first_seen":"2025-09-02T05:05:08.733156Z","last_seen":"2026-02-01T17:50:19.974049Z","times_seen":25,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/img/icon-user.54ed9535.png","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/img/icon-user.54ed9535.png HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 29743\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\netag: \"68ee0837-742f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i1Q9eKAvQWpUlWKBbeTumwCCz1vd6%2BlFiNibR%2BWwbEmdwpNAm7aVa1ChQTBLVrVWoAWljz%2FNpRENDf1mk9e%2FWQKg1oEVE2G5lg6a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b49a782efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 153 x 153, 8-bit/color RGBA, non-interlaced","md5":"bd09958409da335a77369ea6575dff15","sha1":"741b9536814a6b7b3a0a5feb0001da235ac9b628","sha256":"ab8b5265aa672252b20d35188de0f3068e59c73475bf084eba4ef650b34f59d5","sha512":"d79c7a95d2cde6275d5d892b9c5cb2a1aeef5ea8b4929cc14cedf53e750620815d41ffed7a3843763619fede12dd5da8323194a52ab44e6d024ec6f3a7994c6a","ssdeep":"768:L4dflHVEcEhAitzi1RXoq1wZDYaMrY8pUH3Ot:L4/mcoAOziPXozDYaUFUH3u","tlshash":"ffd2e1d4a671874e2e5152259a4e485b9f7fcc0f3d825c9eb973203844b96a873facc2","first_seen":"2025-09-19T04:24:17.702844Z","last_seen":"2026-07-15T03:56:36.822278Z","times_seen":63,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Oct 2025 07:02:38 GMT\r\nexpires: Sun, 11 Oct 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nage: 342200\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-28T13:55:02.717139Z","times_seen":289205,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/index.4baaa34e.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:50.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/index.4baaa34e.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DzWrJwBPnXmRPfFE5YO7zC5DQaO2QRo25nkk24EtbWCFDssMjcfJPURXC3JuImT%2FiuI8XWiFMb2VZDYqeF6RjmvPCVmXfljNv%2Fez\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68ee0838-fad26\"\r\ncontent-encoding: br\r\ncf-ray: 98ed20876a571525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1027366,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64385), with no line terminators","md5":"fcbbc060c236c72dcc0a6dba22e4eb94","sha1":"48001277e81b1a1577cfcaaa050f3a117347819a","sha256":"b3d554b143e695414bb12ef5fbadd4f3fa5e3037547764112cc9d6646b23c988","sha512":"6448daee0f4ec9ff65365f770acaf4a8797f13a7de33abb770f84fc25c141cb3a83f927a09ebeb9787639098274ca650c0fdb89080fd13b8bfa3df20e35129b4","ssdeep":"24576:APK8teCYCe3C0RgBZ8qds2Ua/JuvKFuqtrHmQiKSLYV0:uUa/MvwrHM","tlshash":"e2357d2632c7337406ea31c5708e3352f37a5d35a64998fea5b8d91930f5a1090faf7a","first_seen":"2025-10-15T06:06:22.987772Z","last_seen":"2025-10-15T06:06:22.987772Z","times_seen":1,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/css/5107.30d87ebb.css","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:53.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/css/5107.30d87ebb.css HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:54 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\netag: W/\"68ee0837-31b8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OSIyvW3G7FipSSI7M7m8YhcjJC7z7UvZUP2AZ5tOt8N309uMU9z9cOVoPqzLSh4tfMQORB70xwfX3nIIBMkT3BCjwpkBP2cR4xKs\"}]}\r\ncf-ray: 98ed209a8f092efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12728,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12728), with no line terminators","md5":"5ce86d217d95ed11c721654454a75c7b","sha1":"c6d66cb9f2869fae1727189df4af8e5eca26d9f1","sha256":"08730e5ad12f89dece6c6e97285f357d26ae3439fb6ab69c31a09e8b1a0c7b87","sha512":"c804b1ce4670ff2cf9a0f4a81971a9e6a6819af539c55d45ee8fefd9ff44cbd579abddca2970ab21e45bab8c5f388ddd02ec0408873cbe80ecac0d7a9420f290","ssdeep":"96:aKQkP+wQGxb7tIPnPRfQDQGCqeB8C2U4MHNvI7f2OdmIS+ivIQUaUCbcheu+pDl8:RQUnF7YPB8SSkgz2WmIxiAx3heunIm7","tlshash":"724212333a6a6038f02bd41634e05b8c822ee7b3f556ca6d5126b571cea71e3377164a","first_seen":"2025-10-15T06:03:33.031317Z","last_seen":"2025-10-19T14:24:30.889677Z","times_seen":6,"resource_available":false,"data":null}},"time_used":757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.walletconnect.org/v1/supported-chains?st=appkit\u0026sv=html-ethers-1.6.9\u0026projectId=c8589492ead98f2c58d33d893db237a9","fqdn":"rpc.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"52.58.124.212","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.walletconnect.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 14 Nov 2024 00:00:00 GMT","end":"Sun, 14 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"1D:90:02:00:57:2E:9D:06:7A:75:0D:AC:8D:14:CA:A2:A0:C8:F8:4A","sha256":"E2:9C:67:C8:C4:82:1B:79:CE:42:68:5B:CB:AF:0E:3A:69:E0:6B:62:05:7C:4D:B3:58:36:FD:79:D4:51:B5:7A"}}},"request":{"raw":"GET /v1/supported-chains?st=appkit\u0026sv=html-ethers-1.6.9\u0026projectId=c8589492ead98f2c58d33d893db237a9 HTTP/1.1\r\nHost: rpc.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: application/json\r\ncontent-length: 1233\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\nx-request-id: 8a6d61a1-52ae-4f19-ade8-a07c04abc117\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1233,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1b4149275de180032992aa81d91c5ac2","sha1":"9bdc1703cff55fd72b06da5642d3656867f2ec94","sha256":"78c76493a3d770e03cd02d1dfbf10a04187ffdcdb7a3c2d05b288edd04a11a9e","sha512":"8ca019149131e53da908ad084ea1460a1b34faf0a151d63b6522b0bde29014c649762cb8b53acbb29ea10b0d75a1652181be318baa2d2843d131a4b7dfd5c67f","ssdeep":"","tlshash":"d6217b4c88804940dcb0d399dbfce8cb94aef053a5cd289999f82cb051fd6b3355226f","first_seen":"2025-10-14T15:50:45.216707Z","last_seen":"2025-10-15T06:09:56.879159Z","times_seen":7,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":83,"dns":1,"connect":21,"send":0,"wait":24,"receive":20,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/1060.cd1c15f9.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/1060.cd1c15f9.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"68ee0837-1e0c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5xrUlkC79wjYgNm5kz9ROFDzD8CN0VnS0RWZUYj411xFIPvfzfg%2Fl7CkR%2BxUdNLUX44EZ35LQjBMvaFOqXCYsun17fViygsmCqI\"}]}\r\ncf-ray: 98ed20b71abf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7692,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2404)","md5":"9a8ff5dcbef8709830accc0137297c77","sha1":"f74ffc4cba02e13be598fa504161cc0cee4e9081","sha256":"f63aefb5515f3d5a3b4e58853fda77a18c9d7f80c9f05bcc6ef63387ad522893","sha512":"2f19676d22527b4434d528b89027f5346c12a320d81f9101e8dd8b6c5a303cf627ceba8166208a5e7b45082f3aebda0dd8a3f4e987c01dc56417a36e6332559d","ssdeep":"192:Qsp4Bmwly7Gn7+XLgxepe+Z/D8q0PHO8PPHAUUMiWAf+pPV8vDzKkgJNWte8Vi2i:QQcmwc7Gn7+X0xAxZ/tmJL6of","tlshash":"49f1ea58666398bd2622f3ca17ff07542124b4431c17dcbe32fc55d84f8866c1da6e76","first_seen":"2025-07-27T10:11:44.195259Z","last_seen":"2025-12-03T09:18:27.885765Z","times_seen":51,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/assets/js/3860.cb579428.js","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /assets/js/3860.cb579428.js HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 14 Oct 2025 08:22:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"68ee0838-79a97\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BKeP2uMnSeuKS1vcre%2F1Vs8fhVzXi7jA0A6HRXESXMSGlL0CQvlrtOjHDMLqTV%2BmnsTGXa8lpKtbdc94bRsWkaqBe7cInah38mAE\"}]}\r\ncf-ray: 98ed20a9893f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498327,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a6643a0e97215ed9025bed712a985e6e","sha1":"67ea12b9303aaad1662b94f407ce46dd748db501","sha256":"8e8e7bc6d5fe7ce87a5362458de45dc71e91a4a98d66dd40af32a73cfa07b965","sha512":"d5a065ee888bb9cb546c8c97ae5fe42f9a94523544c08a003e8610ca489c2fd0519fc7d5db1fb1c753bdde6547f005c2bbc065e0d166d52ca1330dc725622117","ssdeep":"6144:xpQQ82ol7YDyomKCYzLrM+xt2BaN17Cf2/slpXaFO+u:zQQ82o5Y2ok2marCO/cp0OH","tlshash":"45b419dcb291b425439721b0447f150fe33a694da80a85a8f669f4da7cbc44e623bf7c","first_seen":"2025-07-27T10:11:44.190937Z","last_seen":"2026-01-05T00:27:59.008559Z","times_seen":50,"resource_available":true,"data":null}},"time_used":1543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":960,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/api/account/bulletin","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:56.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"POST /api/account/bulletin HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:56 GMT\r\ncontent-type: application/json;charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UoDj5deatW8XW4Q6kjn63gO8I6%2BVqPv2T%2BYsEgutuzYss%2BTjVbaocUP%2BoALMe6d6jmkJjZYhgmfPy%2B3OgGFJ3DnH7a91FVQA%2FnDk\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98ed20aab96b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"50ee4589b8688c9f7cef8726113a6563","sha1":"357c7bbea528505e018d3839bff52c51d9a40e32","sha256":"6a62fa4b9149f1fe5e8f621c8af9967abb2f94add8e58514e40ccbee3bdf924a","sha512":"11946cdf502e8609f320e5a45887db7917351d3d30ed6b921d54c6df0236dbf74d4cda885a98164f8191bcf4b3a68da0e142a999f514d76b454000304294a756","ssdeep":"","tlshash":"fd90029015181f655b864067701a20048954714159a89429884c5115878841e1901960","first_seen":"2025-05-10T13:21:01.083992Z","last_seen":"2026-07-15T03:56:36.819285Z","times_seen":103,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"defirew.com/uploadFile/20240605/20240605104048.ico","fqdn":"defirew.com","domain":"defirew.com","tld":"com"},"ip":{"addr":"104.21.37.47","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:57.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"defirew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Sep 2025 01:36:42 GMT","end":"Thu, 25 Dec 2025 02:35:26 GMT"},"fingerprint":{"sha1":"A1:DA:1C:C3:9A:77:75:34:25:28:E8:01:AB:66:DF:AE:1D:59:01:52","sha256":"37:C6:77:CE:67:44:0D:24:6C:31:07:03:09:32:83:52:92:39:E0:75:BF:41:C7:D7:43:F0:D9:3A:B9:C3:5E:D4"}}},"request":{"raw":"GET /uploadFile/20240605/20240605104048.ico HTTP/1.1\r\nHost: defirew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://defirew.com/\r\nCookie: JSESSIONID=3DB729BAC62682E4E5578FA77CEDEA12\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 15 Oct 2025 06:05:58 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PU4B0Cfct5XTYx%2FG10g8o%2F366Ms7%2FsrM1OQYHno8JS5eFrnFrtzgBvvxQL0djdwb4fZlLdf1vdvav9Ly4r37pEKDrXmAVh2WQjHX\"}]}\r\npragma: no-cache\r\ncache-control: no-cache, no-store, max-age=0\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\ncontent-language: en-US\r\ncf-cache-status: BYPASS\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98ed20b2aa462efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"27bb654e054bbad24bd435ed43529d00","sha1":"1a0d482be1eee574d825629bfb7d9528b829ba49","sha256":"c8cf197434f00b8adc2e86f8144aaf5982b8ab110611fb09920b52e731e068c3","sha512":"bcafd44df50a9c82bb9287297580b37d473c4fbbd60f673b7cbdd21355e602f9c7c9409663ea09deb6ed8f40e5f11430b510c3a5220dde90c9458bb04560d9db","ssdeep":"","tlshash":"03a0122e0848f45c0b02f4e130c860300161545000a024103d10a1744494a0d4742980","first_seen":"2025-05-10T13:21:01.10085Z","last_seen":"2026-06-17T20:08:34.710414Z","times_seen":135,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-15","alert":"Sinkholed","trigger":"defirew.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/getWalletImage/88388eb4-4471-4e72-c4b4-852d496fea00?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:58.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 Aug 2025 14:31:07 GMT","end":"Tue, 18 Nov 2025 15:30:43 GMT"},"fingerprint":{"sha1":"90:70:98:DA:30:C4:2A:69:86:11:C3:5D:1A:EB:2A:61:65:C4:F8:90","sha256":"48:84:8A:62:B1:64:2F:51:4D:CE:C5:B7:E5:09:D8:5F:E2:FF:B9:E6:02:98:C6:8C:60:AC:66:46:06:06:8D:42"}}},"request":{"raw":"GET /getWalletImage/88388eb4-4471-4e72-c4b4-852d496fea00?projectId=c8589492ead98f2c58d33d893db237a9\u0026st=appkit\u0026sv=html-ethers-1.6.9 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://defirew.com/\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 15 Oct 2025 06:05:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2008\r\nserver: cloudflare\r\ncf-ray: 98ed20bb7ea10b59-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1033\r\ncache-control: public, max-age=31536000\r\netag: \"cfmtt24eHIh8mx0b8CAD7FI1OzfmDcyauXnchu_YTSDQ\"\r\nexpires: Thu, 15 Oct 2026 06:05:58 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=719+14 c=3+10 v=2025.10.7 l=2008 f=false c2=0\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nx-wc-r2-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ad5cab38c5477b10861597c294caf179","sha1":"c5e68dd36b9b9cfe78e6c8b8c6ca87d9c9975a6b","sha256":"1585361e26918c5ffd73a70b3963bdedd62feda6f8400985db9e85505e7a1ded","sha512":"1273021aac5283372f1a375d9555472c46b2c84000ba7fb89d138defea8184e65bf80a2acc41cd536b8e5d4bb7e58c00557798c89f8d1586bcad083c63b241bc","ssdeep":"","tlshash":"c4412e4541e54a7fc3bf6b47195ee27353434159363f52b70256c4a31504e712e90672","first_seen":"2025-03-05T19:21:16.036556Z","last_seen":"2026-07-27T13:56:26.717158Z","times_seen":169,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://defirew.com/","date":"2025-10-15T06:05:59.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://defirew.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 14 Oct 2025 23:36:06 GMT\r\nexpires: Wed, 14 Oct 2026 23:36:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 23393\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-28T13:58:04.056061Z","times_seen":248229,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}