{"report_id":"83884da4-ba9d-49af-811c-95de7b2eac38","version":0,"status":"done","tags":[],"date":"2026-09-04T16:41:06Z","url":{"schema":"http","addr":"web3amr.org/","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"web3amr.org/#/no-wallet","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"title":"web3phantom","dom":{"size":5847,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1260)","md5":"d7eeaceef5b327099b77433708d722ad","sha1":"e91348610db477cc49f96b26b99daaf36073afcd","sha256":"e16c464d42211181b1c45e3b8150259a940029cb324c467edd0527507572e2e6","sha512":"c1f19f9eb91d30f4757d4a8773aeddabed9ed2b2eacb934aae0cac985dd867204e54b925ef9719f8a7e5d06fcfd55819604d85341b82d998dead6d7f55903e9e","ssdeep":"96:er8/e3hprCugOKFGue5iM/FXr6TCZydHRH/9Y2mUsGKYiwwGDVmNdB1nPEPHpPEH:eHAGkOZCxfG2nf/zbudB1nYJYYfw","tlshash":"a4c196b77de4c41703a74527eae7f404ae629206801a5810b5ce90ed4fe1feac8db760","dom_hash":"domhash666681cdfc282ac1c5b9dfc28ede4419","first_seen":"2026-09-04T15:48:45.634958Z","last_seen":"2026-09-04T16:49:44.335287Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"web3amr.org/","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T16:41:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"h5-api.web3phantomapi.cc","ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-17","domain_rank":0,"first_seen":"2026-09-04T15:48:40.380411Z","last_seen":"2026-09-04T15:48:40.380411Z","alert_count":6,"request_count":7,"received_data":6424,"sent_data":3909,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"web3amr.org","ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-17","domain_rank":0,"first_seen":"2026-09-04T15:48:40.384173Z","last_seen":"2026-09-04T15:48:40.384173Z","alert_count":0,"request_count":12,"received_data":2767619,"sent_data":5415,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"web3amr.org/charting_library/charting_library.min.js","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-04T16:58:43.038014Z","times_seen":1420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/assets/vendor-c00973fa.js","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54f255de9e3431804af0ec698d96f255","sha1":"ca8bbb625e3d160c3b37eb7b24442a48c7a5b544","sha256":"1168553d79c03dae504d395f1df6a9e5e70e302d283520d3bb0e68e22c240caf","sha512":"fdc8d2363963d4704e2368ac191e3fa121d73738d8933718e9b89f5f165d299a33c1445e5aa7f3ccaee0a1d309a5a4003fc700b8c77fd12ca2b30ce0d2b000e6","ssdeep":"24576:WVqldGqVvWCsw87m2C/uz2WQZrDa2jGCPT:uqldGqVvY7m2+uz2WQxDd","tlshash":"132529c97292f06147ab24e200bb1007f3396e59744e84a4f169d8eb7d69e89d277f3c","size":1007338,"data":"","first_seen":"2026-09-04T15:48:45.64157Z","last_seen":"2026-09-04T16:49:44.351096Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/#/no-wallet","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-04T16:58:43.086983Z","times_seen":1774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/#/no-wallet","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-09-04T16:58:43.085365Z","times_seen":4604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/#/no-wallet","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"196b4e62df90a968eef60ee22c8f52ef","sha1":"406182fb5de0ee70ed9ab43a610dd316aaa6821c","sha256":"5ed7c85c51929e50abccb8847e1b86f31ff6f674f527a88e64a85c7b5c0bdac0","sha512":"06f9de94a33005149da3e8608574f30c044985929e6fc957a4efa9eef2669df8c78cbf9408a006bcf5ed6553e807116220d794032a8ac669926560a85a48968c","ssdeep":"","tlshash":"f4d0a7c961d6aa1016051a1366bf61e1d0349029e2085b17aeddf88d3a570f8d337f98","size":242,"data":"","first_seen":"2026-09-04T15:48:45.653155Z","last_seen":"2026-09-04T16:49:44.36863Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"05c288f7af7eaaeecad37842c9a3bac8","sha1":"73a879de5b925686b36dee9a752a419f866ca9cb","sha256":"947abab006086622d98a5f6c27b8d2517c0469909ad8c7517a0a122f51298620","sha512":"ac58d273b8ab14850241ab056e7e65991d0f9a386a1e0fd3ce099bd6e08f67b76f1e6be32f3c3182e3793729a316e4b1f383873c539f07c255505a094e17accd","ssdeep":"","tlshash":"7511abfe1a1aa12a6347804e976b7814742250ad001a1441738cda9dabaaf6dd0cbb8d","size":1042,"data":"","first_seen":"2026-09-04T15:48:45.649584Z","last_seen":"2026-09-04T16:49:44.360056Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-04T19:12:56.094306Z","times_seen":42273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-04T19:12:56.094889Z","times_seen":43657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/assets/index-6f44b6e5.js","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"357857f6d29724c1292f3ddc62173a7e","sha1":"0a2c599a4f7dd763b00812e377aa0f3349b817c6","sha256":"bcb5e56b533e4e52ebe2279701cf224f26179a1e2b67d268ef811c221ac112c8","sha512":"6b84ac71564c515f25d4da3fbde2fbe2b1be67fb135c46a3199b4669e801b6d8d54c987e7b580ce30b2bc96ce5e1e2c0da6335647efb1e84ec2f0f915b20b902","ssdeep":"1536:jCsOvqzAYx0Irt4FL6jGIzGfDBPitNioRzLI+S48jiO:2LizAYx0IXzGL/oRzL/u","tlshash":"92a35ccea6064dff5cbe4804ad5b851011691f8358cccc53bb7eae4a27facd4635a718","size":104005,"data":"","first_seen":"2026-09-04T15:48:45.638963Z","last_seen":"2026-09-04T16:49:44.338404Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/#/no-wallet","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8d255a299e150901ea4e4c2f0468f481","sha1":"bb404a945fd3291d2807b3d91e24189b0587cf7f","sha256":"2c489ceafe491cee044b229dbb6c5ebccd7c4bf718f56fe54607e62c9ac8b468","sha512":"d823603145ea3a330176d4f3a5625254c8380931822c5b5a0389307f7d1cdc22c5d15ef5899d669b4928992af7f6abca5395bd2150c4ed850413966024726c22","ssdeep":"","tlshash":"bbe0abf7327dd0209581522a19ea18afe28261725c8c1e2df4c5a20b9e4dc28217c051","size":408,"data":"","first_seen":"2026-09-04T15:48:45.654065Z","last_seen":"2026-09-04T16:49:44.36286Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/assets/en-2195630e.js","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e1620a216fe0177607c47a96304b2ce8","sha1":"750279fe97fa7aa9b9286a1465f93f6d1969dc1a","sha256":"afece0bbbcb273e4f32f395fb41376bc8d8dd3d95c9ad38ca6b19cdc8ff33893","sha512":"bb11ef4948e3d37f691e8b3f3d112d50e2dad6f5a8e32a4a3b97858cfc5b769ffef33960d15c6e35f2be2f4e74772a5f87067b5b6c713a97f91d0851149fe3bd","ssdeep":"768:KGtZcEw/o7rWOvAFsifnAhC2rAaAMFVoP6+6svGnu8clw1mwO6fpk7aOC:uponWOvebB2rdFVLsvX8iwqC","tlshash":"0df2d6ce7e16889a04f35377b4ce5e6021f609c18255880e4fedc5fd83a2b67a367a74","size":36876,"data":"","first_seen":"2026-09-04T15:48:45.636528Z","last_seen":"2026-09-04T16:49:44.359092Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/#/no-wallet","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-04T16:58:43.071623Z","times_seen":1481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/#/no-wallet","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9e53bcf8d96bd94c87849c971f200ac2","sha1":"cfc0bfda8ceb2bcfde66b6b910a1e2c0a5ac8574","sha256":"992d170eda6c9a677f3838179025bc488583852c75de38048d7b647808272f6d","sha512":"75d52cfc26af5eff4aaa814b4ee4b8817a4dfc0743e9ec463d0e590e0c8d5d8fb462e4d1d0014a0ba61e8f788d917d0122c45419de194a9027088cf6e1e03f36","ssdeep":"","tlshash":"15c08cc8b1c22e002602681020bf34e49024502771481b028d94d8582e230f09233fdc","size":147,"data":"","first_seen":"2026-09-04T15:48:45.652107Z","last_seen":"2026-09-04T16:49:44.367516Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:37.709Z","timestamp":1788540037709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://web3amr.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:38 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3amr.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZDRuqb52s8DqJa2xzACCcQqc%2Fy2tfNsIKpyXrxmvyZ3EGF%2FRufqlbHWelzjQ6vq5JCcstNtIocB1PAKUF1k8cMhFyZLLFVrfb57YA%2FjRDrvbGSdtTgLCfgvuLWh0BDF0sHPmEF%2BD923m2Es%3D\"}]}\r\ncf-ray: a35e6fe3abc70883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":908,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://h5-api.web3phantomapi.cc/ws/d6e8f0eb-bfc5-4d7f-834c-3c54cde6aee3","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:36.491Z","timestamp":1788540036491,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"GET /ws/d6e8f0eb-bfc5-4d7f-834c-3c54cde6aee3 HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://web3amr.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ZGL0mFy15aAwf8LZFKg9Vg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 04 Sep 2026 16:40:43 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://web3amr.org\r\nAccess-Control-Allow-Credentials: true\r\nSet-Cookie: JSESSIONID=B2006F9DE79A593E2A8EFAD2F07D6305; Path=/; HttpOnly\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: GkLUqtCUVxZjYZWf+w3ip5xL7MI=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ws8gwzy2cAGcktG%2FQtN69BNQKfwSJd7MFMI%2FbFJvMQpmTDkz32VahCU41vAEA3VIbjl5Bgpl7s%2BEV5ZpmrQTSlMLdniVzrFD%2Bl00fMI7%2Biyi08qbrzj7RoR3%2BWbvVlcMCey0spFCNWI1Jw%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a35e70046fb756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":[{"name":"JSESSIONID","value":"B2006F9DE79A593E2A8EFAD2F07D6305","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"JSESSIONID=B2006F9DE79A593E2A8EFAD2F07D6305; Path=/; HttpOnly"}],"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":967,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":13759,"timings":{"blocked":-1,"dns":6443,"connect":6386,"send":0,"wait":918,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/getCoinList","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:36.495Z","timestamp":1788540036495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://web3amr.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:37 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3amr.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0m6Gpr8cCiGRJsnejCuN5x5Eiqno%2BB%2FUE5jBbEsV9NZOLjCor4tr1UhgfpyJ3E%2FxMiQarPByljsj9xBvs5kfclQL3K6zdYcUlQNpfsTScBwOlcGNrqzkewCxDvuvJ0llRxRat3yGrSV6lE%3D\"}]}\r\ncf-ray: a35e6fdc9a9a0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":906,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":887,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":819,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/charting_library/charting_library.min.js","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:35.997Z","timestamp":1788540035997,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 12:28:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9967ea-2a6a\"\r\nexpires: Sat, 05 Sep 2026 03:47:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3205\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwj%2BGpf6MNDtSQ%2FUheoMwVfdOazz7pT297u2dzn3znZqSPqLx%2Fn9f6Uj7n4q2G1e8ts3FPakImPNaLTFlAbaHp79%2BNUtzNPGw86nBKCRgck3AHAMuHaubcEH2G2sbw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e6fd8fb1223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":3980,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-04T16:58:43.038014Z","times_seen":1420,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/assets/vendor-c00973fa.js","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:36.002Z","timestamp":1788540036002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /assets/vendor-c00973fa.js HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 12:28:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9967f8-f5eea\"\r\nexpires: Sat, 05 Sep 2026 03:47:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3205\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l9VOvzWIYjoQxAinRbL3L0QdXgVsCqJ5wDDuB5avxILv6wk9JOC95dG0TTPKh3jl1QlDBZYHQKhVsx6v8vp%2BHt7Og9%2FKte%2BGocZgwMpP%2FLPGHqV9QLNeiopMew9%2FSg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-ray: a35e6fd90b1523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1007338,"size_decoded":334901,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"54f255de9e3431804af0ec698d96f255","sha1":"ca8bbb625e3d160c3b37eb7b24442a48c7a5b544","sha256":"1168553d79c03dae504d395f1df6a9e5e70e302d283520d3bb0e68e22c240caf","sha512":"fdc8d2363963d4704e2368ac191e3fa121d73738d8933718e9b89f5f165d299a33c1445e5aa7f3ccaee0a1d309a5a4003fc700b8c77fd12ca2b30ce0d2b000e6","ssdeep":"24576:WVqldGqVvWCsw87m2C/uz2WQZrDa2jGCPT:uqldGqVvY7m2+uz2WQxDd","tlshash":"132529c97292f06147ab24e200bb1007f3396e59744e84a4f169d8eb7d69e89d277f3c","first_seen":"2026-09-04T15:48:45.64157Z","last_seen":"2026-09-04T16:49:44.351096Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/resource/fonts/Arial.ttf","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:36.065Z","timestamp":1788540036065,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://web3amr.org/assets/index-70785e56.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:36 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 03 Sep 2026 12:28:26 GMT\r\netag: \"6a9967ea-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 3204\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Q97b%2FCM5sP%2FN9%2FdnB89MIiajYmxlV0mzFrMTTq0EiPbc%2FB2ZOOwRiLc7%2Bu3MXjDdenkBLg2lOu0P%2By13JIQIuXPWFzdhzV8RkVg%2B4a5%2BO5O9O8vWwHDTw1TnduhYA%3D%3D\"}]}\r\ncf-ray: a35e6fd96b2e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047785,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-04T16:58:43.029725Z","times_seen":2378,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/getApprovalAddr","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:36.755Z","timestamp":1788540036755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/getApprovalAddr HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://web3amr.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:37 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3amr.org\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPkQPFYzhpSCp3df3JyQX2DGT7GZtQIfyQ04LrZQ92iDo206W1FtErgqsmFX8GPu%2B0m3sOTtONg3ekxrsaqmDbS9zCcea0epJj%2BRVgRUC3k0WfsqPv5BukI%2FXPu8eOsNOuXIE4HzqdJEHvY%3D\"}]}\r\ncf-ray: a35e6fddbab40883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":891,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/platform/web3phantom/favicon.ico?2.0.1788409721416","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:37.057Z","timestamp":1788540037057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /platform/web3phantom/favicon.ico?2.0.1788409721416 HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:37 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzXSzlgk24qLnliO0w9w8W8bh0FWEhJEA0ISK3i0imBZP6s0tE1zPIJpo1OiaAVoR%2BwIfqOQWIILxjJfrzkq1YfWBP5jhSCPvwHG31HbdTi1YZWcHGxKnJ%2FqJ7JMXw%3D%3D\"}]}\r\nlast-modified: Thu, 03 Sep 2026 12:28:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=6,i=?0\r\nage: 3204\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a9967ea-4b25\"\r\ncf-ray: a35e6fdf9bfb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19237,"size_decoded":19425,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"a173b19ec5edbfe2f9dbef35c691be85","sha1":"7bf5f15020a3a752d4beff49480c3f07273e3349","sha256":"65bd8be546c8fb45d8b6694b6c0658c46265216bce7974b0ff443abc0ed7e502","sha512":"296372d46f94c9eea6b507837f99805f3664237d21df5034778a819047ef3c79e226ffc76f8fcc882a96bb2175b2a527d31e160d00810a9f6a8fee1f208eea92","ssdeep":"384:7BGMI+PSBcmbLF9ofmPAlcDxOJNwFVPu7PoVLm+SCTE:QMjPqcmPFSfmC4M7I2kI","tlshash":"bc82bf0cc8e2e523916c512e3453cb7520c1eae84883e3d4539ba7c2b2dba9dc321b7d","first_seen":"2026-09-04T15:48:45.644259Z","last_seen":"2026-09-04T16:49:44.345949Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/assets/ty-99bda379.png","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:37.968Z","timestamp":1788540037968,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /assets/ty-99bda379.png HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Sep 2026 12:28:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9967f8-c2c\"\r\nexpires: Sun, 04 Oct 2026 15:47:17 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ymxULyGs27%2FBbMEFyvlJqaAnNM2NMxUk2nCeZxjzPbkDhr0U0HTasyE8GYCf2BCvblrzaEsVdtctWoCvK%2Fpwf8FzX%2FkNYYNV4Yi0DDMlcZtvkKGHL7La0dr0%2FgId%2Bw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a35e6fe54cc523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3116,"size_decoded":3844,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"f299aca307e4ccd4a153f30c0d533ec6","sha1":"28ed5ee0be6d9853079d64549042e7d88163326a","sha256":"99bda37903ab83c723058cdd19a112396a11ff13e4422dd0c8b974a14b4dce30","sha512":"cd3a7679cbb534e33f9789770644895dde12bad1d010cc9a3215368290001190dfaf6059b4c6b10e7da88307d102f2ef5ade92f6c7f2f14baad561f8cb309104","ssdeep":"","tlshash":"24513cb6696644a18dc24ae2f8dcba65f1234400ac177f0940e72fe613d0be34b7729b","first_seen":"2026-09-04T15:48:45.640043Z","last_seen":"2026-09-04T16:49:44.347154Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/type/defi_activity_type","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:37.970Z","timestamp":1788540037970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://web3amr.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:38 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3amr.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LzGiRuksw%2BN5hYC5et8cb7JgW4MWLYvRDOEmO6DL1R%2FimnIJ8TtRnPkXm2D3LF6id6J7DBMG3PWCwVd%2BMo7ggRrvQJM1DAiUcFnx8hiExMVsZ%2B%2BcpSHZ0pwB5yDjbH9LWnz3avt6OHuF2dc%3D\"}]}\r\ncf-ray: a35e6fe55c2f0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":920,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T16:40:35.391Z","timestamp":1788540035391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:35 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 03 Sep 2026 12:28:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mhqelWC2I%2BQjyXeuDyMV0FdWWuTarao8k%2BadAs4DSJ%2B2zjpytZQ6LkVxCNGa4eJ4tpBP6KPaQUrDq42sAg13OfRLj8HWOEj09TfAkVONZakejRkegBcXTP8F5AQh9A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a35e6fd56a9923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5076,"size_decoded":2615,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1102)","md5":"a14df55765c6fca23118929e8ed1a5b4","sha1":"35956b5b38784c0ce6a5ea6f9605235e4b626650","sha256":"eb4d2e3aceddea0391110ad5aff9d8151b45f923dbcaf4278f83e6ff840a0746","sha512":"38eddc8a44283f5b7802c19661eccbd4ecc6b90d054311453e92e9d7c567922b27e0906f39d15dca2e1e2081760a07d0661cdd4eb4219f17d311adea961fa7e1","ssdeep":"96:Tr82uu5yKu1OtIu3mnM/s0r6TCZydHRH/gY2mUsGKYiwwGpuB1niHpiH4H/w:TFnlIj2ZCxfB2nf/zbpuB1niJiYfw","tlshash":"2aa153b76df4c42b53a6052babdbf0049e925197851e5850b0cd90ed8fd0fd9c8dbba0","first_seen":"2026-09-04T15:48:45.637667Z","last_seen":"2026-09-04T16:49:44.348325Z","times_seen":3,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":0,"dns":7,"connect":21,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/assets/index-6f44b6e5.js","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:36.001Z","timestamp":1788540036001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /assets/index-6f44b6e5.js HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 12:28:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9967f8-19645\"\r\nexpires: Sat, 05 Sep 2026 03:47:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3205\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wETWIe89mD98R6ZKgBXVNFt974p4B6%2ByjwKvCahug5n1j5zL%2BgLxQvuCTV5EoqiSWGJj9wpX6uISjiXqPpnuPHVXww2OxslOBs%2F1tK6uTB2JK6Q%2B5zxhl46ELC6UGw%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e6fd90b1323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104005,"size_decoded":30133,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"357857f6d29724c1292f3ddc62173a7e","sha1":"0a2c599a4f7dd763b00812e377aa0f3349b817c6","sha256":"bcb5e56b533e4e52ebe2279701cf224f26179a1e2b67d268ef811c221ac112c8","sha512":"6b84ac71564c515f25d4da3fbde2fbe2b1be67fb135c46a3199b4669e801b6d8d54c987e7b580ce30b2bc96ce5e1e2c0da6335647efb1e84ec2f0f915b20b902","ssdeep":"1536:jCsOvqzAYx0Irt4FL6jGIzGfDBPitNioRzLI+S48jiO:2LizAYx0IXzGL/oRzL/u","tlshash":"92a35ccea6064dff5cbe4804ad5b851011691f8358cccc53bb7eae4a27facd4635a718","first_seen":"2026-09-04T15:48:45.638963Z","last_seen":"2026-09-04T16:49:44.338404Z","times_seen":3,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/assets/vendor-8c267198.css","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:36.004Z","timestamp":1788540036004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /assets/vendor-8c267198.css HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Sep 2026 12:28:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9967f8-16c1e\"\r\nexpires: Sat, 05 Sep 2026 03:47:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3205\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1NlJdKf1%2F%2FnVU5Jy%2BV%2BhDRta21eol8UwwUYr9Gm5AZlnWvNk%2F6Tm5eZsFF%2B0%2BEesy0l5tKJarLIECK%2BE6SgrvZsQLPeREdzEpFJ1pgiQ3%2BqMQAtVzimoSZP%2FK33jA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e6fd90b1623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93214,"size_decoded":38558,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"509f1a66e8ad59bd27f081062f603f10","sha1":"323e5b51ac955ca843a2669bcee4ba00cde496c8","sha256":"8c267198fe044786df26943e5e5a048895118d991e8da41a16605df914fbcca4","sha512":"ce9dcd5836d4aa80a321213612d6aeeea98f0be7d2619818051e47c2a6729759044754796239ba08203b119fa3bfdb9920466fa924aca73894a1eaec0345dba6","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/zb:BnNIClDsIxuVS8nb","tlshash":"5e93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-07T20:44:36.433732Z","last_seen":"2026-09-04T16:49:44.353036Z","times_seen":103,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/platform/web3phantom/config.js?1788540036271","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:36.274Z","timestamp":1788540036274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /platform/web3phantom/config.js?1788540036271 HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:36 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14KLivey8UKcK8Y0E1CGb7KBMo6CwlkxoIGd%2FeBqs7QINui%2B6kClrJbpDKgcAOJYKyP6upd3vPaqfWdZGd5X5yM%2Bk4wIjkX58dWWtKnxdm6HE7gwEnErNRcYiXj8Bg%3D%3D\"}]}\r\nlast-modified: Thu, 03 Sep 2026 12:28:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 05 Sep 2026 04:40:36 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a9967ea-17e\"\r\ncf-ray: a35e6fdabb5023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382,"size_decoded":1042,"mime_type":"application/javascript","magic":"ASCII text","md5":"27600fc9cbd29afa8fe138176dabb7c8","sha1":"c9a8529ba33197e7ee6ce5f8ad73ec4770aaea1c","sha256":"c8a97674479c3c3f7ad7fbeeab81d44b397be3014040a8eda0aca3e534cb82cd","sha512":"54b4b8ddb41ece15beb5379bc9f76708f1e73ddc8bc6d01bf14c21ec2c87f0d7364457d0504e933fe6004b689d41e42692a2bcbca7f65c80e728edbd4d55ddd4","ssdeep":"","tlshash":"f1e068f7737cd0249580562a29e9186ff2c361725c9c2a2ef8c9a20fde4dd5861bc151","first_seen":"2026-09-04T15:48:45.643346Z","last_seen":"2026-09-04T16:49:44.35812Z","times_seen":3,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/getAllSetting","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:36.490Z","timestamp":1788540036490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://web3amr.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:37 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3amr.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jLdn5%2BRNdCKz3bV8iL0D1reJYew%2B%2FQGICkSFrvWKYn%2BJ4HLaddKM%2BjVdFNxBQ1Ke%2BqPp1gEsrrfBJWIsyTaNb5z%2Bit7TkgbpErVKhgzBmT8ORAmhoT8ymlBBQBrzNJ8an%2BAJKrezpQa2qY%3D\"}]}\r\ncf-ray: a35e6fdc9a990883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":916,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":910,"timings":{"blocked":-1,"dns":58,"connect":21,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.web3phantomapi.cc/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.web3phantomapi.cc","domain":"web3phantomapi.cc","tld":"cc"},"ip":{"addr":"172.67.184.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:37.706Z","timestamp":1788540037706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3phantomapi.cc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 06:17:24 GMT","end":"Wed, 11 Nov 2026 06:17:23 GMT"},"fingerprint":{"sha1":"0A:85:02:C4:5A:BB:FA:69:9D:FA:E6:B7:8A:A0:17:FD:B2:82:9E:BF","sha256":"E9:9F:11:79:C1:13:0F:41:0A:B1:EF:0E:71:5D:AD:36:A7:E5:A1:F6:A0:41:9D:90:E5:8B:EB:99:48:CE:37:D2"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.web3phantomapi.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://web3amr.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:37 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://web3amr.org\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZqrqxy8uuXAdAkys0ifaZ2lNOkGrFe4VzWud%2F0Kxq8Fal6cdX6V3O6gpYphIS%2FJfQ4XswAXrw%2BVHU%2BUmC%2FDdPdJY%2FKg069fOFj3NazrzM778%2F0Om%2F1WJc9z6CC9y5I2fOAzJuMAJwhgwAI%3D\"}]}\r\ncf-ray: a35e6fe3abc20883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":916,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"h5-api.web3phantomapi.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/assets/en-2195630e.js","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:37.910Z","timestamp":1788540037910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /assets/en-2195630e.js HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Sep 2026 12:28:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9967f8-900e\"\r\nexpires: Sat, 05 Sep 2026 03:47:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJESXiVrY5vrLk4ByQdskVSs2NvKAa47J3l5VMWSoyg7bMbnfwKowre93DuHToWpD8Nuh0sng4%2BrPwaHIZfBAXLM4nwSUeF3g6d1Y%2FpVNcrG9tdJWRjt0vOdv2CcmQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a35e6fe4fc9b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36878,"size_decoded":12509,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (36859)","md5":"e1620a216fe0177607c47a96304b2ce8","sha1":"750279fe97fa7aa9b9286a1465f93f6d1969dc1a","sha256":"afece0bbbcb273e4f32f395fb41376bc8d8dd3d95c9ad38ca6b19cdc8ff33893","sha512":"bb11ef4948e3d37f691e8b3f3d112d50e2dad6f5a8e32a4a3b97858cfc5b769ffef33960d15c6e35f2be2f4e74772a5f87067b5b6c713a97f91d0851149fe3bd","ssdeep":"768:KGtZcEw/o7rWOvAFsifnAhC2rAaAMFVoP6+6svGnu8clw1mwO6fpk7aOC:uponWOvebB2rdFVLsvX8iwqC","tlshash":"0df2d6ce7e16889a04f35377b4ce5e6021f609c18255880e4fedc5fd83a2b67a367a74","first_seen":"2026-09-04T15:48:45.636528Z","last_seen":"2026-09-04T16:49:44.359092Z","times_seen":3,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/assets/index-70785e56.css","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:36.005Z","timestamp":1788540036005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /assets/index-70785e56.css HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Sep 2026 12:28:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9967f8-4ce19\"\r\nexpires: Sat, 05 Sep 2026 03:47:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3205\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tjAakopUVBgVCdHqUmG63YxRzs4APu%2FJUk20YM1y2fvMuviNzgTrJGfuBJH20%2BnggulhjPTbgIeSf0HXFxDsZqhysyIum8zZsDlg%2BLTJxPlpjK0rus37gdNiEiReyQ%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a35e6fd90b1823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314905,"size_decoded":68064,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"34b03ca5dba29212730c3be2d7a7a258","sha1":"2a4d25c91acacb9d97e6bc62ea37fada64553fb1","sha256":"70785e56cdbc789ebe1d81806fbcd4344a0eb5c4412cba5d1d666a8086e5c112","sha512":"766fca00175d4e45f53e0f94e2d651c5f570c40b9f7d0762dd1bad5067b1d6d0006233c20ab3f76201d4295211729c7fca5e9062e6c38bc848ab1b6045abc5bb","ssdeep":"6144:nh/xsazFsiWkZ8w71ZACkFDS3vyf58rBeV05T3:h/12ijZ8w71ZACkFDS3vyf58rBeV05T3","tlshash":"a164e999a590117c6f27aa799bce5ad8f23ce5719c018de8f201200a4fc7ff91367627","first_seen":"2026-09-04T15:48:45.646238Z","last_seen":"2026-09-04T16:49:44.35401Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web3amr.org/platform/web3phantom/logo_144.png?2.0.1788409721416","fqdn":"web3amr.org","domain":"web3amr.org","tld":"org"},"ip":{"addr":"172.67.168.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web3amr.org/","date":"2026-09-04T16:40:37.055Z","timestamp":1788540037055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3amr.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 15:24:00 GMT","end":"Wed, 11 Nov 2026 15:23:59 GMT"},"fingerprint":{"sha1":"71:14:5F:5B:74:18:0E:DE:2C:3E:4C:62:2A:B3:F0:EA:90:89:E9:2D","sha256":"06:E2:F6:70:25:9D:85:C0:B7:E2:37:71:D1:59:BC:7D:0D:CC:32:15:05:BE:77:D6:7A:10:58:AA:A0:48:5D:C8"}}},"request":{"raw":"GET /platform/web3phantom/logo_144.png?2.0.1788409721416 HTTP/1.1\r\nHost: web3amr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 16:40:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 03 Sep 2026 12:28:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a9967ea-1c61d\"\r\nexpires: Sun, 04 Oct 2026 15:47:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 3204\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4AoEJkId4P3c8QvXzS94U54b68P8mGuRLDBD%2BRBanMfgXH4p2IWVoqil9yIs3ckRG8X2%2F0%2FFrxun6r0OUAPNzMXD3sXsSIDW0zrRd%2B1xSITPGEfWDU9SC7OPhPQwew%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a35e6fdf9bfa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116253,"size_decoded":112355,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"334185cd0ca35d71ce8f61183e0089ce","sha1":"a3f9990734a75faa721a8efee264850599d6c215","sha256":"41cdd2275e3c004d371acbacaf4398ae18de2166c2f7d4001288b2b4fed3c4ba","sha512":"8d10a20448348363f69d9d7b7867f7b544abe7bb72d7243d023be8e01256edf7651b408275ed76a62f78b9e685bc0028d0fa07d36f056774fa39c677d9cabe9c","ssdeep":"3072:OEJqPa5ce+RASAcJsG+ZHn+Gk723wShQO9gzyv5M:9+akRScJVGBwShkzg5M","tlshash":"a3b3e077c717452a0d472ef4a07f8e5995c49d805a22e9225bbd4488f622bccbf37acc","first_seen":"2026-09-04T15:48:45.647353Z","last_seen":"2026-09-04T16:49:44.352067Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
