{"report_id":"7ac1699f-d6b3-48f5-935e-7f7b01660b73","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-02-20T17:37:45Z","url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"title":"Understanding AMLCheck 2 in Finance Today","dom":{"size":146236,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (25312)","md5":"153cec5b5d6f8f69d61f0cef7c6f4998","sha1":"6341c8bea33e2c239eb1324bba363da56044e073","sha256":"852551c64f857ed845d93afe3569c1727187417300adb94451ce01cf0c1c1daf","sha512":"725b5762ebc801af5fe35bb31ead9921f528057dde43d5139d0f6eaa2da43e9fd15c8e93d8a831ec1254fe1dd8995b571d0ba4b0c8c00e9009e3415f854a3a10","ssdeep":"3072:T39q0uPG1NFZkjuKA1hrZkZuqG1NFZk16hQ:0XmFGydrGg1FG15","tlshash":"6de36cb18a8021b7953b47d2b516e649b2d4811fef730e21e2f8c69dcfd3ecd85295a0","dom_hash":"domhasha3c01fbb52dd9564ff42debc712463ff","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-27T17:37:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-20T17:37:22Z","timestamp":1771609042,"ip_dst":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35492,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-02-20T17:37:22.649425+0000\",\"flow_id\":530757492838752,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.7\",\"src_port\":35492,\"dest_ip\":\"104.21.41.142\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"lnjvfdjhbvlfnjfdv.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3472,\"start\":\"2026-02-20T17:37:22.627040+0000\"}}"}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"web3.leepswap.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-12","domain_rank":0,"first_seen":"2025-08-26T16:32:47.21586Z","last_seen":"2025-08-26T16:32:47.21586Z","alert_count":0,"request_count":4,"received_data":112165,"sent_data":2100,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":5,"received_data":54836,"sent_data":2555,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-02-14T04:58:39.948009Z","alert_count":0,"request_count":1,"received_data":761,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"lnjvfdjhbvlfnjfdv.icu","ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-09","domain_rank":0,"first_seen":"2026-02-20T17:37:49.735394Z","last_seen":"2026-02-20T17:37:49.735394Z","alert_count":15,"request_count":15,"received_data":7156457,"sent_data":8113,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":9,"received_data":468463,"sent_data":5011,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/_base/script.js?ver=1.0.3.9","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11c82b538a504b2a5343edac9af598aa","sha1":"18db14ceef1be0b45c4944b4b36e598c3384da1a","sha256":"c8b8f70e8c169927c2fe80ba5e05eda973ac539de4efc4a8d7d7a540f756c61c","sha512":"731161609dceb8ec6370adfe1ded6df967615b5ea1bfe95e35ef766eecef491e96c5aac6fae3b4f457835e2a24eba6a03bc97631c1761d7da6dd433d2e06223c","ssdeep":"3072:8OUjyTLQrfQFNys8upEaVz9Me0ljaJjAmAt0piL/yTbCdPe/6tdCZDWf+ji3k:8EpE6z911KGiyZDWf+ji3k","tlshash":"0b7483857bd0b888039b9f79721fb0e6f45f086e3c88494bd201fda165a6617eef1931","size":352077,"data":"","first_seen":"2026-02-20T17:37:54.073909Z","last_seen":"2026-02-20T18:40:22.818361Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/_base/connector/assets/modules.js?ver=1.0.3.9","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd7888c17d986b6122e6a9397cf907d6","sha1":"b4d8de352083413f9352fdb221525c81540a6a0a","sha256":"e531262f2af00276370279551348f4949a9d28b26af6be5f9a64cc496ac0b78a","sha512":"79f4a147849ba685e56a07f91c574d9970c5cb743ef6081fd2b4760e8656f760b92ead577d55004ab46158599d8c7cf554c3d53304070bf47b2ae97a2c944854","ssdeep":"49152:BC0EJoL7vMPaypp3JZ4CQmB0Rcj206bYF2Xi/Mf4hPGnN9EYtwkak9CGglx:Mmy3zQkA6mEwtwyjax","tlshash":"ff567dd073a0b0a5439752d0442bd005f339a82a644c449ff6efe8e76fa9e899537f39","size":6101525,"data":"","first_seen":"2025-05-16T16:12:44.565992Z","last_seen":"2026-05-21T05:00:59.324565Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/files/AMLCheck/assets/js/index-B7ZkpeSd.js","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbe6cc5c8e8d392e1c1df3cb25a669f5","sha1":"037b13af9e2aca8e47c7008a51aec7bbe2ef6fc2","sha256":"2c9d9e65ccfeb114a44b8e4e94e018a45fee3693cddb4d8f36075324e3f7a5fd","sha512":"45fd3294c80e96b92b2d7b3d4c4455509b3b54b499dc957a90dbec5d0abceea116c53ca1bff46a26ef87a2bc472f17fbdf046a91cc0604060ab0bdf4be0d62a3","ssdeep":"","tlshash":"6b3121b02469703a005e0adff5f3d3dcb6a430def89194a1a06c8c9f5968cd15ad6afd","size":1727,"data":"","first_seen":"2025-08-26T16:32:55.330268Z","last_seen":"2026-02-20T18:40:22.817675Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T20:35:30.645558Z","times_seen":364176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/_base/connector/assets/w-modal.js?ver=1.0.3.9","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-06-06T14:52:18.350701Z","times_seen":180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/_base/connector/assets/w-loader.js?ver=1.0.3.9","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-06-06T14:52:18.36822Z","times_seen":376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/_base/connector/assets/main.js?ver=1.0.3.9","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7afeec46499165cc7e394b896445aee","sha1":"3af1b670bca4de2d912a67add69c5cfbe22f3a64","sha256":"b1405893eb590d13cf5582e7c91e2605fe3fca887bed907cda9fbc369034267e","sha512":"7b51b1c8c0d4195b3b695a8810b32977deaa18fd1c5d6b0244a2b369468b79b8206cb86a3ca655fcbd8ce1d7d2251ad727d3a3422bc7fb889f22762e6cbe4081","ssdeep":"1536:GXIWVqVZrdqncIIL0vSqc3c84B4U3S+ithPdDj8ZVB7FZ6g8aLQfROhTk:kIWVqAcIILQ36U396g8WZ4","tlshash":"5d44d8985027553c84ba377d9a135100fd31b397a1898ab63afc8811affdd90c6d2fad","size":269358,"data":"","first_seen":"2026-02-20T17:37:54.01804Z","last_seen":"2026-02-20T18:40:22.819256Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/_base/connector/assets/modules.js?ver=1.0.3.9","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/_base/connector/assets/modules.js?ver=1.0.3.9 HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 23 Jan 2026 16:03:58 GMT\r\netag: \"5d1a20-649104e1ae924-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4iRPcvRm%2FmPAMs5uKVvjQ7Bkw01EWJK4Yezjh8D%2Bvzy6a7YWZ3jWyypSIjRAFxfYcSF7YLwQORm1O6OtICrjv2s4ikvdV%2B%2BZqVQocpFy%2FtPo1NQWTg%3D%3D\"}]}\r\ncf-ray: 9d0fc5870bc1370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-05-20T17:35:46.271227Z","times_seen":139,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":318,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/_base/connector/assets/main.js?ver=1.0.3.9","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/_base/connector/assets/main.js?ver=1.0.3.9 HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 37803\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 10 Feb 2026 14:37:00 GMT\r\netag: \"41e98-64a793033d081-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRGhPQcoO3uSLPOPWp4IfgHGKy4HQzEvKrHmQwxeAi%2FIDPZaxcrn2zHGCoD0eQIBUL%2F5VnAJ1s%2B1%2Fav8LR8vlHtKvRk7hzp%2BRoGVDChTmSu5do1hJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0fc5870bc2370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269976,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (4614), with CRLF line terminators","md5":"c7afeec46499165cc7e394b896445aee","sha1":"3af1b670bca4de2d912a67add69c5cfbe22f3a64","sha256":"b1405893eb590d13cf5582e7c91e2605fe3fca887bed907cda9fbc369034267e","sha512":"7b51b1c8c0d4195b3b695a8810b32977deaa18fd1c5d6b0244a2b369468b79b8206cb86a3ca655fcbd8ce1d7d2251ad727d3a3422bc7fb889f22762e6cbe4081","ssdeep":"1536:GXIWVqVZrdqncIIL0vSqc3c84B4U3S+ithPdDj8ZVB7FZ6g8aLQfROhTk:kIWVqAcIILQ36U396g8WZ4","tlshash":"5d44d8985027553c84ba377d9a135100fd31b397a1898ab63afc8811affdd90c6d2fad","first_seen":"2026-02-20T17:37:54.01804Z","last_seen":"2026-02-20T18:40:22.819256Z","times_seen":2,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:25.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:24:33 GMT\r\nexpires: Sat, 20 Feb 2027 02:24:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 54772\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T20:39:11.727899Z","times_seen":206416,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3.leepswap.com/","fqdn":"web3.leepswap.com","domain":"leepswap.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:26.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leepswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 22:53:01 GMT","end":"Wed, 06 May 2026 23:51:41 GMT"},"fingerprint":{"sha1":"D6:E9:45:01:F2:E2:1E:87:00:B3:78:1E:96:89:9C:8F:AD:F5:51:5E","sha256":"59:23:E3:61:1C:68:97:E1:F6:9F:9F:F8:EC:3F:52:6D:64:50:47:BF:6B:35:F6:11:3A:DF:17:8E:91:2F:F8:3B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: web3.leepswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 607\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":607,"data":"v=150725\u0026s=1\u0026r=1d013210214b2a081a4a4c11371132141a162a141b14414b222f320219202a1431110f111c2036141b144108223b314e31123d02363c2911343b3248192f4914311217113512390d353c310d3512390136110f1f352c1b4e35021b4e35122111343b32131a4a4910192f4c113711320b1a15084a22152a09193f324a1a3f220d191522131c114d08214b2d11343b324b1a4b320a2220321e192f291137113212363c130235121b4d212b310b311549141b4b3610224a2e1e1c30351137123d4b36023d4a353c130f363c210136122d0b3115361721202a1e223f3e48212b314e22153e0b1b4a2d0b31161c101a3f00141c3e4110223f2a01222036023112080d1c2f000b343b320f212032481a152e01204a3e13223032141b4b3511371522101a3036141e294545"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 20 Feb 2026 17:37:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"28-dRoMTD5qshqwQHxf/oDze/csXZI\"\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X57EWyyxChMTXOg1waK4%2F9u36B1V%2F1B90uCh20nl1reRVvkEGsuU53u3ppCtdljIf33EGQ7af0Y8fvN%2Bqayb%2BtLlh3ZeEhT0Mqb%2FH6vC5ZUk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d0fc59b3fc92d96-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"022dd6213d55768bb43198cabd3b7628","sha1":"751a0c4c3e6ab21ab0407c5ffe80f37bf72c5d92","sha256":"12c36fd9afd7c4ee554601fbc1d0881d951e0e1fbba06ababac035207059f796","sha512":"f776576f0a8f3e6b8312b888a3da1db7a567112693104864209046c52a80e01aed8a5d733b1a43b24d6b22d440436e3ad24c6902ad7e9dd4f022e9e85075ca3c","ssdeep":"","tlshash":"6590047150055c40c5343000f415031ff01140d50073401c3f5113413f1341d35400cc","first_seen":"2026-02-20T17:37:54.020878Z","last_seen":"2026-02-20T18:40:22.823531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/files/AMLCheck/assets/img/Byb-ZIIL.ico","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:24.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/files/AMLCheck/assets/img/Byb-ZIIL.ico HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:24 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKh1IUmXa%2BnVdt8afrQfg4AEMaW%2BXMjelx1xlppldbVr1q5t6nsori6mPfW7xo0RycIOr%2By7zGMGYiej8%2FC6IkRYwK33AWWwsFA%2BT369wftJeh0giA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 02 Feb 2026 13:08:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"a76e-649d7044735dc\"\r\ncf-ray: 9d0fc58fbd30370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42862,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 103x100, 32 bits/pixel","md5":"854845c9dc489b715a93d6718e1d65a8","sha1":"8126b243953b16480417412e11633c05ceec3208","sha256":"85573e3bf8fdc1b4a255135b2b61dc422992ae07f2c0ce53d4fd79a7c98d1152","sha512":"d5c421e91f3c869839c8d2207a63f6d506f287a1e7670da2c06079ed425533db8ebc559cbec2844f9614189c5a64055f3f4aec1bc02f9f3d62c6f21dc7813fc6","ssdeep":"192:nVNPtBme7yyGkbVlDRGxeODlmRqqQL3JSpE1t3O2KP2iO8rNZMvTZUwoHVV9AJpR:VEyLpqHN/BZvTZxoHVV9AJpQn0owt7l","tlshash":"c21312a0a462e395f0db353945a3d5f8645bfe9873820812e53c73f91933a835eb374a","first_seen":"2025-06-20T20:01:15.025332Z","last_seen":"2026-05-30T00:52:26.34201Z","times_seen":229,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter+Tight:ital,wght@0,100..900;1,100..900\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter+Tight:ital,wght@0,100..900;1,100..900\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Feb 2026 17:37:23 GMT\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9914,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"98d2d36e3f88ac8eac9361c2da6c3615","sha1":"a065467a3b75d2d38b5ec10b1718f90ec33dbbe9","sha256":"6a73647bd166939991fcf57a2b755bc6e1674bbec10bfecc765499bed934e6a0","sha512":"aa8d95b7068e6531157210abba129244ce88ad15d5a945f07042a5cff477f00b0fdc9fce38fadb8bb436bec17fd65ba5ebe94f38e4a8f0dac48bf6c30fe19a34","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHJyIby0yoyi3AyxyvNyOk1cDE30DQf5:vtfcHjg8ciI5ZbBR3ACSK3N","tlshash":"0512cc91052b9514ab831dd227cf7e32ae8e91557082d6b96ffd1ccdacdad23023874d","first_seen":"2025-10-09T12:53:34.316419Z","last_seen":"2026-06-08T16:20:54.258626Z","times_seen":214,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":172,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/files/AMLCheck/assets/js/index-B7ZkpeSd.js","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/files/AMLCheck/assets/js/index-B7ZkpeSd.js HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 788\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 02 Feb 2026 13:08:17 GMT\r\netag: \"6bf-649d7042e4a68-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grCNR3EnCVWv30Xz2I7%2FvwHT1AciY3HJ8BOvzNjgu9zenc92d%2FwgjOA%2BFKDzTji50s989yXzDSuiPS3GBUC1YFtFZFv3GRrEfOHw%2FMISdW%2FiVTMtzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0fc586fbbb370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1727,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1726)","md5":"cbe6cc5c8e8d392e1c1df3cb25a669f5","sha1":"037b13af9e2aca8e47c7008a51aec7bbe2ef6fc2","sha256":"2c9d9e65ccfeb114a44b8e4e94e018a45fee3693cddb4d8f36075324e3f7a5fd","sha512":"45fd3294c80e96b92b2d7b3d4c4455509b3b54b499dc957a90dbec5d0abceea116c53ca1bff46a26ef87a2bc472f17fbdf046a91cc0604060ab0bdf4be0d62a3","ssdeep":"","tlshash":"6b3121b02469703a005e0adff5f3d3dcb6a430def89194a1a06c8c9f5968cd15ad6afd","first_seen":"2025-08-26T16:32:55.330268Z","last_seen":"2026-02-20T18:40:22.817675Z","times_seen":3,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/_base/connector/assets/w-loader.js?ver=1.0.3.9","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/_base/connector/assets/w-loader.js?ver=1.0.3.9 HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 7719\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 13 Jan 2026 15:38:56 GMT\r\netag: \"a2f4-64846ca261c9b-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sv6Z9xfudQEv%2Fp7zweLrfmSzGiX90Sr8IxyckC2JVdITgmvNqLGW7Mhk06s2mu25hE1LpT%2F9uuMjA0pk7ozBld55XTJcc2xpgT9xCODujMDLi7hjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0fc5870bc0370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-06-06T14:52:18.36822Z","times_seen":376,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/files/AMLCheck/assets/img/Bkw0BUZH.webp","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/files/AMLCheck/assets/img/Bkw0BUZH.webp HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6424\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Feb 2026 13:08:20 GMT\r\netag: \"1918-649d70461fde9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFqI8at0sYXX%2Fj6uoNafN%2B9YSC0RorasY0EeFHeyqyss0zeL28Y%2FHXT3NQvlBe0cdzEzA%2B3P%2F9Sfamc7eHzJKPSQd%2Bu60ad%2Ffve8X6WV2AEELC93wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0fc5870bc4370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6424,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"49341e5c4319fca0092be6bdf8e945d3","sha1":"0e133daca44803ff8563a0a6a5a5b31ce7bdd7a8","sha256":"15b2ebc605c5100cded817daf179bd92b36ba737bf9f0893aca41e8a98c7ac46","sha512":"6f6472137431081e8a2eda921f761392402151bbf23690e2f0ce73412a9191b1f90c5e1bc4488ab614bd295bd769351294e0cc34ea552908ce38f8768eaa9446","ssdeep":"96:6z5UTHP/0OKbRPJomoBVFXRnH1dKbQmVdo9nWfUArZCrzglHB25f+G6R8LVZYEeC:m5CHETRBoVjBVHm0hQVK2/R8j6WAq","tlshash":"47d1aee1532b369de40a6fb8af8963526684a92c581a7c13192fcf5e9d817e48030fc2","first_seen":"2025-08-26T16:32:55.358593Z","last_seen":"2026-02-20T18:40:22.827778Z","times_seen":3,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Feb 2026 17:37:23 GMT\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-08T20:56:25.386951Z","times_seen":29640,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:opsz,wght@9..40,500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=DM+Sans:opsz,wght@9..40,500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Feb 2026 17:37:23 GMT\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0bf8396960a2a8844905e447962a0421","sha1":"dcf89331830616c0b48f870c88c4f6c8e08b3710","sha256":"6ddf0629319fabc2c23e5d49714933a0a5e20d0d1eeddc08df318bf7155150b0","sha512":"9d4071ff00a77a21098ff4b098a24d7634c032e41bc905140b2caea6e12f95dd1ef6270f1ee955ff14a44b24f519d7fe3c56dea373965b333ff99ff888fe9184","ssdeep":"","tlshash":"8911cc81042ba120e7831cc562cdbe32ef1e915164449934abfe1888fc6ec3e537674d","first_seen":"2025-09-24T11:19:51.014998Z","last_seen":"2026-06-07T22:23:38.467742Z","times_seen":273,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48444\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:54:19 GMT\r\nexpires: Sat, 20 Feb 2027 02:54:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 52984\r\nlast-modified: Mon, 29 Jul 2024 22:51:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-06-08T20:53:04.264925Z","times_seen":22642,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":159,"dns":1,"connect":8,"send":0,"wait":10,"receive":3,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/_base/connector/assets/w-modal.js?ver=1.0.3.9","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/_base/connector/assets/w-modal.js?ver=1.0.3.9 HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 11023\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 13 Jan 2026 15:38:56 GMT\r\netag: \"9307-64846ca23847c-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BdjgQPaVeZrdM%2BbM68MKsFGToZNW%2FfxDzjLJmlRyhgf2E8XGRmbdTs5ghAaIIUivWpCr7Xra752TN4k9bSG5xho5ev90Afr7%2FEBFH%2F%2By24hSa4sCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0fc5870bbf370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-06-06T14:52:18.350701Z","times_seen":180,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/files/AMLCheck/assets/img/gzJaQJ7U.png","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/files/AMLCheck/assets/img/gzJaQJ7U.png HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 55510\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Feb 2026 13:08:21 GMT\r\netag: \"d8d6-649d7047130de\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X5X%2Bqfv%2FFdRYBwuXc0KCosjOSMBu96%2BgGG%2B5rFMooIM934mD2YLbXYzeI7AqQUZfR2m2Q%2Bf%2FjZRLQKatdAEKK5d583F1EP7f7wqLkMIME0Og0K5cFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0fc5870bc3370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55510,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1512 x 2130, 8-bit colormap, non-interlaced","md5":"82d3ce1220da7e756df373b95b73a949","sha1":"8ce1bf273ed57e2ab202b9fe1ff8fe322cd73eb6","sha256":"8a59054d064bfbff0b63e85d0a7a6f4285b51ac7efa631fb70fb686edfcfb9f6","sha512":"a70bf941efc79455aa05f05c061cae071d0d55650325fb542ff9d847d614c50918d27e17586470f0061c984623f1296b5c27e68f9a3fd25595fe01204a295b06","ssdeep":"1536:uIYIdkZXtgTaorstSGmOnekTYETiz6TqD2DE:POJGThWHAoYE1TqDz","tlshash":"ad43bf3794c0a23128a7ff6f51e968ae7452f90bd87661aa11c0eb3dcd2fe930651493","first_seen":"2025-08-26T16:32:55.317478Z","last_seen":"2026-02-20T18:40:22.827284Z","times_seen":3,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 20 Feb 2026 18:25:23 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jedz8xWgISd%2BFgcaralIE2yuALc61d3ShM9q8bZ63XRbcoMUGsxcamWw9mMAxYnStX0m3jyCn5ovY4PyMQ8fUt70%2BK56qfBUesjSV3lfULjWhAehTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncf-ray: 9d0fc5870bc5370a-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T20:35:30.645558Z","times_seen":364176,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:25.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Feb 2026 17:37:25 GMT\r\ndate: Fri, 20 Feb 2026 17:37:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-06-06T06:06:40.00594Z","times_seen":124,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:25.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:24:33 GMT\r\nexpires: Sat, 20 Feb 2027 02:24:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 54772\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T20:39:11.727899Z","times_seen":206416,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:25.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:24:33 GMT\r\nexpires: Sat, 20 Feb 2027 02:24:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 54772\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T20:39:11.727899Z","times_seen":206416,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/files/AMLCheck/assets/img/g2l4Am56.png","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/files/AMLCheck/assets/img/g2l4Am56.png HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 31090\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Feb 2026 13:08:18 GMT\r\netag: \"7972-649d70441889c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LA6ZeLpoH0YK%2Fre2hiNdTt9wNxJoDi%2B9%2FB%2BV9bWjVdo6dPu0ygnBQPe6vZ92i7aasmr0R1YaCJ4FSmyvai6AstsA4Bl3ozaMra%2BANWcX7VAaZEIB%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0fc58a8c36370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 706 x 639, 8-bit colormap, non-interlaced","md5":"4586ce28ffc0ee5c826a33ab3ddad3f5","sha1":"2b76860b90afbdf0aba5e26c497da670d5d47a91","sha256":"191c47b201cced1e4f71c71487b44f4039c374168d887950462805b471eb9c11","sha512":"1d2e053769365a99e697d8e9550e6bba3127b95e8a9a99cd4d72b0abba4a9973c609ee6cf1392af9570b04dd1391330b97ec05e61d70f95d25efa1033db8aa80","ssdeep":"768:QKOIZEq63YwH2L6aVKfJDWb+ow6govzLwiF9FPUCaf8sy:UIZEq6eL6a8fJDU+oS+LFF9FPUCCy","tlshash":"6ed2f101d964f7dc41eff687affae1c21f06dc88699e2d269849b901a0bcedc5102a75","first_seen":"2025-08-26T16:32:55.364502Z","last_seen":"2026-02-20T18:40:22.820877Z","times_seen":3,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":143,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/files/AMLCheck/assets/css/CZFrD9Ti.css","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/files/AMLCheck/assets/css/CZFrD9Ti.css HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 6583\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 02 Feb 2026 13:08:17 GMT\r\netag: \"a5bb-649d7043088ad-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vujF0YHnzEqtOVvA8ZKCn464CXsuPwm5i5ZWOWUUtlOXF2kUIztE2Q%2FhHnmCjQjHpDjGxXbhpXb9Eo0N37XJDkMZgnOkEuXhi%2BbSg0q89BCmjWdIQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0fc586fbbd370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42427,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42426)","md5":"1bb6288c3c2957a3721b6894f88c630d","sha1":"77c3810fd849187ad42464139ce2f562e1662e1c","sha256":"082009e223b84087811b880257b88bcbc7b8bcacf252acf06920a77d842633cd","sha512":"4ce8c593238295a0c4afe199525269d3c4c212112e9fff71f104baf911f347e19b201ec21f7ca23a7037d75181ce5eeacaa7346277e3a8654f4649c40a30f58a","ssdeep":"768:qTEZSOIBf/6vRroMuXwOwxTMJihog8V65cdCNEgooBuntB3sESH:nMJihog8V65cdCNEgoQ0zsp","tlshash":"e913b7332518600ce557895335cf6b8a303c6408e66a52f6de1a7d9dcecf5a32673b88","first_seen":"2025-08-26T16:32:55.352811Z","last_seen":"2026-02-20T18:40:22.822101Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:24:33 GMT\r\nexpires: Sat, 20 Feb 2027 02:24:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 54770\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T20:39:11.727899Z","times_seen":206416,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":96,"dns":1,"connect":14,"send":0,"wait":12,"receive":3,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3.leepswap.com/","fqdn":"web3.leepswap.com","domain":"leepswap.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:26.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leepswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 22:53:01 GMT","end":"Wed, 06 May 2026 23:51:41 GMT"},"fingerprint":{"sha1":"D6:E9:45:01:F2:E2:1E:87:00:B3:78:1E:96:89:9C:8F:AD:F5:51:5E","sha256":"59:23:E3:61:1C:68:97:E1:F6:9F:9F:F8:EC:3F:52:6D:64:50:47:BF:6B:35:F6:11:3A:DF:17:8E:91:2F:F8:3B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: web3.leepswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 535\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":535,"data":"v=150725\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 17:37:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"f108-/MC0G5tsFrBQAb3sB+fhAtyimfw\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBbODhwUTMIm9cxB4gTIPMRPbRcFVKld%2BtADPaP0g0cWbu3xqVhwWCQEtvF3vgwQQq7tthnv3Wi9ShVGLHwP5GG8ljX4LTKh8rE5SD1uYrYV\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d0fc5999bebeff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61704,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (61704), with no line terminators","md5":"d0c0a32e42d68d85cb57541ec6700d1a","sha1":"fcc0b41b9b6c16b05001bdec07e7e102dca299fc","sha256":"82092c8dc6ca3e7e475698e52c49f9badd95063d088368e1601d20a70d3d36f8","sha512":"576132a71eed09df455e2d4b688121bb6696568341b2d32cce3551dda851510ef9bc53cec948ccc91de7f342a8ede515ece72270ee1fcd2de20b0889a14837a5","ssdeep":"384:eNCN5N0i2essNbknTqcCDNB/hANBNzKty8MySJ92JQ12FhN7I/ZoVg46/JmyWe0A:AU70i2esiK0JB/h2zOtXM3/2S12dUaX6","tlshash":"bf537a906ee170f086556627b3554d7f37246bfe243b88032eb183e92d31b79f39909a","first_seen":"2026-02-20T17:37:54.038392Z","last_seen":"2026-02-20T18:40:22.813717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/files/AMLCheck/assets/img/DnlstxIX.svg","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/files/AMLCheck/assets/img/DnlstxIX.svg HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zLt86uTs5xryHCrGI099BkweN6mDkzeJlWNITLiR62OkHlOTXZJHRjaJTL%2Bp7Wp4%2BbYWmUTaKNJr4XRNE4jCKKlk3zskxvCot08PwgYNItNx%2F%2BGaZg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Feb 2026 13:08:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"a487-649d704438c47\"\r\ncf-ray: 9d0fc58a8c37370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42119,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fcb4f94dd3910af01852ea9fa42ec081","sha1":"0dc948569c54f545e9c005f2af79b7c89b5edd61","sha256":"d552e4d03e5e896fc921f13aeffa3689741b06fca3df79642b73e86cbdd3802c","sha512":"6981df3a12feb8d887b975c5f4b121f1fb0517a1fdd4b485489eaac5e8afb347b822b5f14905c127e94a482df7e66aa664e020d06df3171d3411aedc52c78339","ssdeep":"768:hDYFKtjpKe4avNWkivH178CzTziNLCqrvfYw/b:hMMxmaAkK78UT+N5TfYwz","tlshash":"f013a6da1730a1dcd5979dadff2668ec331ea0f97a3701c48a5f916869939c8f907c20","first_seen":"2025-08-26T16:32:55.379272Z","last_seen":"2026-02-20T18:40:22.813122Z","times_seen":3,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":142,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"web3.leepswap.com/","fqdn":"web3.leepswap.com","domain":"leepswap.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:25.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leepswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 22:53:01 GMT","end":"Wed, 06 May 2026 23:51:41 GMT"},"fingerprint":{"sha1":"D6:E9:45:01:F2:E2:1E:87:00:B3:78:1E:96:89:9C:8F:AD:F5:51:5E","sha256":"59:23:E3:61:1C:68:97:E1:F6:9F:9F:F8:EC:3F:52:6D:64:50:47:BF:6B:35:F6:11:3A:DF:17:8E:91:2F:F8:3B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: web3.leepswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 511\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":511,"data":"v=150725\u0026s=1\u0026r=1d013210214b2a081a4a4c113711320122202a01192f2e4a222e4108223b310b31152a0e1a2f3e081a11314e3115000d19162215223f08172116220b22154d0922152a4a341514121c2b310b31161c0e1b150c141b144108223b314e31153548372c35013602141031110f111c2036141b144108223b314e1a162e0b1a3b0f111a2f2e021b4a3e16222e41481b01314e352c1b4b352c210f372c3948362c3900352b0f11214a10101c3e411321202a1031120815212f0002222b0f111c4a3e0b1a3f2e48204a3e13223032141b4b351137154d491a3f0f0b31163a101b162a0d2220321e212f2a131b152e021b01314e22153e0b1b4a2e41"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 17:37:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"48-cx0qPHxpKtKUaDiweyUKZKxhgTY\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WmJiFvpbEZaFRIz8wZttMIfRVg6tlasJ%2BDvyJBUPODrp45%2BVRswZR1DVKVhaUFjf2buMVNkoSqdzktBfDKUO1ICoL6F%2BIhzQnMp%2BCoKBHA91\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d0fc5957a66eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":72,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"60bf653f9c1527731a38afa98d3b81bb","sha1":"731d2a3c7c692ad2946838b07b250a64ac618136","sha256":"052c38f08fc4f51f61efd3eae15209386722a94aeffe99adc2283e8371513c72","sha512":"fc842cdbabb32afb98a5f1f41c409c0049cf3c1220e2901124d81971561419869cc1247dbf761c9f45a8f1c72245b2e881b35a45aad4da6ca3c044aae7ccfab5","ssdeep":"","tlshash":"8aa002d75249b98086783433b51d5f2fb1a202d971b2d82c3fb123827e524a8b5c20ce","first_seen":"2026-02-20T17:37:54.046461Z","last_seen":"2026-02-20T17:37:54.046461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":48,"dns":20,"connect":8,"send":0,"wait":359,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3.leepswap.com/","fqdn":"web3.leepswap.com","domain":"leepswap.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:25.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leepswap.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 22:53:01 GMT","end":"Wed, 06 May 2026 23:51:41 GMT"},"fingerprint":{"sha1":"D6:E9:45:01:F2:E2:1E:87:00:B3:78:1E:96:89:9C:8F:AD:F5:51:5E","sha256":"59:23:E3:61:1C:68:97:E1:F6:9F:9F:F8:EC:3F:52:6D:64:50:47:BF:6B:35:F6:11:3A:DF:17:8E:91:2F:F8:3B"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: web3.leepswap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 527\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":527,"data":"v=150725\u0026s=1\u0026r=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"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 17:37:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\netag: W/\"ba40-z9HPO3EAfHrMbQYueFnycp30rwE\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1miNzXIu9xE9hwVT8Fo%2FRg%2FozwlCODsGJzif830eh1xrUHvpBvqb1JfTimCNa%2FBqy5d20Zoncya7FWlqEiTAJo2ZrbxRp9Zb%2FRqCHjJvGmz\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d0fc597df6eeff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":47680,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (47680), with no line terminators","md5":"10dbe703a90dd8ca3f38fb8fa28247af","sha1":"cfd1cf3b71007c7acc6d062e7859f2729df4af01","sha256":"268664c6904a4c4a2cb74d4ac9b55553a436181361da3998941df91f19c327eb","sha512":"9f57b2ea7d584559205ca68320a7622cfc4457e5c30bfdf5a2998eeb66d128b1eda29d33d3d26695a7840b24dc68977313fecb2722c424d511bd06d416493c7c","ssdeep":"768:I4gjGwE7sXVUV/GbeLki4TGqCpyqAsX1onpefQuKDvjg+I14Zq:I4SGwE7sXVUV/GbInZ1qruCbg+Iig","tlshash":"f2237ca5a1c174e04bada576da4adc7d250a1ffb187bdc0207aad3e01a31b78f75204f","first_seen":"2026-02-20T17:37:54.048251Z","last_seen":"2026-02-20T18:40:22.825945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@300;400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@300;400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 20 Feb 2026 17:37:23 GMT\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5781,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d69ee59cf70872e7c370d88d899cce29","sha1":"b42b307d618b9915b552aa9a9b62a6a1abb39918","sha256":"98b2ff72d1ae133f7fa0e0709ad37817fe1ac008d39027921f45b1c3dae10ec6","sha512":"0e6061788aeac50ee90e9ee56f035cad115ca0c462708305d07c94c2370d852e77b72333b9e7bfd8f3ca40652587ee8a2edb3f6d0a7e68d57a305b383e001dad","ssdeep":"96:AOO1aRwOO1aOFZOhOO1aJOO1aeJc+udOO1au9NtOOEaRwOOEaOFZOhOOEaJOOEaa:FRV7y6OfuXRo7TbOmu6RB7W+Oju8","tlshash":"d1c1be91105be500e6472cc923cf7e26dd4e216274a4c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-06T09:12:49.529012Z","last_seen":"2026-06-07T06:18:36.685252Z","times_seen":588,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/files/AMLCheck/assets/img/JRDTyeab.webp","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/files/AMLCheck/assets/img/JRDTyeab.webp HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/application/views/templates/files/AMLCheck/assets/css/CZFrD9Ti.css\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11422\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 02 Feb 2026 13:08:20 GMT\r\netag: \"2c9e-649d70463da84\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yCeC2Nt7XNWW%2BTSr1XXAqd2nsCbnav04k%2FndDvcHrywoFj4PllXyqx52AJ5ir0uSe2QAKn84ED6ToWhOguv46%2FoEt4%2F24QzASgeLFZZDmqmKVw1SCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d0fc58a5c2d370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"323f9232dccfd120be02a605005c63fd","sha1":"90066e459eebbee98bd1afb70e051de1c806fb56","sha256":"90b52522021a678f47ebce105b7d2938c6910515ad6faab3215e6cdc100326e8","sha512":"97b3a44e7c17d3fd9a020d619359017320be0a567cb98d1cf159d7673e5dde836344a07f791d549443bf7450f7d87b970cd85c07c133c1825de9e90f27e18ebd","ssdeep":"192:kSnz7xEImSnzUKD+/6bMY3H9XOhjj/Mvc8o/EAaCJARsgb:kSxEImSBD+/6JH9ehnvnJAb","tlshash":"2f329e42ff4b4ca12baa0d1eb16986416c4634c7cf6adc3b16c2436bb0615bda65133e","first_seen":"2025-08-26T16:32:55.372918Z","last_seen":"2026-02-20T18:40:22.811603Z","times_seen":3,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T17:37:22.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 17:37:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v; expires=Sat, 20 Feb 2027 17:37:22 GMT; Max-Age=31536000; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9egUy5lyCICWZPrcGLQ850NdHN1xp4ygWiwiTAEct82fgrZXRZn8Ihjs2W%2Bhqhu0VdYZuW3MDO2mWHHmWsX%2FiDrMukFcQNH06zarEjmb3lW0JinyHQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d0fc584a9a65210-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":108004,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63302), with CRLF line terminators","md5":"e525e6754acf8dd84e218825a2c92c3f","sha1":"80d7f3dc5686cd13570c72e854249d1b026b10ca","sha256":"ca294e341eb38c4ddcd814bb084d7abcfe6ff3e885e45f5d5b0e9a8fa9d15446","sha512":"f6b20c829f8e3fa46a43cadddcddc5f7855a971aa0da07899b5ed9776edd6c9cd2377438e77589fcc4fd71f1f3e849202b76aa51c952e80beef60bcd05966976","ssdeep":"1536:mmaxIt6lLAeFRenEUlnCWVuf5qgSDDw142cccjZW3yccc8u85qgSD9w162cccHZk:oIufX149Zk+u8H16dZkuu6X149Zkguh+","tlshash":"47b37dfa965025f3412317e6b02653aa719a916eef13493093fc4badd7e3cd4982fc80","first_seen":"2026-02-20T17:37:54.058991Z","last_seen":"2026-02-20T17:37:54.058991Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":106,"dns":76,"connect":8,"send":0,"wait":175,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48444\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:54:19 GMT\r\nexpires: Sat, 20 Feb 2027 02:54:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 52984\r\nlast-modified: Mon, 29 Jul 2024 22:51:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-06-08T20:53:04.264925Z","times_seen":22642,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":166,"dns":0,"connect":7,"send":0,"wait":12,"receive":57,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Feb 2026 18:20:45 GMT\r\nexpires: Tue, 16 Feb 2027 18:20:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 342998\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-06-08T19:33:12.053385Z","times_seen":25914,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":79,"dns":1,"connect":10,"send":0,"wait":9,"receive":14,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48444\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:54:19 GMT\r\nexpires: Sat, 20 Feb 2027 02:54:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 52984\r\nlast-modified: Mon, 29 Jul 2024 22:51:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-06-08T20:53:04.264925Z","times_seen":22642,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":152,"dns":2,"connect":21,"send":0,"wait":8,"receive":5,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:24.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 16:51:02 GMT","end":"Sat, 09 May 2026 16:51:01 GMT"},"fingerprint":{"sha1":"0F:6D:F3:9D:A3:B2:69:AD:D0:53:45:D7:4F:B0:14:DB:D5:02:E7:FB","sha256":"18:DF:3C:73:28:AD:76:02:F3:5C:88:EC:50:60:3B:37:05:36:33:9C:D1:26:9A:21:C7:9D:52:35:B4:0A:2C:92"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 20 Feb 2026 17:37:25 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://lnjvfdjhbvlfnjfdv.icu\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=10\r\nX-CryptoCompare-Cache-HIT: false\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-36\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":152,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fa3eb3dc7547c5048aaa6e2b1cef6899","sha1":"a696528883a810ea25945cc4ae80656905d2f12a","sha256":"e72deeb4bd3591cb46d636c1f767cd20ceae9b96e574c15ab1f7e54cc981f68d","sha512":"858cf63e2a4a72ee7543932d260c0ba97ef64cb3de1e630f8601ca75cdec41c15a9c6c5392fc7cec17adb02bf8102db7a6651c34df14b63602b7f7db3fc19fe9","ssdeep":"","tlshash":"74c09b45dcddf0755312ad773ce0f6f59400411cd7a14914d4154e5d6ccc58f57dd091","first_seen":"2026-02-20T17:37:54.072007Z","last_seen":"2026-02-20T17:37:54.072007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":75,"dns":6,"connect":19,"send":0,"wait":36,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:25.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lnjvfdjhbvlfnjfdv.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 20 Feb 2026 02:24:33 GMT\r\nexpires: Sat, 20 Feb 2027 02:24:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 54772\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T20:39:11.727899Z","times_seen":206416,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lnjvfdjhbvlfnjfdv.icu/application/views/templates/_base/script.js?ver=1.0.3.9","fqdn":"lnjvfdjhbvlfnjfdv.icu","domain":"lnjvfdjhbvlfnjfdv.icu","tld":"icu"},"ip":{"addr":"104.21.41.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lnjvfdjhbvlfnjfdv.icu/","date":"2026-02-20T17:37:23.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lnjvfdjhbvlfnjfdv.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 10:58:37 GMT","end":"Sun, 10 May 2026 11:55:02 GMT"},"fingerprint":{"sha1":"02:96:6C:F0:17:D4:E5:85:E4:DA:0A:44:E1:B3:BE:B8:90:3E:19:6E","sha256":"53:2D:AD:1A:99:74:C3:7E:B0:8D:0D:E3:DB:2D:D4:D5:86:62:DA:CE:BE:CA:33:DF:EF:46:3C:BA:31:C5:A3:BD"}}},"request":{"raw":"GET /application/views/templates/_base/script.js?ver=1.0.3.9 HTTP/1.1\r\nHost: lnjvfdjhbvlfnjfdv.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lnjvfdjhbvlfnjfdv.icu/\r\nCookie: PHPSESSID=hrcd71j9quunpam35rb5f5vq6v\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 20 Feb 2026 17:37:23 GMT\r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 02 Feb 2026 21:00:38 GMT\r\netag: \"55f4e-649dd9d78c08f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xghoyJRZmXl4ncGVqP3SJo4EYNJN7dPcHWYzgYdPur53xYUO0oAtbZog9wZXxIvQ1oDlZGNnn9rpx1zJ2JJB9st55NhaKAnfmBvY50p5LOKJplsdxQ%3D%3D\"}]}\r\ncf-ray: 9d0fc5870bbe370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352078,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65255), with no line terminators","md5":"11c82b538a504b2a5343edac9af598aa","sha1":"18db14ceef1be0b45c4944b4b36e598c3384da1a","sha256":"c8b8f70e8c169927c2fe80ba5e05eda973ac539de4efc4a8d7d7a540f756c61c","sha512":"731161609dceb8ec6370adfe1ded6df967615b5ea1bfe95e35ef766eecef491e96c5aac6fae3b4f457835e2a24eba6a03bc97631c1761d7da6dd433d2e06223c","ssdeep":"3072:8OUjyTLQrfQFNys8upEaVz9Me0ljaJjAmAt0piL/yTbCdPe/6tdCZDWf+ji3k:8EpE6z911KGiyZDWf+ji3k","tlshash":"0b7483857bd0b888039b9f79721fb0e6f45f086e3c88494bd201fda165a6617eef1931","first_seen":"2026-02-20T17:37:54.073909Z","last_seen":"2026-02-20T18:40:22.818361Z","times_seen":2,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}}]}