{"report_id":"804ca3cd-aae5-4602-b240-20b76b62b8bf","version":0,"status":"done","tags":[],"date":"2026-09-11T12:34:36Z","url":{"schema":"http","addr":"avantis-app.xyz/","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"avantis-app.xyz/","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"title":"Avantis Trade","dom":{"size":19983,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1236)","md5":"a69df7733795a635cc3f8b9551f431a3","sha1":"ef0cd65b67bdbf64708378c22c74dfc665a4e02a","sha256":"a9ab602aac490b7f7c3d57d7e7133f68ec777c9e5816e8ded5fc107fce7ffca3","sha512":"08ae76468a90b02d3fa28b11d5767b27de7d11b140a4677c4ad4b1b457098d214babe6a7968708e5138cb45b5232acb34c5460e57fb12a33100eb77275136e7f","ssdeep":"384:7cQoW8vP3uIoI+fXHoFoSJhfYMeV0Eas7r5Xob:IA8vZ+fXoFoSJveJPJob","tlshash":"2592e7336195202d6917c4c876a7ab4d3228d107f5068d68bfeca2b0cfc7c9a9db365d","dom_hash":"domhashf00abe359b009af08ef9307d5ed7b95c","first_seen":"2026-09-11T12:34:44.859738Z","last_seen":"2026-09-11T12:34:44.859738Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"avantis-app.xyz/","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T12:34:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"esm.sh","ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-09-08T09:56:18.507982Z","alert_count":0,"request_count":7,"received_data":1101751,"sent_data":3748,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.bybit.com","ip":{"addr":"143.204.238.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1999-08-05","domain_rank":2819347,"first_seen":"2019-09-30T09:28:38Z","last_seen":"2026-09-11T12:25:06.413104Z","alert_count":0,"request_count":6,"received_data":10406,"sent_data":3098,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"avantis-app.xyz","ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-27","domain_rank":0,"first_seen":"2026-09-11T12:15:36.264972Z","last_seen":"2026-09-11T12:15:38.668565Z","alert_count":15,"request_count":15,"received_data":326927,"sent_data":7332,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zennnnnnn.xyz","ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-08","domain_rank":0,"first_seen":"2026-09-08T18:17:57.412337Z","last_seen":"2026-09-08T18:17:57.412337Z","alert_count":4,"request_count":4,"received_data":2955,"sent_data":2208,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-09-08T09:56:17.514271Z","alert_count":0,"request_count":7,"received_data":1222136,"sent_data":3906,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-rpc.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2142410,"first_seen":"2024-05-08T23:22:55Z","last_seen":"2026-09-01T19:48:59.144648Z","alert_count":0,"request_count":2,"received_data":1405,"sent_data":1071,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"relay.walletconnect.org","ip":{"addr":"3.72.26.12","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":444044,"first_seen":"2021-02-22T09:38:04Z","last_seen":"2026-09-07T12:17:28.523347Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":1150,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"longer-modules-elliott-watts.trycloudflare.com","ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":50213,"sent_data":1301,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","size":7861,"data":"","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-11T12:34:44.870711Z","times_seen":844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","size":685,"data":"","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-11T12:34:44.861233Z","times_seen":837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","size":2938,"data":"","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-11T12:34:44.879466Z","times_seen":843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","size":28845,"data":"","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-11T12:34:44.885809Z","times_seen":705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1dbaf8d53731add6fb640e5cceda2ef4","sha1":"8ee36613109e82ca724f5f44f9c84982d47ab893","sha256":"aa121fbf312328209b119eac75a490d4e42e9280cc2be66e93b9660a2517c236","sha512":"ad65d044e740688aa4d9be2d145cb1ac1ca508a347147a6aad657075b284b771e54956e4b5660f4c752f2c13b3977a536db811f808ae63a31d8b1ba6440f9073","ssdeep":"24576:pI2XGuRHgFIVqgpWevwX2RU0UXekKKZ9mOaedZaHsBqDKjB:ThHLB8bufWJzB","tlshash":"df3502ad4c334664578c06fc7c5b0bc839a86bdca0d8a72a5475e0b277c96ff10e6867","size":1072747,"data":"","first_seen":"2026-09-07T19:07:15.478595Z","last_seen":"2026-09-11T12:34:44.88719Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1f9a6ae71d24750b155b63857821cf5f","sha1":"fd90dd5dc45b7748d56158e276985f4a65df6308","sha256":"106b74e32246a71121a513ab8e3bb5e0ddde0c34ce1385ae7b078c7c89fdd0ab","sha512":"c569f7be30da8e7926b37449db1af28e0576322e4934ece3b50305081d912afa9779c3994c44c2e29252ba1db80630e0fcb1d0902add14a4010a228f8db7005a","ssdeep":"24576:oCy0Q9fFdsY7yiwuGCphRZuKrQVJ8J8dqnj9Sr5peS1F4eIUXO9eqXKk0X0do/Dx:KsY7yiwuG2ZuKrmM8dqnj985peS1F4eL","tlshash":"7375d85163c06c55234b9fbb731bb4e5e81f096f78580c8fe114bc606aea617fae9930","size":1561614,"data":"","first_seen":"2026-09-07T19:07:15.470968Z","last_seen":"2026-09-11T12:34:44.888018Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"longer-modules-elliott-watts.trycloudflare.com","domain":"longer-modules-elliott-watts.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"030125497fcc7b8de5dbaeada99c12ae","sha1":"1eeb65c627fb6f825d50b78ea53184a393e61b52","sha256":"2b7537ddbe256bd2b435101e4f8076f4cc225548342ae58a1b4861a6c494a7f2","sha512":"c9d8b59527527c6f24b931e622a756936e5b87021ba851b28c9833a51c6d8ba036f10b9c810cec75f1995dfc26aee4e47d0e5248ae340c4dc1e5daf722b30804","ssdeep":"","tlshash":"310128a54a9700b108f7dae63f5f3f12776201460084c5103ebde7aaaf23d5b84199c4","size":733,"data":"","first_seen":"2026-06-11T06:03:26.798628Z","last_seen":"2026-09-11T12:34:44.888703Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","size":12122,"data":"","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-11T12:34:44.886371Z","times_seen":846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","size":335,"data":"","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-11T12:34:44.882368Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/app.js?a=7","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"233dad1b9920efa095808f001ebb56fd","sha1":"d6e30408de588a79894474862fd2e90a48d01743","sha256":"85a855a13ed594708f6f253b3a2208a874b5213f7d873a3593e0eb74a1f0e6d9","sha512":"83b2e55bf40b2ac838444febdf887bacf6c685f121781e1a67cfeea4866e1f9c7ea2df1a9933634f2e0c3ed38d2f6dfedb29aec87195667bbf90e80aa396ec7b","ssdeep":"384:xzBd/OgQmRlsAUrYWUqobFlvP3uIojceu2tsygAgVVa2vSk5KUCAGEdOJVNDUT1E:xzL/zsAUrYWUqUFlvuatjy2vSk5KUCAq","tlshash":"f9b20871b0b92536557b80f0b197ab9d72b46086f002c594ffacd9d80fcbca52972dca","size":23559,"data":"","first_seen":"2026-09-11T12:04:05.479278Z","last_seen":"2026-09-11T12:34:44.8737Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/31665fdd45.js","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bc546b25298bc1e2aa070af67d5052c","sha1":"cbd21e23b882f49af9bbc6ce6a832132488d5157","sha256":"0c9d3e596a8cde2b92c02f96ba3f9ac471682b8696f53febb47d7e667af6dac7","sha512":"423044be898bc929d8de79b311b543724ea27c7786a7baf5fd0ca1db058fb51ef8836f634cb9c30aac4627b756feb9366955b447303021b2d614f580c229f665","ssdeep":"96:0ywO+mAY9dWewWB0Nhmm0t3pUjjN82E/zBzhEFlu4utuYC/xEFDdwJIR4Pq+:8OsYnrwWmvF0dKfNDEL1hE2CyCS+","tlshash":"38b152422f90bd4a17dbabfb770f2cc4e6395e9a59a008478501be9015e892be1b3531","size":5139,"data":"","first_seen":"2026-09-11T12:04:05.459469Z","last_seen":"2026-09-11T12:34:44.878448Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2f807f012035ca20afb7ae6f8eb62338","sha1":"6a0129835dc812fc6fca286f80de5f1fbeb33860","sha256":"0c7fa33982884e0b79d78541e5b387c61e3c771bd4f4d7e71b4e6fc97057af28","sha512":"8040900e957a479ba5edfc0bc7aabba9a76b39e6b9277149897824e03f77d1e9e6f4655104a21ef76dba67cb725dfa1dc163ea84efa5682a26944b02c6030a51","ssdeep":"96:LY7Ldv7mA1Jmq/5fIytRd7nai+iuKMRdyBaQQiQ2Ijc76YyU0oFW6lsNpdWVEfjf:83Xl/5jRFUKZBaQQiQfSmU0oVlYWWbf","tlshash":"0cf1261631d6b10a02ca477e761c67ea95a6c41ada8ac80ff748eee474ddc937a4c1f0","size":7673,"data":"","first_seen":"2026-09-11T12:34:44.889269Z","last_seen":"2026-09-11T12:34:44.889269Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"longer-modules-elliott-watts.trycloudflare.com/assets/index-f2H8W9Sl.js","fqdn":"longer-modules-elliott-watts.trycloudflare.com","domain":"longer-modules-elliott-watts.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f543fd9ee8564336972d4cee46e0063","sha1":"0a79fbde28e7b168d7089aaefa9fc06a6f34b61b","sha256":"46807db56bb3f6f4844f9a09637379cf656cf31deb27b6e7036cb4b1e1e04350","sha512":"28c66147b9ada7bb96ec7cf68330924f01660ed3d680e7d6d98e7513d89aa8d905d6943670d34a4d16c041c0abdc75b99a4c48c55fa5b91ecc5dea5b18024fd2","ssdeep":"768:hEmJVHs4gJh4Dsk4bhomv4zZtpN+L0+BF0yx20dq2tKn18aRdpdne5QSyR4ypaKD:hEmDs3rwsWmIpN+A+BF0aM18aPbOypaQ","tlshash":"c223d1cd58b21159439c2b5c6c0fd984fc3c5fa921c88a3ba949d0a5ffb078d58aed74","size":48607,"data":"","first_seen":"2026-09-08T18:18:04.390952Z","last_seen":"2026-09-11T12:34:44.885233Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"longer-modules-elliott-watts.trycloudflare.com","domain":"longer-modules-elliott-watts.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"95c7ee1f82bb5ad7dd5955eacddb848f","sha1":"0e8a7919c1c4f454bc872bf460bc149680fe7ca1","sha256":"692a82b01a2a0a90b5ef7d9c55bc460f576738ddd8c37aade7780ae4037b61a1","sha512":"300a93c63c8820f63d0c9d8ca33aef31cd6220640ac45aa04860941513a6aff819845dc0a0bb39c6b59c6d34b2f77e5f170f96cd1b7b6cbc4cac79d3b9ab439c","ssdeep":"1536:4eF2aRy9M3y1h6ThhvEr20bV+VyentT6rOmqarWCyeizISn1rFq16pY+:zF2aRyOyHqhvEr2eV+VyentT6rOmqarC","tlshash":"3b43935237d469b0230b8bbb773bb5f1ea2e0daf74a44c9fd218bc5465a560af9c0530","size":59151,"data":"","first_seen":"2026-09-08T18:18:04.416938Z","last_seen":"2026-09-11T12:34:44.890434Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","size":1046087,"data":"","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-11T12:34:44.865252Z","times_seen":186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"esm.sh/node/tty.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-11T12:34:08.156Z","timestamp":1789130048156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/tty.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://longer-modules-elliott-watts.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/process.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:08 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 611\r\ncf-ray: a396b470f9e10daa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":708,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"dc159c105e1b73c18cfd63a84cc154ec","sha1":"347664300100736360aeda59495f5017a852a81f","sha256":"c66ff4b406bad449bfb2ced355f15badf16f4d9e035d2d300e33b5aeee64e3be","sha512":"96f99c368bef6857a0e9006efdc8ac0585af1bca468adb103b0c626ff5cada09eefeb07b317d6be3e71915f8c1a1412d4927fb743e4ed59e54c6e82af1b9d50a","ssdeep":"","tlshash":"cf01fef930f7b57246bb047444728a07f388e8f0b49ec4a0ba6599b43c655ced131676","first_seen":"2025-10-29T19:17:04.320253Z","last_seen":"2026-09-11T12:34:44.861233Z","times_seen":837,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bybit.com/v5/market/tickers?category=linear\u0026symbol=BTCUSDT","fqdn":"api.bybit.com","domain":"bybit.com","tld":"com"},"ip":{"addr":"143.204.238.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.062Z","timestamp":1789130046062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Wed, 24 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D3:9E:3D:D6:33:30:E3:BC:DA:4E:41:EE:54:38:42:CE:2A:DE:7D:81","sha256":"BD:31:A1:7F:A9:02:E8:D6:AE:BC:CA:EA:C0:FC:6C:1D:6F:E0:C1:D4:49:DC:B9:8C:E2:CF:B5:AF:B3:6A:0E:3E"}}},"request":{"raw":"GET /v5/market/tickers?category=linear\u0026symbol=BTCUSDT HTTP/1.1\r\nHost: api.bybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 880\r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\nx-cld-src: Loc-A\r\naccess-control-allow-origin: https://avantis-app.xyz\r\naccess-control-expose-headers: token, X-Signature\r\naccess-control-allow-credentials: true\r\nret_code: 0\r\ntraceid: 77ac24e09c2d46dd7f476d8434e9c780\r\ntimenow: 1789130046195\r\nserver: Openresty\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: vkgdQfecF0hkUg7tlTxObf6-An6lpOHzyZhrb8ZDP_a3B0Qz9I0RIg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":880,"size_decoded":1479,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"406253b44cedafc2f21a0d7c1a2c6073","sha1":"0e3c8c326843c61bc6ffbfae545cfdde84b52ea4","sha256":"6a67f2ad347917b841b75cc7a4da6a6304805f27526814d798d5a9cf8203a722","sha512":"49c8578be8b2718fdb4fe17c9fd547a8a8a06e04c39d606654afb28691c149a0eadb68e04376e92c41c85cd0044a60079d604e9df6aef2bbcda44579a0b42ed7","ssdeep":"","tlshash":"86111ea3b20d8c92c2bd08b1c2f9e6054fe935c40ceb8742c9dc4db1449f48a630ae82","first_seen":"2026-09-11T12:34:44.86184Z","last_seen":"2026-09-11T12:34:44.86184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":194,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bybit.com/v5/market/orderbook?category=linear\u0026symbol=BTCUSDT\u0026limit=50","fqdn":"api.bybit.com","domain":"bybit.com","tld":"com"},"ip":{"addr":"143.204.238.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.072Z","timestamp":1789130046072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Wed, 24 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D3:9E:3D:D6:33:30:E3:BC:DA:4E:41:EE:54:38:42:CE:2A:DE:7D:81","sha256":"BD:31:A1:7F:A9:02:E8:D6:AE:BC:CA:EA:C0:FC:6C:1D:6F:E0:C1:D4:49:DC:B9:8C:E2:CF:B5:AF:B3:6A:0E:3E"}}},"request":{"raw":"GET /v5/market/orderbook?category=linear\u0026symbol=BTCUSDT\u0026limit=50 HTTP/1.1\r\nHost: api.bybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://avantis-app.xyz\r\naccess-control-expose-headers: token, X-Signature\r\naccess-control-allow-credentials: true\r\nret_code: 0\r\ntraceid: 6f52d73d3f1085bd629273f75ba1c1b4\r\ntimenow: 1789130046196\r\nserver: Openresty\r\nx-cld-src: Loc-A\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: FWwvAdFYOXL5KzP7AfQqPENQnNEwRSdcSCAjc_mSYJ2qoruIQ3qc-w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":2272,"size_decoded":1376,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"79be5c8b2b443d008ebd34eac6c85dc1","sha1":"1569688f886703098792a60171aa07e6910182e8","sha256":"d1df641885b444f02c8c2bdd4c8641401dfa5cf4e4eb66a58e1d8b2ae9a08264","sha512":"b4acf1ccc5ba8d47ea22515e37b8d9a7be07c02de4fe47de70eecb96f8f44754e2e809f6fd5114b317ddb3c683aaec24e926632fb00aee9df7bc4cca9f21ee3b","ssdeep":"","tlshash":"fc41abf866a25a6834e3cc18f3aee95e2d0ef0060fe5cfc205f605cd93956f66152c1a","first_seen":"2026-09-11T12:34:44.863044Z","last_seen":"2026-09-11T12:34:44.863044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":194,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/images/mobile/tab-markets.svg","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.075Z","timestamp":1789130046075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /images/mobile/tab-markets.svg HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 17:03:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hsby4R4YM9Z4pFmti0UmKqtlmx8wa9ZZLOzgjapkfKV%2Bep6xUhKgtb%2FAs8RCIcO45JTyvzHMMHeMD1HMY2hwD5UyQ3xnidY1Mx%2FT3G2cwK1L74mT83U6Zh1N%2FosNWZbXSxU%3D\"}]}\r\nexpires: Fri, 18 Sep 2026 11:47:45 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1841\r\ncf-cache-status: HIT\r\netag: W/\"6a8f1c74-ee\"\r\ncontent-encoding: zstd\r\ncf-ray: a396b463faf40b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238,"size_decoded":945,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3630cb04d967dea4949827b76af5deff","sha1":"38637929b34f0adbac0cc7d09dc9e1933f778afd","sha256":"10df45953770463bbf838b28e2d243baf01660b14044c289a7cf4fbf4d98ed74","sha512":"b6219e1144c879f061c92c0a4d2fe59fd6c3c2ed9ffdbc81d05dd8671a9e173fabf466fe9fe6db8b792c24c31215434b915d08af000f430b2cb454cce4201ce3","ssdeep":"","tlshash":"e5d0a71dd71c1d1cf4209651d7253270047b1152170d5129d4b615b15714b4eb42f9d4","first_seen":"2026-09-11T12:04:05.483586Z","last_seen":"2026-09-11T12:34:44.864166Z","times_seen":6,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/images/mobile/tab-trade.svg","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.076Z","timestamp":1789130046076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /images/mobile/tab-trade.svg HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 17:03:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oC5Q0QLx8dZ413LOdlXxTTF40hzNfjLk0GsDSX%2F5MFyfzHxFRRG%2BSK4MYtavPI%2B%2FCKXR27Dv0oXYcHPA%2Fi2TcC%2Fz%2FpTsoCpihhrAQGD6UuerM5vlyL83jU4aDcMa6P%2FrPNU%3D\"}]}\r\nexpires: Fri, 18 Sep 2026 11:47:45 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1841\r\ncf-cache-status: HIT\r\netag: W/\"6a8f1c74-eb\"\r\ncontent-encoding: zstd\r\ncf-ray: a396b463faf70b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235,"size_decoded":947,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e328e2aeb8d2fff09a2876e38502a6d","sha1":"5cddec1f91aec835fa7235c5952d3708a0464c4c","sha256":"d041f4d477c5560b71c4e53252cb820e19880237dfb41391365daf21eb61f776","sha512":"4ff39d684163fc65719ab0f4a66b2b8b388dea12a0379dd4c1dd578bc63085153e57c4634912c4631e45074dc4fb6b852b904812b164a5093ad5b093b273716d","ssdeep":"","tlshash":"a9d0a719c30c5c6c7424c619d7aa7730413a90e1381d1138c87d113466096edf57b5e4","first_seen":"2026-09-11T12:04:05.467679Z","last_seen":"2026-09-11T12:34:44.864716Z","times_seen":6,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-11T12:34:08.134Z","timestamp":1789130048134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://longer-modules-elliott-watts.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 11 Aug 2025 12:57:27 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 11 Sep 2026 12:34:08 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 611\r\ncf-ray: a396b470d9da0daa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046087,"size_decoded":381252,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32044)","md5":"362ca438ae65cfc912b7a743a781ce7b","sha1":"8bd96bb53323eab2db38be0eb2b408ddf2b95b17","sha256":"06449c96378758359a50cc186e8017a20143e74a7dc5b57efaef3ea2c88f5017","sha512":"0ae63ee9d428f583c852ea0456d74d0a9cc5ce6341734c041ee00d5236c364738ca7fe0397c3e3818a86875cd48a7eba3419174a679258ba4bc4ab3f3ac97f04","ssdeep":"24576:fpISZZVokQyZ74ejf2kwwwCbUef690riXt2s0Fj6+6:RISZyyZ74ejf2kwwwCbpf690riXt70FY","tlshash":"9c256c907361b47a539b82a898ab0500f3395859500d802cfbecd9ebef949d9c5bff71","first_seen":"2026-08-03T07:57:51.324381Z","last_seen":"2026-09-11T12:34:44.865252Z","times_seen":186,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bybit.com/v5/market/tickers?category=linear\u0026symbol=BTCUSDT","fqdn":"api.bybit.com","domain":"bybit.com","tld":"com"},"ip":{"addr":"143.204.238.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:20.873Z","timestamp":1789130060873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Wed, 24 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D3:9E:3D:D6:33:30:E3:BC:DA:4E:41:EE:54:38:42:CE:2A:DE:7D:81","sha256":"BD:31:A1:7F:A9:02:E8:D6:AE:BC:CA:EA:C0:FC:6C:1D:6F:E0:C1:D4:49:DC:B9:8C:E2:CF:B5:AF:B3:6A:0E:3E"}}},"request":{"raw":"GET /v5/market/tickers?category=linear\u0026symbol=BTCUSDT HTTP/1.1\r\nHost: api.bybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 880\r\ndate: Fri, 11 Sep 2026 12:34:20 GMT\r\nx-cld-src: Loc-A\r\naccess-control-allow-origin: https://avantis-app.xyz\r\naccess-control-expose-headers: token, X-Signature\r\naccess-control-allow-credentials: true\r\nret_code: 0\r\ntraceid: 4f72f2e74d8ccc9d40e1c52acf917b0b\r\ntimenow: 1789130060972\r\nserver: Openresty\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: y8dEHCY0XUXMFOgTa3BrfD29FqFJGYCFEfugutfgisfJX8WWFe8Inw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":880,"size_decoded":1479,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"67e888f188bbff0cc2328b472d283eb6","sha1":"f0c47df377dbdc0a7e62df4b33e6bb71dc7ff23a","sha256":"61045d6ccfbd2b8a46df66a859868b7c83eb04ff118c1b521cead5f997c616b8","sha512":"78c0418ef61003f0dcd244be3db8196b2dd7a51af5b6d3cb58e51f351925e0fd6432feb2974cf0044c60d061d5bd32f1e55907940c59f9e5170197c28263ba95","ssdeep":"","tlshash":"541112a3b70d8ca2c17c18724ae956560fed268444cfc741c7dc4d7285ab54a3316a82","first_seen":"2026-09-11T12:34:44.865799Z","last_seen":"2026-09-11T12:34:44.865799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.bybit.com/v5/market/orderbook?category=linear\u0026symbol=BTCUSDT\u0026limit=50","fqdn":"api.bybit.com","domain":"bybit.com","tld":"com"},"ip":{"addr":"143.204.238.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:20.877Z","timestamp":1789130060877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Wed, 24 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D3:9E:3D:D6:33:30:E3:BC:DA:4E:41:EE:54:38:42:CE:2A:DE:7D:81","sha256":"BD:31:A1:7F:A9:02:E8:D6:AE:BC:CA:EA:C0:FC:6C:1D:6F:E0:C1:D4:49:DC:B9:8C:E2:CF:B5:AF:B3:6A:0E:3E"}}},"request":{"raw":"GET /v5/market/orderbook?category=linear\u0026symbol=BTCUSDT\u0026limit=50 HTTP/1.1\r\nHost: api.bybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 11 Sep 2026 12:34:20 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: https://avantis-app.xyz\r\naccess-control-expose-headers: token, X-Signature\r\naccess-control-allow-credentials: true\r\nret_code: 0\r\ntraceid: 1cd1622c81d27f3702eb3f82e3e29f1d\r\ntimenow: 1789130060972\r\nserver: Openresty\r\nx-cld-src: Loc-A\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: dB1IQqqxfOmliYWOlgBNSvMZZPmg5LwAsj7dPYeFBIBp904wbisAVQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2272,"size_decoded":1469,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6c219efaa5010bfd4860b8f1e5b894c2","sha1":"7097451a59fc6a1bf1fb6158b1c67519305f02c8","sha256":"1234f812d96bdb5b07e2de312c71a6af0d596541f4a732c7f19d4c1c94941612","sha512":"da3f3084bdb8ccc6f3980383fc22e7207dc56cfafe09d0af3d0d11338437ab1385c1d0e1fbca1cfe59599245b19765f81e2df118c467da7161bd302c3f1dd298","ssdeep":"","tlshash":"5841aee02a94009479e3cd78f9aed6de6c1eb4024fe0dfc64bda029e165d1f16306e1b","first_seen":"2026-09-11T12:34:44.866744Z","last_seen":"2026-09-11T12:34:44.866744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/assets/Aeonik-Regular.ttf","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:05.845Z","timestamp":1789130045845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /assets/Aeonik-Regular.ttf HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:05 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 98720\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 15:03:48 GMT\r\netag: \"6a8c5d54-181a0\"\r\nexpires: Fri, 18 Sep 2026 11:47:47 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\nage: 1841\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvHdZv%2BV8c2UIX3BB6N0BmzYpikSBdvoJ2HhviTwtjLwKmSlfR3TQazFRyyaKYH%2BI5BGiJiVwO16n48EhZaXVxjtQ7LkESw95Viz0Nxklaj7GCjzhlNMLvXKvO4Zt15WZrw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a396b462895e0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98720,"size_decoded":99511,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 46 names, Macintosh, Mark Bloom and Joe Leadbeater (c) 2018AeonikRegular1.000;UKWN;Aeonik-RegularAeonik RegularVersio","md5":"4e27ccba8df592b2187d4ae474821a83","sha1":"99b47cbb8b77be9142179e4b25d27276767583c2","sha256":"84e288849c72ba174551d2f43dfbdf8f58fbeadd4ea6cecb052f12c162dbc644","sha512":"c3030f96558db5afc7fb89f38847ef67cd008cd055528e4f2af00e0b10b57383fbb631506732f669bd50bace0088634aab566b389f1cf12f1718900261242e76","ssdeep":"1536:LWbHrgJv3MTsrTtEJRhB0FCWrtgrDqiz0p6u8hxzkd1F4nG6b0D:orgJv/rTESFCWi26u8hxs8nD0D","tlshash":"21a32a27b3569707e4921a3998b2a392fbe5f9247f1a830b500d6f65be9f0dc4c43385","first_seen":"2023-07-11T20:45:01Z","last_seen":"2026-09-11T12:34:44.867811Z","times_seen":54,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/api/fp","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:07.721Z","timestamp":1789130047721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nContent-Type: text/plain\r\nX-Worker-Hint: 519c39719c2b96c184977c76b679e6ec\r\nContent-Length: 1316\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1316,"data":"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"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TiIEI4ZKkvyoILWI%2BdJXb26bLrrksVBXOygwEq2mKLPhy22qdmuhuJlBBLIlirA9FZXNqM%2Ba9OvHlsH4JSxDGL9hkHKbgJFHdGpOa5HCfOEVopiMCWhtQ4R%2B9wrbVkjF\"}]}\r\ncf-ray: a396b46eca49c8b6-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":964,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"555ae38b98ecd230cc690ea2a14895af","sha1":"93d0f0275e5bde561ddf2d43dcaf8d324331069e","sha256":"0a6fc6849b4591ad9a2b9a5cf5edd00bba4fb414e3f54c092871a6f46adf3efe","sha512":"36960d696a253d112749534d04743dcd0d95f7a0db07c7a391f5970ef788abb49c3bcd80269eedaed834425e78412dd0448195676d1f11d7786f69f1e333f974","ssdeep":"","tlshash":"afd0eba32b11ad605211378dbc805f2e226a1ae0caa51300ac8026d028b6a4523428eb","first_seen":"2026-09-11T12:34:44.868762Z","last_seen":"2026-09-11T12:34:44.868762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:07.919Z","timestamp":1789130047919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=7\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a396b46f887d4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1841\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 11 Sep 2026 12:03:26 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61661,"size_decoded":11166,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3764c5d21fb5333fc7445c2dfe513f24","sha1":"4e6298fe6fad8adb3a4f28302de171eadc4be016","sha256":"671a9f3bea7195bd667ec039e835373779af5541b22cecc716d44af55495774f","sha512":"f15b340defcbdabad686ee1cdc52be57fb07f40e658f484a4066b3bd5badb50f23d62565d1a16f06720a4c9cf77d023ceb0e98797eaa9a74e09d58dce93061d1","ssdeep":"384:oNWHp+osRs7K0e3UvQtzU1HMupr+BV6w85LCr6PzW9mQ4yMupw:7JcEv+U1lryV6w+5W6Iw","tlshash":"b453736b8b04ee762bb213cd515c79eca64f2117cdca9cf6e2d1cf1440b4af7216219a","first_seen":"2026-09-11T02:57:33.979167Z","last_seen":"2026-09-11T12:34:44.869915Z","times_seen":18,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/process.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-11T12:34:08.132Z","timestamp":1789130048132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/process.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://longer-modules-elliott-watts.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 11 Sep 2026 12:34:08 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 611\r\ncf-ray: a396b470d9d40daa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7861,"size_decoded":3888,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7860)","md5":"f8382a3858672b98c93fd61c13d21c2c","sha1":"07e4611887908eb9326935084618e4964fb84550","sha256":"79e7646e87709989f575ea4ce02e0877bc9303081567b1c0d412527917ae9e91","sha512":"a1609e8e33a2b7369169fe7dc1f9fd187c4b431e9c7428e4c3929587bff4701d937b8df219b3dfa2bdc3f6b38f63afecc0d9025a6ec8901d91a5e123179ca5cf","ssdeep":"192:kFmwaFSK/rVyQhxkSULErvtAAQic6NR03ao8Yk33q:5wzEr8irU8Yk3a","tlshash":"a2f1d7dce29a743302c1eadaf0bb0123eaf407c855245650ea0bdcc736219e5a5b1f75","first_seen":"2025-10-29T19:17:04.329787Z","last_seen":"2026-09-11T12:34:44.870711Z","times_seen":844,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/styles.css","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:05.765Z","timestamp":1789130045765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 27 Aug 2026 14:25:04 GMT\r\netag: W/\"6a9048c0-279b\"\r\nexpires: Fri, 18 Sep 2026 11:23:24 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\nage: 1841\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFMr4vhaLBI9rFaKUywQ1rGd6K1fmOZgeLTHlvMSK6OeMl56omCXP9jlNje8J7dGTyy9Rg0xj3MP6oFkYqd5o%2F0bw99RtBrR8QLjKBORFnujHJQZyJ8YGpzA3bU8coH1QLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a396b46228f70b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10139,"size_decoded":3798,"mime_type":"text/css","magic":"ASCII text, with very long lines (10138)","md5":"e37b5e512817390dc198ff826ec89b26","sha1":"d469b88b9e42f8c9311b9fd9b8d53e8c56f82b22","sha256":"1a37385c835fa54981510322ca5ed9fb99757cdb8a2196755dc054eed209c9dc","sha512":"7ff734216a0616649073b21c5f9cfa1d29b710cafe2938dd42a1a78b41e17c129c6bc98e0f18c6a8b5baecf0d2d787802a243d131954461aaca21b637c473a86","ssdeep":"96:WvG62mgYyGMqR9jhT9JvKLf8BmzoPTVzHFLGlvacTQJVqfmYSnrZmqc6cnTHf4QZ:Q5gYyFwNhxwFhiwkrZmqcHnTHXIA","tlshash":"f0227272a224653dfc27eda2a690bece7010e657d43307e9e982b435c4c7af31631b45","first_seen":"2026-09-11T12:04:05.47053Z","last_seen":"2026-09-11T12:34:44.871216Z","times_seen":6,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":49,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/portfolio.html","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.074Z","timestamp":1789130046074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /portfolio.html HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1841\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wK77D9ZFuGDGv7DtetJ7JdaZmn8TCiDWgDtNwMQVAFUsvlQtWs1Fjr59fLAwFY1VYnBtCRFywcnom6%2B7kWNuSJb0daU1%2BsHkRI6VB%2Fmb48Q6FnnfSXVdJejBvH%2FDmrQyRJ0%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a396b463faf20b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162,"size_decoded":947,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-09-11T14:03:55.6472Z","times_seen":30799,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/api/fp","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:07.723Z","timestamp":1789130047723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:07 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MI5E7E8Gpf2l%2BjpBGrKXea5DiHZfTqHMA4wSWC1f1W3fHlCOZPkemFtSNtVxiQAkVx4qBPklKeUtcxdnEJFJHXWw38d5WPXPyrLHiYSWZQRw9c7QGg6kZl7UqZ96D6Uh\"}]}\r\ncf-ray: a396b46e5a45c8b6-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":662,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T15:24:32.699159Z","times_seen":18405136,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bybit.com/v5/market/account-ratio?category=linear\u0026symbol=BTCUSDT\u0026period=5min\u0026limit=1","fqdn":"api.bybit.com","domain":"bybit.com","tld":"com"},"ip":{"addr":"143.204.238.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:20.876Z","timestamp":1789130060876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Wed, 24 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D3:9E:3D:D6:33:30:E3:BC:DA:4E:41:EE:54:38:42:CE:2A:DE:7D:81","sha256":"BD:31:A1:7F:A9:02:E8:D6:AE:BC:CA:EA:C0:FC:6C:1D:6F:E0:C1:D4:49:DC:B9:8C:E2:CF:B5:AF:B3:6A:0E:3E"}}},"request":{"raw":"GET /v5/market/account-ratio?category=linear\u0026symbol=BTCUSDT\u0026period=5min\u0026limit=1 HTTP/1.1\r\nHost: api.bybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 228\r\ndate: Fri, 11 Sep 2026 12:34:20 GMT\r\nx-cld-src: Loc-A\r\naccess-control-allow-origin: https://avantis-app.xyz\r\naccess-control-expose-headers: token, X-Signature\r\naccess-control-allow-credentials: true\r\nret_code: 0\r\ntraceid: 1a95b5f4d1061fcd17d3371fe631ce3d\r\ntimenow: 1789130060973\r\nserver: Openresty\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: h_HMQpBK-8xx4u98i0mIztC1Kqj28OZHFmO8s_IIdx9KzPne5xXliw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":228,"size_decoded":827,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4071fe3414b8b454b79a0f75062fa81e","sha1":"e193e503149c55b03e38a1f0eaa18331dc0da621","sha256":"7bf288fee4c440f428650d8cd3bd63c41d755362227f76b9c9fac9d756c37c4c","sha512":"e4a1a7578d0868c875db78be410f4dbf9773057f9cb46f240b6a215d6282931623026f0ecebf6adca528666cf5a22351a522685901bb1c9d4bd3e058820978a2","ssdeep":"","tlshash":"edd0a711f940ae778254dce7ca4254db42243c87d907c804c0094d15118a9457a2b264","first_seen":"2026-09-11T12:34:44.872708Z","last_seen":"2026-09-11T12:34:44.872708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/app.js?a=7","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:05.770Z","timestamp":1789130045770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /app.js?a=7 HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 17:36:28 GMT\r\netag: W/\"6a8f241c-5c07\"\r\nexpires: Fri, 18 Sep 2026 11:23:24 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\nage: 1841\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UsSAKxVSwiA1deKy5HCkS1xAMds9xTEMfIBn4VklQ1%2F8UTibG%2FyjEiWhVITZFkwnirRzDtbq09rVe1u%2BAyPHUXUPHWZcxQ27xsPHF9p7gAOfVLYQFTSYXMo4R7zJDXe%2FlvY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a396b462390c0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23559,"size_decoded":8204,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1111)","md5":"233dad1b9920efa095808f001ebb56fd","sha1":"d6e30408de588a79894474862fd2e90a48d01743","sha256":"85a855a13ed594708f6f253b3a2208a874b5213f7d873a3593e0eb74a1f0e6d9","sha512":"83b2e55bf40b2ac838444febdf887bacf6c685f121781e1a67cfeea4866e1f9c7ea2df1a9933634f2e0c3ed38d2f6dfedb29aec87195667bbf90e80aa396ec7b","ssdeep":"384:xzBd/OgQmRlsAUrYWUqobFlvP3uIojceu2tsygAgVVa2vSk5KUCAGEdOJVNDUT1E:xzL/zsAUrYWUqUFlvuatjy2vSk5KUCAq","tlshash":"f9b20871b0b92536557b80f0b197ab9d72b46086f002c594ffacd9d80fcbca52972dca","first_seen":"2026-09-11T12:04:05.479278Z","last_seen":"2026-09-11T12:34:44.8737Z","times_seen":6,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":39,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/assets/avantis-logo-white.svg","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:05.779Z","timestamp":1789130045779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /assets/avantis-logo-white.svg HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:05 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 15:03:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3I%2BE2Urqa2WQrK4SBn6UEaNDh63FgI6ySGfwBvtpRShQ%2BjnxbHsxbLq2G8wIZLN6dWJXgrsnTbH5giSYHVOhBxCfoyjWiQJru3M%2BmUEiwgrFrRP%2BiTwsRYGrepCILLDoGY%3D\"}]}\r\nexpires: Fri, 18 Sep 2026 11:47:43 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1841\r\ncf-cache-status: HIT\r\netag: W/\"6a8c5d54-276\"\r\ncontent-encoding: zstd\r\ncf-ray: a396b46228fa0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":630,"size_decoded":1138,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3adc3f9d414ac38c67fa5c1ac11ba0a","sha1":"f29fb7e8802507053cfe5fc626eb7bf99254889b","sha256":"9d488925a07107577e93ec57076fb88ee3bd0c76d62ed1d32f74ec0af4132a20","sha512":"8ccf183506e641592b410766d02139c9ed0f9fffcc7df373fcb4c2432b6070aed19670028527765fe762911e3b4b11283e608a09ed3a1bd71f3ababf02554ddd","ssdeep":"","tlshash":"28f062e6a0adddd4b981cfb892142d7a423b10e654a0907058a2de12a6a34df88161e1","first_seen":"2026-04-18T18:24:50.812176Z","last_seen":"2026-09-11T12:34:44.874164Z","times_seen":7,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/assets/btc.png","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:05.781Z","timestamp":1789130045781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /assets/btc.png HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 3752\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 15:03:48 GMT\r\netag: \"6a8c5d54-ea8\"\r\nexpires: Fri, 18 Sep 2026 11:47:43 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\nage: 1841\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8jnTSWxm1IuyMFCUSi41avI6iS7bw2vLDPMHnuoIrMPDlvZ%2BRz4ZY6pedezmdIYB53cKmuzHoyMs6JimviBa%2F7EaxQTbcYf0%2BdgPjlOFkEjI5JLwWIzqCqTSmtbWIY6q8Zo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a396b46228fb0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3752,"size_decoded":4527,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit colormap, non-interlaced","md5":"e9b58e7d42c7a9e079adc055452c7c1a","sha1":"a0c335afe508ced88e931a2ff73107bd86fd7df2","sha256":"7d867b1fdc7eab63707e1fba73528bcf812b20b88efce051a953bcdd7f71a65e","sha512":"0e6e9da17c3c881b6923b5cbf181b8d4436d8356e1d5d378e89207914c951e93916d11adebf53ecf6ab3263a4ce3bc00639262039281c29a4ef9e290e0b11d9e","ssdeep":"","tlshash":"3b711bc72cc3df955906156ab4c830f774b3c89a7ccd1efaa1a2a191e98e2fd0188d56","first_seen":"2026-09-11T12:04:05.485958Z","last_seen":"2026-09-11T12:34:44.874858Z","times_seen":6,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.bybit.com/v5/market/account-ratio?category=linear\u0026symbol=BTCUSDT\u0026period=5min\u0026limit=1","fqdn":"api.bybit.com","domain":"bybit.com","tld":"com"},"ip":{"addr":"143.204.238.57","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.064Z","timestamp":1789130046064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bybit.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Wed, 24 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D3:9E:3D:D6:33:30:E3:BC:DA:4E:41:EE:54:38:42:CE:2A:DE:7D:81","sha256":"BD:31:A1:7F:A9:02:E8:D6:AE:BC:CA:EA:C0:FC:6C:1D:6F:E0:C1:D4:49:DC:B9:8C:E2:CF:B5:AF:B3:6A:0E:3E"}}},"request":{"raw":"GET /v5/market/account-ratio?category=linear\u0026symbol=BTCUSDT\u0026period=5min\u0026limit=1 HTTP/1.1\r\nHost: api.bybit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 228\r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\nx-cld-src: Loc-A\r\naccess-control-allow-origin: https://avantis-app.xyz\r\naccess-control-expose-headers: token, X-Signature\r\naccess-control-allow-credentials: true\r\nret_code: 0\r\ntraceid: 5e28a942e725453e00988754e9abd807\r\ntimenow: 1789130046410\r\nserver: Openresty\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: BmUriB5kgJ8FldH25tC3vJmSzE14NkmKEEdqHZIbiH5iSEG9FXDmmQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":228,"size_decoded":827,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eaaef803421d3b10f6b70fcee5095894","sha1":"93e58f42eedcf5ae11f567a0609a142c40ec9e4e","sha256":"226a258c6731c76871dc7c621641266734ff5951d16711738eea335f2df4c6ea","sha512":"ec79137a92e10466c163937af9688fb36fa09710a5939afea3a182d3cd7a2424c3c93ce24e8de8b226c17b890637bfef0a8ccdb834c0dc71a0f1a40277380d8e","ssdeep":"","tlshash":"b3d0a910f940aeb78655ece7ca4298db82107c9bc90ad808c0098e05119aa06ba2b6a9","first_seen":"2026-09-11T12:34:44.875378Z","last_seen":"2026-09-11T12:34:44.875378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":193,"receive":0,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/assets/Aeonik-Medium.ttf","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.067Z","timestamp":1789130046067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /assets/Aeonik-Medium.ttf HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 99628\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 15:03:50 GMT\r\netag: \"6a8c5d56-1852c\"\r\nexpires: Fri, 18 Sep 2026 11:47:47 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\nage: 1841\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HlRnDO94ld2pGzY%2FbEszVfevcg5pV3qOCcQYxw1Ba5TR8LLKIPEY3lLFprMG%2BR%2BOdMxsoQH53Mx5uRd0NFkddZylhL3nx%2BI6KpDi7wZ5MCYwYpTZ%2B6xytwNekeAcqZ9W8uc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a396b463eae10b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99628,"size_decoded":100425,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 48 names, Macintosh, Mark Bloom and Joe Leadbeater (c) 2018AeonikMedium1.000;UKWN;Aeonik-MediumAeonik MediumVersion 1","md5":"ee9ddd928615d07440071335054a55a9","sha1":"b6f63715fe6d720b0ed9b2aa50ad72f9f4cdcd37","sha256":"2a096b78226ea48ec8d105080561fd35dbe15075ada7f17c7315f6640a03afbf","sha512":"d16607d7b4b0a05a3ce62033adb3960cf7711ef1e8f532537b4967e857cf3b16bd3675b388d5d94fe60ff67ab0e354c9c30ebd3e2222818fdfc6ac3fb150d5a4","ssdeep":"1536:651D/WhJB3MTprTtEJRb0ex4ewMtGhTGWOe7/o3NtftF6bhD:6H/WhJBWrTK5x4Do3TuhD","tlshash":"38a32a27b3559307e8414e3a94b29392a7a9fd25bf1b830b600a6f65bddb1dc4c433c9","first_seen":"2024-10-25T03:19:16.38975Z","last_seen":"2026-09-11T12:34:44.876332Z","times_seen":45,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/images/mobile/tab-portfolio.svg","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.077Z","timestamp":1789130046077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /images/mobile/tab-portfolio.svg HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 26 Aug 2026 17:03:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvXIt%2BJO6HRTKaXRG3Daeq3t1%2F%2B%2FQjjZvqlJVt3FMVxTZeQg%2BWcLxZ42TCrcbLEI3trhMy7jx%2Bqjir6ROdAGhSUPvvKotCVP97Fhz%2Fsw%2B7vtD%2Fp25PKDoL1lwQTVC30XzIk%3D\"}]}\r\nexpires: Fri, 18 Sep 2026 11:47:45 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1841\r\ncf-cache-status: HIT\r\netag: W/\"6a8f1c74-be\"\r\ncontent-encoding: zstd\r\ncf-ray: a396b463faf90b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190,"size_decoded":933,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99ad4b60890e59c7b93959ad4c5ab697","sha1":"585a16fee8b3718cad9a6e4ac452ec6f349db3c4","sha256":"120cd9a6cfc64133e86d6d2393f39796c86e991844509086fe8215553e32abb4","sha512":"5dbcc703e0225e6b4633650056ff0d4bfcad06efc46609d0c4981d12d92e25a7a134b887f8f950bfb6a4a3138fed6729f768dab1ba1c7b56f73285ad20d0309a","ssdeep":"","tlshash":"f4c02219c7084c1ca8209aa0fe787639002b008218090035c4b12130b90998e346b1e4","first_seen":"2026-09-11T12:04:05.46165Z","last_seen":"2026-09-11T12:34:44.876876Z","times_seen":6,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.079Z","timestamp":1789130046079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\ncontent-type: application/json\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\npriority: u=4,i=?0\r\nx-envoy-upstream-service-time: 2\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a396b4648bb849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":614,"mime_type":"application/json","magic":"JSON text data","md5":"b29c40e1a8d83f4c52ef0e0b2e0d513e","sha1":"9f963d8d33d45b20e33699fe1025f98cbed20c90","sha256":"e31886653eec3e868e9b1e61dfda82880dbfc95e9412bfcd839a21d2b0a74b11","sha512":"e65dba347f81f9b92fcf9c8246826030c4bbb5ea13f425fd2f0c4f6e14297d7bd1e3eab4670d3c472e842282ee8e91238ccdde9f7c8a6b4cd06c894774353197","ssdeep":"","tlshash":"b3d012d0060f0ab1e09ccc405004730123227d894ac41d42084c0fd111443920317220","first_seen":"2026-09-08T18:18:04.407092Z","last_seen":"2026-09-11T12:34:44.877372Z","times_seen":10,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:07.764Z","timestamp":1789130047764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=3\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a396b46e88454c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1841\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 11 Sep 2026 12:03:26 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183287,"size_decoded":29626,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65483), with no line terminators","md5":"6ab735e3fce60e69de541ca23eda8dcb","sha1":"16aba6e74a9e21b387f96acd860f0ff45681be57","sha256":"0bf8cda6150518dbe80701acfe20872d84b9ed855aee00ec07351c264c995f5e","sha512":"798f0c5beeb38d347669d45caaaee5fb105a8c17c37f4010ea8b08bced0c37f4c396e261a75c4f970efc2fa3f292c688e9bf890b82a0ccfb64b0f8f82997edb4","ssdeep":"1536:wD6iwBGG/XRyNxQpuCpnEZB2sfPEzW6+0ASgSzrw:wD6DgXQpuC8PEM9SLw","tlshash":"d304526e8b04de662fb25388d15cf9eca15ee117c9ce5ca2e2f1cf3440bc5b7215219a","first_seen":"2026-09-11T02:57:34.029122Z","last_seen":"2026-09-11T12:34:44.87793Z","times_seen":18,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gf","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.727Z","timestamp":1789130046727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F32c2GRIOZTk7c2h83Vzes5zvykDarZfkOKHWI7joLTPjgTHFs0HEwPc%2B3izx%2FIbW80Ej5HP%2FT37qa3cS0bzX%2BGsaXRR8%2F9BHUebMe%2Ba4jJfNqHaWA0FbIG%2BOgBDKsyA\"}]}\r\ncf-ray: a396b46819adc8b6-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":676,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T15:24:32.699159Z","times_seen":18405136,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/31665fdd45.js","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:05.767Z","timestamp":1789130045767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /31665fdd45.js HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:05 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 27 Aug 2026 16:58:52 GMT\r\netag: W/\"6a906ccc-1413\"\r\nexpires: Fri, 18 Sep 2026 11:23:24 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\nage: 1841\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ha4SZzN2iCu8Q2zQNxY5MO6j%2FV3c8%2FU3oIHyomBgy%2BKf4jV3NWbeNJmaaZe9mXlD86lICbZemU3fOBH%2F%2FZbggVOl%2BkLBEJCsytLMNNHPNeGIs3LD68QRXgp6C058IUhiZjU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a396b46239080b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5139,"size_decoded":3116,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5139), with no line terminators","md5":"8bc546b25298bc1e2aa070af67d5052c","sha1":"cbd21e23b882f49af9bbc6ce6a832132488d5157","sha256":"0c9d3e596a8cde2b92c02f96ba3f9ac471682b8696f53febb47d7e667af6dac7","sha512":"423044be898bc929d8de79b311b543724ea27c7786a7baf5fd0ca1db058fb51ef8836f634cb9c30aac4627b756feb9366955b447303021b2d614f580c229f665","ssdeep":"96:0ywO+mAY9dWewWB0Nhmm0t3pUjjN82E/zBzhEFlu4utuYC/xEFDdwJIR4Pq+:8OsYnrwWmvF0dKfNDEL1hE2CyCS+","tlshash":"38b152422f90bd4a17dbabfb770f2cc4e6395e9a59a008478501be9015e892be1b3531","first_seen":"2026-09-11T12:04:05.459469Z","last_seen":"2026-09-11T12:34:44.878448Z","times_seen":6,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":47,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/markets.html","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.073Z","timestamp":1789130046073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /markets.html HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1841\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TQ%2BRnIzoGV9N9kilKVQiwOQ73ssQuYhXmvnOApzuU0%2Fk%2BNGVG0UQeiyBi7Nnki%2FyessPbiVxOBkcTsqUk%2Fn4giOM7TSypSU%2BkvVyzLZhMmy0%2B55Q2X%2BoXjccndCdI5lw5Rk%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a396b463faee0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":955,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-09-11T14:03:55.6472Z","times_seen":30799,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-rpc.publicnode.com/","fqdn":"bsc-rpc.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.082Z","timestamp":1789130046082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 02:01:04 GMT","end":"Thu, 05 Nov 2026 03:00:51 GMT"},"fingerprint":{"sha1":"94:5F:9F:32:64:19:A5:50:59:22:7E:16:22:E5:6B:9B:1C:65:F3:ED","sha256":"7D:67:31:E8:80:74:FB:3E:3C:A4:1B:9F:F0:BE:71:56:CE:95:31:97:BD:28:75:B6:47:AA:02:45:08:74:76:65"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-rpc.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a396b4642b8e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T15:24:32.699159Z","times_seen":18405136,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":1,"dns":3,"connect":12,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zennnnnnn.xyz/x7k/gc","fqdn":"zennnnnnn.xyz","domain":"zennnnnnn.xyz","tld":"xyz"},"ip":{"addr":"172.67.188.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.225Z","timestamp":1789130046225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zennnnnnn.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 00:31:38 GMT","end":"Mon, 07 Dec 2026 01:29:13 GMT"},"fingerprint":{"sha1":"43:45:93:AD:DC:B7:26:4C:9B:A7:04:85:39:49:43:D5:D5:08:BE:27","sha256":"A2:D3:84:55:78:F0:19:7D:75:6F:39:8C:86:DB:E1:22:A5:1E:22:A6:6E:B4:AB:35:5E:D7:0F:B4:4A:34:3D:85"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zennnnnnn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dTYPynGTqHp33RvxU4xpyS4VE7cFzhimDcJwhUwfhzB6J3N82YY2jlL5x%2Brf4xNsS6KulYj00xAE28NG%2F5yDJQZPhBI3pJG4D12O3jx%2B5pZrhCofdcVDkrlk3x8usP63\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a396b4651f8e0b3d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":641,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T15:24:32.699159Z","times_seen":18405136,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":8,"connect":3,"send":0,"wait":137,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"zennnnnnn.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:07.887Z","timestamp":1789130047887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=6\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a396b46f486f4c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1841\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 11 Sep 2026 12:03:26 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190541,"size_decoded":31710,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"06f25fd656cd65419a911ec5258fdca2","sha1":"62cd293a4c67abe013e71f61b5c8fbc53d787277","sha256":"c57fafe9adc7706243a0898dd51ac03899f7eef058321c31a333973738915a55","sha512":"b2a2b9409e4566d10a8aadd242c6829680177151ecae4285fb9c0518c6ebf9ca359bc8fdb688976a0b1844daa635d93f00c2f048dae23875e151374c06ed7ee2","ssdeep":"1536:a3HtpRWzoq53T7wYGzvx4ZMfLO/kU15yGtprkMTuomc8yQ:OvRWzd3T7waCU15Br9LmWQ","tlshash":"7a14536e8b04de662fb15388d15cf9eda15ee117c9cd5ca2e2f1cf3440bc9b3215229a","first_seen":"2026-09-11T02:57:33.976035Z","last_seen":"2026-09-11T12:34:44.878879Z","times_seen":18,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/async_hooks.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-11T12:34:08.162Z","timestamp":1789130048162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/async_hooks.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://longer-modules-elliott-watts.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/node/events.mjs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 11 Sep 2026 12:34:08 GMT\r\nserver-timing: cfExtPri\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nage: 610\r\ncf-cache-status: HIT\r\ncf-ray: a396b47109e30daa-OSL\r\ncontent-length: 1531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2938,"size_decoded":1938,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2937)","md5":"f78e3393d375d2bd75ee22e5bf0f3635","sha1":"2b6d82e3a17d6f4596fb2f6df083fcf498edaa99","sha256":"b7862dbfba8bbbca956f19e4e08280b529e4b27468779775a9093aef8c92dc1d","sha512":"280686efdbef542165cff092b795274efb660689426f8f15523b3478d967cc6bea03a0d7a66400552278a777655231d7e9ad2cba1bb4eb0a45f249e76102258d","ssdeep":"","tlshash":"3b515489a78bf9685b9eb176413a0103e10a0ec89d1c722cf049e9ee695e10c8774fb5","first_seen":"2025-10-29T19:17:04.32262Z","last_seen":"2026-09-11T12:34:44.879466Z","times_seen":843,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T12:34:05.435Z","timestamp":1789130045435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:05 GMT\r\ncontent-type: text/html;charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1841\r\nlast-modified: Fri, 11 Sep 2026 12:03:23 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yqzNh%2Fb5DiY8JiLjqifRwUuohpxRxgcKOpWj1oUolH8dD0PosSRbtBzoAwlBtp%2Fa0HlM11wBzX%2BM0Q84VOYodk2Z03Pnx6mjW4AqbnUgF66C6jnD8o0f6iof7JE0Fq47QLg%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a396b460dd3035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5984,"size_decoded":3277,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1060)","md5":"95bcd768ace282a3b576a1ba17127270","sha1":"545bc388ea66f91174d05d3b6d447a32a3e0e2e9","sha256":"abc86367a2acd74c376e92250ccdb73e2548c127dc9feee888c4ac6df0d1afe2","sha512":"55b31e06bb14cf86910906fa86df1994802a15b7786b84a068e7862e90f4356304d81c7f6593e45eaad2d8913b523544240abc72d0cfff54e1eeee9a7a86ab60","ssdeep":"96:KbnLnPnQMpL6IpqvCLouEKDLptX5JdFbSTSThbAvJjAXjAVhgCta6K3RouePzSTQ:KbLPnQoL6IEvIzqeVbWJjOj873m8TO6Z","tlshash":"42c172a2599c6b2e0217c8c46467ab5d31ed825efa4d1424bafc47f04fcbc92ec27857","first_seen":"2026-09-11T12:04:05.473769Z","last_seen":"2026-09-11T12:34:44.880041Z","times_seen":6,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":32,"connect":1,"send":0,"wait":23,"receive":-1,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:07.556Z","timestamp":1789130047556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=1\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a396b46d68074c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1841\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 11 Sep 2026 12:03:26 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226106,"size_decoded":32079,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f45b2b8fafaf1dddf69ab824175ef7f2","sha1":"ab1a1d6fe7927f8c051e5b1519a610032f4756c4","sha256":"b6b166f53953c2142420eea771bce200ffb2a8d26bf291d2a0bdfb6d0d2f9b35","sha512":"3940cef81a2dcefa44ad6091fc1a0a29d30ae14254c3bcaab3f8505dd97645af8b43216ec1b1883343a47e072e3ff53627018462a37c74e3079360f51cfe6a3f","ssdeep":"1536:tYvKFTcstXp1WLFaLYSG+DZHixh1BsNJxZv1M6R3:tYiFTcsNpwLFatixh1B+JxZv1z","tlshash":"9e24446e4b409e566fb18388d25cf9eda16fe007c9cd5ca6e2f18e3444bc9f3215129e","first_seen":"2026-09-11T02:57:34.03623Z","last_seen":"2026-09-11T12:34:44.880562Z","times_seen":18,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":16,"connect":11,"send":0,"wait":115,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:07.724Z","timestamp":1789130047724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=2\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a396b46e48284c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1841\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 11 Sep 2026 12:03:26 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165117,"size_decoded":27883,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"66efdc696ea696c2d15082bf3d4945ec","sha1":"287365e33dac50a8ea3b521311a6ebb75885fa97","sha256":"3a78e3c1327e66759dabc5c7937a9a7ca9eb0d1b03389e857ecd2ab1761bbac5","sha512":"b5466fc85ba6e819a596015a0db83bc206cc4f0831d0d6a620ddbcf93594d8a2a96e61497a6adc68cd4eb7e7a3e64ad15acb10460d21a9c9aa4cb29a4208c283","ssdeep":"1536:ZtDCyTxVAtE0607Zg8xBx8VqRF11z50/na5u49QmqgpeG:ZFVz06UZgEx8e1z50/nEqg4G","tlshash":"4af3646e8b04de672fb15388814cf9eca15fa117cdcd9cb6e2e5cf2440b89f7215219a","first_seen":"2026-09-11T02:57:33.967841Z","last_seen":"2026-09-11T12:34:44.881137Z","times_seen":18,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:07.817Z","timestamp":1789130047817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=4\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a396b46ed8594c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1841\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 11 Sep 2026 12:03:26 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170294,"size_decoded":28246,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2b074019702eefa485c52339cbbda1b7","sha1":"d4304a78320d8a5f27731a7c9d39aa9d0dcefa66","sha256":"99fb20f14108c50fb24df03f717361f6a720d980891078da7d1fd164602203b0","sha512":"82d7af4138668474b9f588c1c2b3ec3036a480c03237dbebb0ad564959bb95004401dcef64389c2372e951d5bcb84a1341c847a5537ecc3db16521fc4ac1c076","ssdeep":"1536:OzoscDIu+4PCuiBkV7bI4I0d/i5GnaK4ko+p9j4:Gu+4PCuielkAnaK/p9j4","tlshash":"e1f3856f8b14de661fb24388915cf9eca15fa117cdcd9cb6e2e1cf2440b89f7215218a","first_seen":"2026-09-11T02:57:34.002588Z","last_seen":"2026-09-11T12:34:44.881701Z","times_seen":18,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-11T12:34:08.090Z","timestamp":1789130048090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://longer-modules-elliott-watts.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://longer-modules-elliott-watts.trycloudflare.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nx-esm-path: /@walletconnect/ethereum-provider@2.21.8/es2022/ethereum-provider.bundle.mjs\r\nx-typescript-types: https://esm.sh/@walletconnect/ethereum-provider@2.21.8/dist/types/index.d.ts\r\ndate: Fri, 11 Sep 2026 12:34:08 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 611\r\nlast-modified: Fri, 11 Sep 2026 12:24:32 GMT\r\ncf-ray: a396b470a9c70daa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":766,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7ca4c1770e526303c8b96ec681271e67","sha1":"040ceca3f1799eb067ee3e0c5c3f97e8d48e8492","sha256":"9b69c924617de012e3a6252d715e48202d0bd07eccae08190bc9d0565405d1dd","sha512":"0180a2c052ce5feedb836fc6a1e5d82f2edaa25574f0951b679029a28ca6c0e4098c0fde61858a88c4dc4fb2ee2ac196f3f681864fab71b3d205a0baf010c4f3","ssdeep":"","tlshash":"13e0867181174b8423b80da5ad81af3bebab1758a945215c334ec633f517654c9441f7","first_seen":"2026-08-03T07:57:51.315431Z","last_seen":"2026-09-11T12:34:44.882368Z","times_seen":187,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":4,"connect":9,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","fqdn":"longer-modules-elliott-watts.trycloudflare.com","domain":"longer-modules-elliott-watts.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:07.560Z","timestamp":1789130047560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea HTTP/1.1\r\nHost: longer-modules-elliott-watts.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:07 GMT\r\ncontent-type: text/html\r\ncf-ray: a396b46d6c931525-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":769,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"344736d7cbb42230c47fdd836d2edced","sha1":"fe4ccc93f8d977421be1b6045a66f97c33440178","sha256":"54e4cb50a198da50e5b876646c124bedd9c3fedad91f71f45650f464c1b5b1f5","sha512":"162fb66dfcb0821d370119d7d5860f4a01ac3f4df421bb3476d242f528f0d0af6bd26b343708242ce1f4c002023b640236feab57e65cf6bf95804ba80bf58c04","ssdeep":"","tlshash":"8f11dd850d57007105f38a9a3b5f7e05b3a2924a40c0c5003bfae2b7afa3e4bc809ad8","first_seen":"2026-09-08T18:18:04.397346Z","last_seen":"2026-09-11T12:34:44.88301Z","times_seen":24,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":12,"connect":1,"send":0,"wait":244,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:07.853Z","timestamp":1789130047853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 09:21:35 GMT","end":"Sat, 31 Oct 2026 10:21:32 GMT"},"fingerprint":{"sha1":"2F:0B:9E:A7:63:A8:B6:83:0D:80:12:48:90:19:5E:70:3C:BA:E7:2B","sha256":"68:DA:70:B8:9C:22:69:29:9F:DD:81:28:74:BC:A9:6B:38:7E:E4:A0:54:C5:B2:2D:36:F8:A2:81:FF:3F:4B:51"}}},"request":{"raw":"GET /v3/wallets?projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026page=5\u0026entries=100 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://avantis-app.xyz/\r\nOrigin: https://avantis-app.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-robots-tag: noindex\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 12:34:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\ncf-ray: a396b46f18644c11-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nage: 1841\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Fri, 11 Sep 2026 12:03:26 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222078,"size_decoded":31454,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"43466a816aaf19cf3dae5e4b6a58054c","sha1":"ff7e3f37fac02d5a88cbfabe054c93a3d55dedad","sha256":"ec472623c7822258ccfd8b7ec3dfeb2b6a6f444f7814441a31755bc17132b149","sha512":"9091fd26132ed2f724bd73279bc495f3e3e18e70bad04148b3ce37d5cd3579a2f9688f3ac27f584ec4a833e775f4f57c8a13286038a24d746fff3c6bfa15317f","ssdeep":"1536:pbinZhimNX3XFQ5Luj5ygGWudQT6bjzeFedV:pWnZhimNnQCVB3udQCjzeFedV","tlshash":"1924656e87409e565fb19388d25cf8eda1afe103c9ce5ca6e2f18e3444bc5f3215129e","first_seen":"2026-09-11T02:57:34.006174Z","last_seen":"2026-09-11T12:34:44.883547Z","times_seen":18,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://relay.walletconnect.org/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtua0R1aVpxeWVka2oyQ3Z2NHd4VWd5Wk1HUm5yRHFyUDkzSGM3cXNxUGZnMyIsInN1YiI6ImUzNzM3ZTEyYmM3ZjBmM2Y1YTYyYmQ4N2QyNWQ3MjYwMzNjNmQ0NTU3Yjk2ZjhiNmVkM2JiY2ZmYzMyYmU3YjIiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4OTEzMDA0OCwiZXhwIjoxNzg5MjE2NDQ4fQ.UJfxrM1RCy7NE8rVQbnZnbWVyD8hPVMtYAA9knWgb4ltRosFbqNcPdgupzpOtxxJ1FUnlo3bIuNeXYInuh8HAQ\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true","fqdn":"relay.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"3.72.26.12","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-11T12:34:08.489Z","timestamp":1789130048489,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relay.reown.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 25 Jan 2026 00:00:00 GMT","end":"Tue, 23 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"90:24:50:19:3B:DA:52:35:62:2B:85:B8:D3:E7:0A:03:24:F8:84:7E","sha256":"A4:45:7F:C8:5C:09:EA:D9:34:3C:56:81:67:1A:5F:6A:3A:C0:13:7B:5E:4F:C5:F9:06:CE:FD:53:A3:9B:88:77"}}},"request":{"raw":"GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtua0R1aVpxeWVka2oyQ3Z2NHd4VWd5Wk1HUm5yRHFyUDkzSGM3cXNxUGZnMyIsInN1YiI6ImUzNzM3ZTEyYmM3ZjBmM2Y1YTYyYmQ4N2QyNWQ3MjYwMzNjNmQ0NTU3Yjk2ZjhiNmVkM2JiY2ZmYzMyYmU3YjIiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0Lm9yZyIsImlhdCI6MTc4OTEzMDA0OCwiZXhwIjoxNzg5MjE2NDQ4fQ.UJfxrM1RCy7NE8rVQbnZnbWVyD8hPVMtYAA9knWgb4ltRosFbqNcPdgupzpOtxxJ1FUnlo3bIuNeXYInuh8HAQ\u0026projectId=9713e268acd3c6313b52e6ec7e4e5eea\u0026ua=wc-2%2Fjs-2.21.8%2Fwindows10-firefox-134.0.0%2Fnode\u0026useOnCloseEvent=true HTTP/1.1\r\nHost: relay.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://longer-modules-elliott-watts.trycloudflare.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: IRWDBFg3dJpMTPGLbPNJuQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 11 Sep 2026 12:34:08 GMT\r\nConnection: upgrade\r\nupgrade: websocket\r\nsec-websocket-accept: sA5fkoGHHJzmQsaYWxOkp1glADE=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T15:24:32.699159Z","times_seen":18405136,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":99,"connect":117,"send":0,"wait":39,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/assets/favicon-32.png","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.607Z","timestamp":1789130046607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /assets/favicon-32.png HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 728\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 15:08:40 GMT\r\netag: \"6a8c5e78-2d8\"\r\nexpires: Fri, 18 Sep 2026 11:47:49 GMT\r\ncache-control: public, max-age=2592000, immutable\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\nage: 1841\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YahL%2FUVPUiH36xKFztVjLlTQfT23KFu4wJR3ZVl8xtGBiAarSwOL8MqWSXYZ0kcEc4KTTlRqp5p%2BhoAUA1Hwje7XbpZR8GoIB8m%2FGe6E9tBTs0jdZ%2FANNAUw8u%2FmXjlF4S0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a396b4674dc50b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":1506,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"bff11fd4b1da28a748b29e895bee8b52","sha1":"a8ad9e356e140caa6fd271b1ccf71eae1db94be0","sha256":"4e5dbbe961d19c9b8af29486037b1ab44c1a2bf5a18d5275ad9e9b48933c732e","sha512":"ef3e9576ca63815c8aaf35f728cdc2aea0d15ac83f9540c7acc607d3e906817f6ed20395720112eb8a28e216fb631402b5df84de2a23171fabd2425aec647029","ssdeep":"","tlshash":"f5016598e17e67a9ad400a5dd02430777c65863d6c6db1c76d0720a83023c67dd3fa56","first_seen":"2025-09-11T20:55:49.998233Z","last_seen":"2026-09-11T12:34:44.884164Z","times_seen":21,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avantis-app.xyz/assets/AeonikFono-Regular.otf","fqdn":"avantis-app.xyz","domain":"avantis-app.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://avantis-app.xyz/","date":"2026-09-11T12:34:06.068Z","timestamp":1789130046068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avantis-app.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Aug 2026 11:44:31 GMT","end":"Wed, 25 Nov 2026 12:42:15 GMT"},"fingerprint":{"sha1":"6D:40:49:2D:EC:94:46:E9:B7:15:E3:4D:EB:3C:46:70:1B:3C:13:03","sha256":"CF:34:17:B8:8A:9B:98:79:CA:A9:66:8E:84:48:21:55:64:AC:8B:32:F6:B1:4C:53:EB:3A:B2:45:DE:1B:06:CF"}}},"request":{"raw":"GET /assets/AeonikFono-Regular.otf HTTP/1.1\r\nHost: avantis-app.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://avantis-app.xyz/styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 65596\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 24 Aug 2026 15:03:50 GMT\r\netag: \"6a8c5d56-1003c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 1841\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7iquTrbF5IKMPoRs3Fi85QEAaEpni3uDlkmstHakK6sSyjid414JLyU%2FuZQY6HrjO2GORQFDGK%2BjziZ9X%2FFRBbWCLcHHRdx%2BJ4bpJWVfmC%2BDb8gPll3vnKIw1Y%2FRS1SbYk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a396b463faea0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65596,"size_decoded":66531,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"6bcf5f862c7fa38f57086084b156c6ed","sha1":"ff4bff62f681853b307b7829a940cf772213e9c3","sha256":"a790ff1bf43ed5df8b467466fc758cbe6f1c60f0e376aa35b6d037609861147a","sha512":"29208da7044c08e1adabf8c19e4d248a37fe181227b6e8e9275c93e4d5d55a3d1c69c88b6ed0217e694fa4698de9586c0aa8b1097c96697e5eaced34575fa44a","ssdeep":"1536:OYaEsRD5i4mImekdQJyTZnMaT9LPd7OG6rPCvkrtQ/A:OYKPmLR5srPukrtQ/A","tlshash":"50539e27b376bf0cf1c289708db7c7b187b07c619f637b4eac1e69442e602604959b86","first_seen":"2026-09-11T12:04:05.466283Z","last_seen":"2026-09-11T12:34:44.884704Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"avantis-app.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"longer-modules-elliott-watts.trycloudflare.com/assets/index-f2H8W9Sl.js","fqdn":"longer-modules-elliott-watts.trycloudflare.com","domain":"longer-modules-elliott-watts.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"104.16.230.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-11T12:34:07.880Z","timestamp":1789130047880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trycloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 20:25:50 GMT","end":"Thu, 05 Nov 2026 21:25:21 GMT"},"fingerprint":{"sha1":"0C:9F:E5:04:61:B4:27:20:4B:CF:FD:B1:2A:2A:F6:AB:9F:8D:32:F6","sha256":"B0:65:76:06:0B:B0:3C:A9:FE:77:EF:DB:5C:E6:C3:4E:DF:8E:E9:7F:1B:4F:F0:AC:48:95:6A:F6:2E:2E:08:D9"}}},"request":{"raw":"GET /assets/index-f2H8W9Sl.js HTTP/1.1\r\nHost: longer-modules-elliott-watts.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 12:34:08 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a396b46f4a3f1525-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48607,"size_decoded":36184,"mime_type":"application/javascript","magic":"data","md5":"4f543fd9ee8564336972d4cee46e0063","sha1":"0a79fbde28e7b168d7089aaefa9fc06a6f34b61b","sha256":"46807db56bb3f6f4844f9a09637379cf656cf31deb27b6e7036cb4b1e1e04350","sha512":"28c66147b9ada7bb96ec7cf68330924f01660ed3d680e7d6d98e7513d89aa8d905d6943670d34a4d16c041c0abdc75b99a4c48c55fa5b91ecc5dea5b18024fd2","ssdeep":"768:hEmJVHs4gJh4Dsk4bhomv4zZtpN+L0+BF0yx20dq2tKn18aRdpdne5QSyR4ypaKD:hEmDs3rwsWmIpN+A+BF0aM18aPbOypaQ","tlshash":"c223d1cd58b21159439c2b5c6c0fd984fc3c5fa921c88a3ba949d0a5ffb078d58aed74","first_seen":"2026-09-08T18:18:04.390952Z","last_seen":"2026-09-11T12:34:44.885233Z","times_seen":24,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/buffer.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-11T12:34:08.129Z","timestamp":1789130048129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/buffer.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://longer-modules-elliott-watts.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 11 Sep 2026 12:34:08 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 611\r\ncf-ray: a396b470d9d20daa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28845,"size_decoded":10670,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (28468)","md5":"39e6418dc1a8a38a7baf7cbf64e6bc9b","sha1":"036b9f42abe9026454886016987cdd479ce3f33c","sha256":"64fb61aa5f48644d685f9ceabedba60ea6b5d6ce03dac1943e863d00d9e574f3","sha512":"de01074341e2a0ad5d0b74108a593811ef91c72bd775fc2ab20f98c941fc4635f541fd7983f08cd93700d7f6f582c55b95fdfaed785258eef4f0b55322df151c","ssdeep":"384:f2ROO9YwKOX7MW/I55zmhYuC2rUV5w+c7LW+M444MMazyXDNcyO9+C9YDNqWRMzI:fKewKOX7MWwGzCrfTc7LW+bcp9a60","tlshash":"d3d2b694f795b032439e65a50057980ef2b8f928640d198cf6a0f5f728b59ce88eff74","first_seen":"2025-10-30T08:47:32.392454Z","last_seen":"2026-09-11T12:34:44.885809Z","times_seen":705,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/node/events.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://longer-modules-elliott-watts.trycloudflare.com/?host=https%3A%2F%2Favantis-app.xyz\u0026href=https%3A%2F%2Favantis-app.xyz%2F\u0026pid=9713e268acd3c6313b52e6ec7e4e5eea","date":"2026-09-11T12:34:08.131Z","timestamp":1789130048131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 09:36:52 GMT","end":"Tue, 17 Nov 2026 10:36:50 GMT"},"fingerprint":{"sha1":"69:BD:AC:29:6F:45:CF:4F:70:65:A1:85:91:55:B0:4D:40:D3:F0:53","sha256":"C4:3A:EB:EC:A0:85:B2:25:A4:84:5A:D6:4E:E5:6D:0E:89:C0:0F:03:6B:0C:87:1E:55:50:E6:C3:CA:80:75:CB"}}},"request":{"raw":"GET /node/events.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://longer-modules-elliott-watts.trycloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/@walletconnect/ethereum-provider@2.21.8?bundle-deps\u0026target=es2022\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"v138\"\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ndate: Fri, 11 Sep 2026 12:34:08 GMT\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 611\r\ncf-ray: a396b470d9d30daa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12122,"size_decoded":5171,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9385)","md5":"acd05dc333042e32473eb39c7700cc9b","sha1":"a9ff738706c3e6ab2be579d296faecd67e438f47","sha256":"4c6150b88c1444aa1fe9331013e3f37eda9836206f629f7f3ae8f3743dd90fa8","sha512":"658a1eebb2727249df13bfd7f76d1bd38921ebc2dff63b8c1bf779973bd10483b7138649e7168a1ea7305c88542876be92a52b1da915331806436b0455f9a6a5","ssdeep":"96:yIJAOQoXa9RQ9bKVXQ6Z9cBBEMPg19H+MyLfLYCGZjiSl1YYS/07jfofxSXR261G:yyiZInEGaGLYCKt70WRRD7EE00WZ","tlshash":"404286ccb386b87113def3af707b4146f23459e0685c0408ba75fcf6292a98995a6f71","first_seen":"2025-10-29T19:17:04.387887Z","last_seen":"2026-09-11T12:34:44.886371Z","times_seen":846,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}