{"report_id":"8d0ba383-221a-43cf-872e-a90764c909d6","version":6,"status":"done","tags":[],"date":"2026-05-11T12:36:20Z","url":{"schema":"http","addr":"cryptoweb3pro.com","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"172.67.179.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cryptoweb3pro.com/#/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"title":"cryptoweb3","dom":{"size":6452,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2429)","md5":"95b718b07f089a39fbb8ecb2703bbb1a","sha1":"ba57bb0b05f89ae82bb52141284ee381b886f8f0","sha256":"497f996ea7c65260939a6aac1ef5029f299d0f9ed77627fdb2b32eeafe6e19ff","sha512":"a7e1b25a57e7b726113c5c12627083809c15b921f9b3bc0aff5773c5a9e07e2d4dde83eb054cff0349555b9bbcfe49171624751dd37bd182235c03b40092f052","ssdeep":"96:er85MaprCuj7SF2Qdxt/VuzD+CZydHRH/9J2mUsGKAiowGCdB1nPEPHIPEPHeH/w:e1aT7KBgZCxfj2nfD3bCdB1nYoY+fw","tlshash":"afd164b77ca4d42e13614716fee2f804aea1564684199960b2de40f85bd4fe288c7f3e","dom_hash":"domhash234501b710bf8b821d6dbc48fd350c45","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cryptoweb3pro.com","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"172.67.179.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-15T12:36:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"webapi.cryptoweb3pro.com","ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-17","domain_rank":0,"first_seen":"2026-05-11T12:36:21.662635Z","last_seen":"2026-05-11T12:36:21.662635Z","alert_count":20,"request_count":10,"received_data":8733,"sent_data":5844,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cryptoweb3pro.com","ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-17","domain_rank":0,"first_seen":"2026-05-11T12:36:21.664944Z","last_seen":"2026-05-11T12:36:21.664944Z","alert_count":50,"request_count":25,"received_data":2386658,"sent_data":11411,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cryptoweb3pro.com/#/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"3909b073ead7dbc3d10023cf6336903e","sha1":"f9c1172685620881b482cb5582ab2f78ec51782c","sha256":"cab4aeaee24247015e08bf50b1fa6c55be2a1a15498261733119bef265b09f6a","sha512":"8b7302c5e37c52a9c53d2e501e95a983258d1eb786f31a5f769cebcecae289667dc5c5abdbecf215e780a3ef52467bb60e1cd07954b792680940d5ff25db9790","ssdeep":"","tlshash":"405000000c000000003c0000000c00030000cc33030000f0c0000c0c0c0000003ccc00","size":10,"data":"","first_seen":"2023-04-12T19:36:05Z","last_seen":"2026-05-20T17:55:54.769404Z","times_seen":2103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/#/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"3909b073ead7dbc3d10023cf6336903e","sha1":"f9c1172685620881b482cb5582ab2f78ec51782c","sha256":"cab4aeaee24247015e08bf50b1fa6c55be2a1a15498261733119bef265b09f6a","sha512":"8b7302c5e37c52a9c53d2e501e95a983258d1eb786f31a5f769cebcecae289667dc5c5abdbecf215e780a3ef52467bb60e1cd07954b792680940d5ff25db9790","ssdeep":"","tlshash":"405000000c000000003c0000000c00030000cc33030000f0c0000c0c0c0000003ccc00","size":10,"data":"","first_seen":"2023-04-12T19:36:05Z","last_seen":"2026-05-20T17:55:54.769404Z","times_seen":2103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/#/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"3909b073ead7dbc3d10023cf6336903e","sha1":"f9c1172685620881b482cb5582ab2f78ec51782c","sha256":"cab4aeaee24247015e08bf50b1fa6c55be2a1a15498261733119bef265b09f6a","sha512":"8b7302c5e37c52a9c53d2e501e95a983258d1eb786f31a5f769cebcecae289667dc5c5abdbecf215e780a3ef52467bb60e1cd07954b792680940d5ff25db9790","ssdeep":"","tlshash":"405000000c000000003c0000000c00030000cc33030000f0c0000c0c0c0000003ccc00","size":10,"data":"","first_seen":"2023-04-12T19:36:05Z","last_seen":"2026-05-20T17:55:54.769404Z","times_seen":2103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5eb9c39340b200dfd4e07d4313a20864","sha1":"844c379dee26a455fe977907c7e098832476333d","sha256":"58722f9bdbed3cc8b2e596d26a32e2bc1b44b9d35a91926031437e16c1cc03d4","sha512":"0c71bc5b3e206475b20e0db82e5403291e0835cf402e4f146d27b8ced04da27e2c58f043d49a60adb6ab23f3ce9f0860fd5f99021b2515be0f7f29b4e7658f3a","ssdeep":"","tlshash":"5c11abfe191a602e6303404e976b7801643250f9001a185177cc9a9dbb9abbdd0cfb8c","size":1048,"data":"","first_seen":"2026-05-11T12:36:28.44527Z","last_seen":"2026-05-11T12:38:44.007209Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/currencyItem-R4vfPicV.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7d8467885d543bfcc08f9ec74f8a3d6a","sha1":"1503eb551ce1d74106e7a04c8a5042607e5efbf4","sha256":"420094bbf26e5ea0761e95e8533a3a6a85b57bd1cf0ffb24fcbf82fd9d4e4880","sha512":"f7ee87eef272bc2f59ed29a2c56a9b486db0b465e1406dea13420b2f1c73ccf828f10e4ffd354f95ea84fc0c0338868a44c9cfeff0e758bc62a40413ffc2bdfd","ssdeep":"","tlshash":"eb219d8a9e56cfb1d6ff9462847d4804161e7fcaf01145c5faee14883b479bcd728a31","size":1233,"data":"","first_seen":"2026-05-11T12:36:28.41271Z","last_seen":"2026-05-11T12:38:43.989193Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-BpHoCjZx.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64f9a5046bd3286e166d08668348fd72","sha1":"f2936957a938311d28490e3c4f3a6fafab4426c7","sha256":"a54fc902c09d1a403adb1ef3a1674c376713559a6b99956b2ea19286c4f3e604","sha512":"cd177f1c319dec53ebd50746135982e2a63838a47de4a7a78c3594060dbcd477c02b9c42fab1d20274d3ff53a81cf8710430c0555a107909291cb2bbfa2887d0","ssdeep":"12288:xxGde6rX78MwsSyalX4CEw2sB7rCasMXkCWvr3Y3U9jQErE:5GLw3b4sB7TsmkCWvr3YkI","tlshash":"ba154bc97692f06147ab10e250bb0002f3396e59744e84a4f169d8eb7eb9d89d277f3c","size":948735,"data":"","first_seen":"2026-05-11T12:36:28.440845Z","last_seen":"2026-05-11T12:38:43.987459Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/filters-kA4bJVa-.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e079d58ece7e9eb43131cc7d857887d6","sha1":"fe4852546ec0640323e2126fc16e1ce422f3cc24","sha256":"32205c7360786115eb69a714cb8315b68dc3c20091e68bd99a0b00f78b1a73c7","sha512":"404d13acf534a0f61d3f989e84c231af09314b62d542a426e53285052bd1625b47b6dc171a21512e667b1c5bc16c52da9be86c8534c6c3e2fd7db890ae4fafab","ssdeep":"","tlshash":"da5141fdf8d3a13352ea9df940188511728eae10686e4b4ef54bd0466a33888d07b764","size":3142,"data":"","first_seen":"2026-05-11T12:36:28.421819Z","last_seen":"2026-05-11T12:38:43.984408Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/#/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"3909b073ead7dbc3d10023cf6336903e","sha1":"f9c1172685620881b482cb5582ab2f78ec51782c","sha256":"cab4aeaee24247015e08bf50b1fa6c55be2a1a15498261733119bef265b09f6a","sha512":"8b7302c5e37c52a9c53d2e501e95a983258d1eb786f31a5f769cebcecae289667dc5c5abdbecf215e780a3ef52467bb60e1cd07954b792680940d5ff25db9790","ssdeep":"","tlshash":"405000000c000000003c0000000c00030000cc33030000f0c0000c0c0c0000003ccc00","size":10,"data":"","first_seen":"2023-04-12T19:36:05Z","last_seen":"2026-05-20T17:55:54.769404Z","times_seen":2103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-1yJUv2Y6.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c32e6696705be8c6d0fd245423925d61","sha1":"5d1d7cf0e3760f1dffdd05457197599c25784d25","sha256":"5186f22841fd2b634330e7962760d4a24d7ba0d614abe32e6165c5e582283c11","sha512":"76063cbef06de669be499b3ca9f81e4bd010e203cc0b251b4bfd81cb1f447d1602bc43a5e43944017f278a5a585274a1a5ddf1baf18501aa54937bd7a2b0139f","ssdeep":"","tlshash":"c801f1f9fc6c8fbb2eb3051511816a00100a0fedfd2019d598577e652bf1c408a8eb1c","size":820,"data":"","first_seen":"2026-05-11T12:36:28.424847Z","last_seen":"2026-05-11T12:38:43.988306Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/charting_library/charting_library.min.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-05-19T13:29:08.730712Z","times_seen":500,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-05-20T17:34:50.403627Z","times_seen":34585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-05-20T17:34:50.405493Z","times_seen":37347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/#/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5ef777763fcb4cd204f9d7cbaf32887e","sha1":"361874a04da45748824d8bcdec1afe436f4240b1","sha256":"c0db56b48647a4b73f597454774fe03c02d956100dbd3663c7442b711a691054","sha512":"5f1cd679e2f8e1370c88edb72ec885fe5ad2794f549997ca60f8a8d14f1a31806cd003249991e1e35aecdc05ff2dde662502b002e6d66b17f4604375110320ec","ssdeep":"","tlshash":"2ce0abfb3179c17054909a1a1cec542bf2eb65734c9c0a1ae584aa151e4dd78217c090","size":408,"data":"","first_seen":"2025-03-02T13:24:55.299758Z","last_seen":"2026-05-18T21:31:53.580956Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-Da-QeLk9.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5fd0fb2c1db956c2cec97dc22018f3ca","sha1":"b1aa4a0e9e91f3b59662e10c9ee02d689fb3c777","sha256":"32d1ef93f2d110034768af0f4afc00e3a44c5b5ef31ffd6f06682b00c20f7ece","sha512":"c2e97ec5feb41b98ce5c7ee6504a5cbb876aa6dd8f056fe41d77db3964781af7f2b8a8d4a73aea58d3b31be030cb9c7dd1efa6ce31f52382df9c5540f5d56a37","ssdeep":"","tlshash":"a331794898b588b9b676c86a35962760163e73fbf36a00c5b19c4334c36fcb4f51e524","size":1511,"data":"","first_seen":"2026-05-11T12:36:28.407631Z","last_seen":"2026-05-11T12:38:44.005484Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-Ct4x_lr4.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7eac49f5921620b26c50f2fa5e83a980","sha1":"92da01efa39a02f4af252029598f468b36887cdd","sha256":"5dd44544777b0d284be8c863114aae8290174597c49c2dff4d76181b8e64429a","sha512":"bbd98636eecf8a2f2bef42fc950037d98839127ce0288422b192b027e277428952ac8d82776baf2b155a60b64a6b4be9e218af1007e8f9938674318d82a23ff6","ssdeep":"","tlshash":"e381878cfc0549baeeb3655058184410365c3ba6f11d48f6f6fedd06b3b58b9ea04715","size":4004,"data":"","first_seen":"2026-05-11T12:36:28.410062Z","last_seen":"2026-05-11T12:38:43.985334Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-D8SYkcxw.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"186637a72642fbb58617c5c69204d658","sha1":"d877a12b143b45bc67403f516b0d18092f1a6a88","sha256":"1de63fbfdf34e9444654c63f035bdc010a99af82665dab151bba33d5efdc914e","sha512":"8a8f952f699b4f8787630b26b6e09f8e8f244975eed1635be922bc2750a9762c1b5c3b1d2f8f6f116d681828601935416dd178dca27b00e08cb172437452ce87","ssdeep":"384:x7SRVnFdb4CO9W1VFoLXNfJtZfYCnJjwCWjZDf8SCGQ8NjyO:BSRVnFWi94XNfJbqZDf8SCGQlO","tlshash":"0562d899b442aa3cf6fb90914048085077397fde900989b2f5bebc472762efcf759614","size":15500,"data":"","first_seen":"2026-05-11T12:36:28.435157Z","last_seen":"2026-05-11T12:38:44.004692Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/#/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"3909b073ead7dbc3d10023cf6336903e","sha1":"f9c1172685620881b482cb5582ab2f78ec51782c","sha256":"cab4aeaee24247015e08bf50b1fa6c55be2a1a15498261733119bef265b09f6a","sha512":"8b7302c5e37c52a9c53d2e501e95a983258d1eb786f31a5f769cebcecae289667dc5c5abdbecf215e780a3ef52467bb60e1cd07954b792680940d5ff25db9790","ssdeep":"","tlshash":"405000000c000000003c0000000c00030000cc33030000f0c0000c0c0c0000003ccc00","size":10,"data":"","first_seen":"2023-04-12T19:36:05Z","last_seen":"2026-05-20T17:55:54.769404Z","times_seen":2103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/#/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"3909b073ead7dbc3d10023cf6336903e","sha1":"f9c1172685620881b482cb5582ab2f78ec51782c","sha256":"cab4aeaee24247015e08bf50b1fa6c55be2a1a15498261733119bef265b09f6a","sha512":"8b7302c5e37c52a9c53d2e501e95a983258d1eb786f31a5f769cebcecae289667dc5c5abdbecf215e780a3ef52467bb60e1cd07954b792680940d5ff25db9790","ssdeep":"","tlshash":"405000000c000000003c0000000c00030000cc33030000f0c0000c0c0c0000003ccc00","size":10,"data":"","first_seen":"2023-04-12T19:36:05Z","last_seen":"2026-05-20T17:55:54.769404Z","times_seen":2103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/#/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"3909b073ead7dbc3d10023cf6336903e","sha1":"f9c1172685620881b482cb5582ab2f78ec51782c","sha256":"cab4aeaee24247015e08bf50b1fa6c55be2a1a15498261733119bef265b09f6a","sha512":"8b7302c5e37c52a9c53d2e501e95a983258d1eb786f31a5f769cebcecae289667dc5c5abdbecf215e780a3ef52467bb60e1cd07954b792680940d5ff25db9790","ssdeep":"","tlshash":"405000000c000000003c0000000c00030000cc33030000f0c0000c0c0c0000003ccc00","size":10,"data":"","first_seen":"2023-04-12T19:36:05Z","last_seen":"2026-05-20T17:55:54.769404Z","times_seen":2103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-BkGh6s6X.css","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-BkGh6s6X.css HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"697ccfd8-18d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ni%2BrOVmF3%2FzTOIj0RUHLIAA%2B8BbJrLBM7%2FiqlVnocSNJwMni1rTFQs2oWcA%2B95ZVNXxyToM%2FUCpvK9buXITGfCLQ2igVNSGJcXqJKZ%2BR7yDXJMQjK0tmgs3JEzRuG6t%2FphdoGA%3D%3D\"}]}\r\ncf-ray: 9fa13a112c3d1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-05-20T11:21:40.089012Z","times_seen":680,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-Da-QeLk9.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-Da-QeLk9.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-5e7\"\r\nset-cookie: server_name_session=256530a5bd3be24275a9619cced87ef5; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8OUsuFSOmJaDIQ8IM9U%2Bh%2FE%2FyJ5Hl%2BOnT2obxuQeJDEaFQj%2FGska379etvWIuELqXxS0Nvpp0nvLW6eudURLl8SA5CpjtlhlNeqefKY0YOIJAuRl0%2BwzzETRmuTWxx7ehBVVyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a113c431a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1511,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1467)","md5":"5fd0fb2c1db956c2cec97dc22018f3ca","sha1":"b1aa4a0e9e91f3b59662e10c9ee02d689fb3c777","sha256":"32d1ef93f2d110034768af0f4afc00e3a44c5b5ef31ffd6f06682b00c20f7ece","sha512":"c2e97ec5feb41b98ce5c7ee6504a5cbb876aa6dd8f056fe41d77db3964781af7f2b8a8d4a73aea58d3b31be030cb9c7dd1efa6ce31f52382df9c5540f5d56a37","ssdeep":"","tlshash":"a331794898b588b9b676c86a35962760163e73fbf36a00c5b19c4334c36fcb4f51e524","first_seen":"2026-05-11T12:36:28.407631Z","last_seen":"2026-05-11T12:38:44.005484Z","times_seen":2,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-Ct4x_lr4.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-Ct4x_lr4.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-fa4\"\r\nset-cookie: server_name_session=a721323c109be6186e529a95a317662a; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVapqc9wNZaICLsR3KijPUsORNlW3JeTGpW4Rxw2FV3uBTeIhoUJhV3ficYOIS8fBEsptMhABhBY4NilLwHhZbPT8PruwrMzAZrHAvapF8nDbuSO3eoqLiGr6nAfuQPBvoQpDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a113c421a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4004,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3956)","md5":"7eac49f5921620b26c50f2fa5e83a980","sha1":"92da01efa39a02f4af252029598f468b36887cdd","sha256":"5dd44544777b0d284be8c863114aae8290174597c49c2dff4d76181b8e64429a","sha512":"bbd98636eecf8a2f2bef42fc950037d98839127ce0288422b192b027e277428952ac8d82776baf2b155a60b64a6b4be9e218af1007e8f9938674318d82a23ff6","ssdeep":"","tlshash":"e381878cfc0549baeeb3655058184410365c3ba6f11d48f6f6fedd06b3b58b9ea04715","first_seen":"2026-05-11T12:36:28.410062Z","last_seen":"2026-05-11T12:38:43.985334Z","times_seen":2,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/currencyItem-R4vfPicV.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/currencyItem-R4vfPicV.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-4d1\"\r\nset-cookie: server_name_session=ee3593bcc0082facd20ec2e3fdeadcc3; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5IVRH%2F0JcdfrBXDV1BuB17yGlmcosNmjcfegBkltUNZTOmxIgw3D%2F5EFaCRAG%2B0QgJ6MKW83ItdRtbPTWztxxbXgNGKcez1hOde%2FkdTKOetLBgqnof36MAjKYm6YcdpAvkVZWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a113c461a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1233,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1182)","md5":"7d8467885d543bfcc08f9ec74f8a3d6a","sha1":"1503eb551ce1d74106e7a04c8a5042607e5efbf4","sha256":"420094bbf26e5ea0761e95e8533a3a6a85b57bd1cf0ffb24fcbf82fd9d4e4880","sha512":"f7ee87eef272bc2f59ed29a2c56a9b486db0b465e1406dea13420b2f1c73ccf828f10e4ffd354f95ea84fc0c0338868a44c9cfeff0e758bc62a40413ffc2bdfd","ssdeep":"","tlshash":"eb219d8a9e56cfb1d6ff9462847d4804161e7fcaf01145c5faee14883b479bcd728a31","first_seen":"2026-05-11T12:36:28.41271Z","last_seen":"2026-05-11T12:38:43.989193Z","times_seen":2,"resource_available":true,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-11T12:35:58.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 12:35:58 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=73ef8524995298220ba2663fbcd74583; Max-Age=86400; httponly; path=/\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGZEbO5HrGoIaEfhpfdW%2FY1oZ%2FwOMy2U%2BUPcGfIY%2BS7sxUvKmAT5tvRbPMuCuG%2By4nMW0%2Bfv9TM5JhIvJL%2F24qy3wO%2BLRPsd1iOC4Wy59kVUrDQDAJEyrWhvLEJNv3Po5lkGwA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9fa13a01accb4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5103,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"6cfabf5f2d60e7ae9daa4b8ecb5d13b5","sha1":"44e51e37a5990bf39db62f262f56cae0a6a8c374","sha256":"b9cb50450e99533fc20ba23f1d43260cb2cbfb3c0c01664f4463792e40ac373b","sha512":"ec3bc4c1cb78d7464cfaf7c491f1118d522d35fc4f78f74c34099a41f47fec676469e7fe87de803fd593ebd4a441ec7abd22c2e60000d9f1ce88efb81f208869","ssdeep":"96:Tr82N5yKuc67Urkyt/qnzD+CZydHRH/gJ2mUsGKAiowGbuB1niHIiHeH/w:TFNL67+wZCxfE2nfD3bbuB1nioi+fw","tlshash":"f7b140b76db4d82a23a2053beae7f0089b611193852d585876cc40ed4fd4fe584cbbb4","first_seen":"2026-05-11T12:36:28.415343Z","last_seen":"2026-05-11T12:38:43.98656Z","times_seen":2,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":22,"dns":0,"connect":1,"send":0,"wait":645,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/charting_library/charting_library.min.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:35:59.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:35:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfcc-2a6a\"\r\nexpires: Tue, 12 May 2026 00:35:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=narqt%2BHsmwcVK3ZaCo2zfvkXuPReoBCx92cHrgxsqOpq2x0XPJ4RNCIC2vU%2BQ1CrotOrdoTTmCj3B%2Bqzrf2zMYQYjM%2F0NggBlFfgCmpTMoD2KOUrnlSVTcAMj8VOOUvdPg%2BHhQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a069ad71a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-05-19T13:29:08.730712Z","times_seen":500,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/resource/fonts/Arial.ttf","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptoweb3pro.com/assets/index-DIKcFZCe.css\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:00 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Fri, 30 Jan 2026 15:35:40 GMT\r\netag: \"697ccfcc-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=1\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DZ2m2cxv0aTLpp0tIj4PnCEKGzR1ZvedQ6vo4jhM%2FLYd%2BfBgrOCtyzh3RiZwmJV5lHJIq4VqTSV%2F3NtcjKaYOZpS6MMRoN0dbszoxEnjK%2FBT8a51G9kgjcHyQHuCzQBmQlr9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9fa13a0d9bc81a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-05-20T16:26:26.43115Z","times_seen":1285,"resource_available":false,"data":null}},"time_used":1974,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":662,"receive":1312,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/filters-kA4bJVa-.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/filters-kA4bJVa-.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-c46\"\r\nset-cookie: server_name_session=864e50893c50c7cc00ae82422d252805; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 12 May 2026 00:36:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wd10NdwfdkKebT2hmAFvd3Vtt0waQiFFsCGJXmk2vYJGhqr88rtbSyouzXhAvkA6t7Jsw4RAH%2FwaCC6cqrwiZfLRZ5kEQk6GcjbOt3udk%2BNRHwUGfPlsx33wcPOxsg4sM7zrpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a113c441a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3142,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3096)","md5":"e079d58ece7e9eb43131cc7d857887d6","sha1":"fe4852546ec0640323e2126fc16e1ce422f3cc24","sha256":"32205c7360786115eb69a714cb8315b68dc3c20091e68bd99a0b00f78b1a73c7","sha512":"404d13acf534a0f61d3f989e84c231af09314b62d542a426e53285052bd1625b47b6dc171a21512e667b1c5bc16c52da9be86c8534c6c3e2fd7db890ae4fafab","ssdeep":"","tlshash":"da5141fdf8d3a13352ea9df940188511728eae10686e4b4ef54bd0466a33888d07b764","first_seen":"2026-05-11T12:36:28.421819Z","last_seen":"2026-05-11T12:38:43.984408Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-Da-QeLk9.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:01.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-Da-QeLk9.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-5e7\"\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SdSK0NH4SgA8ge0SE1zZboF0fXXh1qBelh4xtzpt1%2F%2BkCpCO659%2FOLwK85fQSR7TLHe9UrAH0vbipuR0Y2MeKrAopJ8mSnFuvlps9sbPp8BQ9kUWWeAh7bnuTdkpg8Rgi5bViA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a172d1b1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1511,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1467)","md5":"5fd0fb2c1db956c2cec97dc22018f3ca","sha1":"b1aa4a0e9e91f3b59662e10c9ee02d689fb3c777","sha256":"32d1ef93f2d110034768af0f4afc00e3a44c5b5ef31ffd6f06682b00c20f7ece","sha512":"c2e97ec5feb41b98ce5c7ee6504a5cbb876aa6dd8f056fe41d77db3964781af7f2b8a8d4a73aea58d3b31be030cb9c7dd1efa6ce31f52382df9c5540f5d56a37","ssdeep":"","tlshash":"a331794898b588b9b676c86a35962760163e73fbf36a00c5b19c4334c36fcb4f51e524","first_seen":"2026-05-11T12:36:28.407631Z","last_seen":"2026-05-11T12:38:44.005484Z","times_seen":2,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-1yJUv2Y6.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:01.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-1yJUv2Y6.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:02 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"697ccfd8-334\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgIWvjmKP7Hks6%2FFXBiCqjRAsAKvb6pBPyoocApVzROtz1bJJ3y1TFd6rLwg7dq125kX%2BqTne5dfElagr581IXCtIdPNf4BFVAbx3XCfU0CnGZ6BahaNQXkXMiucejWzTt4tcg%3D%3D\"}]}\r\ncf-ray: 9fa13a172d1f1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":820,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (776)","md5":"c32e6696705be8c6d0fd245423925d61","sha1":"5d1d7cf0e3760f1dffdd05457197599c25784d25","sha256":"5186f22841fd2b634330e7962760d4a24d7ba0d614abe32e6165c5e582283c11","sha512":"76063cbef06de669be499b3ca9f81e4bd010e203cc0b251b4bfd81cb1f447d1602bc43a5e43944017f278a5a585274a1a5ddf1baf18501aa54937bd7a2b0139f","ssdeep":"","tlshash":"c801f1f9fc6c8fbb2eb3051511816a00100a0fedfd2019d598577e652bf1c408a8eb1c","first_seen":"2026-05-11T12:36:28.424847Z","last_seen":"2026-05-11T12:38:43.988306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.cryptoweb3pro.com/ws/c4576dec-07a4-4b18-9f87-964a0d3444ce","fqdn":"webapi.cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:11.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /ws/c4576dec-07a4-4b18-9f87-964a0d3444ce HTTP/1.1\r\nHost: webapi.cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cryptoweb3pro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: dUKtK5ZNIfsDoVDLLUs6Bw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 11 May 2026 12:36:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6380\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VdxLXxBaK6IICeKe9Lix4iw7ptizXIx7QVgiKJ%2BLCVZ9yqsfO%2BsUPrdXdmVFkUS%2F6ERBX2ht8IuLRQRcHUsxyivIlLkyyhBPctBmUgUTfhC9SqP2xatgly2IJlyeVwAeNX6ZeaKgc7fUoX0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9fa13a541e0a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=622\u0026min_rtt=536\u0026rtt_var=244\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3203\u0026recv_bytes=1340\u0026delivery_rate=5369592\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=d67fc8350b7ff43d\u0026ts=722\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T17:56:14.330193Z","times_seen":15498331,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":697,"receive":2,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.cryptoweb3pro.com/ws/41ad552d-0f69-4d1c-8a7a-962722ae7ad4","fqdn":"webapi.cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"172.67.179.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /ws/41ad552d-0f69-4d1c-8a7a-962722ae7ad4 HTTP/1.1\r\nHost: webapi.cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cryptoweb3pro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: aQV/zvMxYu6k82UBcC7zKw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 11 May 2026 12:36:01 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6380\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BQ0outuM5YcoPk862mg1uknlrJC53P%2BQXfKhsBC8FUWN%2BwSCtH2CcvKwLJa840vfuaCNOpuJ%2Fpg2uPRh7o%2B4b8ZMjVfZVAHIUS9TuEenMtw5GoTcNFwWzigDB7IiRdX1qbmyP6S44vIg%2FaE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9fa13a117d7edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=580\u0026min_rtt=568\u0026rtt_var=139\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3129\u0026recv_bytes=1206\u0026delivery_rate=7121311\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=1d3da92d8aae4872\u0026ts=656\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T17:56:14.330193Z","times_seen":15498331,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":2,"dns":43,"connect":32,"send":0,"wait":646,"receive":2,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/platform/dev/logo_144.png?2.0.1769758552390","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:01.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1769758552390 HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 10 Nov 2024 09:12:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"673078ff-3855\"\r\nexpires: Wed, 10 Jun 2026 12:36:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=59V6wHvO7zW%2BBw%2BvlQHtnhT0Q0%2BIDAY7oKqpvu5lhkEY57P7JlO2EvpPv%2Fo7OVmsjf1X%2BEIWeWcZMS0WG16cKTnUannj3ZGfhG51VCLyFS5dId%2Fi67p5KT%2BoRneTmM4Bo71xbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a16ed101a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14421,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"181a97543d632527658cbda6c14acb32","sha1":"ee9ccc9bbc5f4032c99fe1896e7db8f0b2bdb377","sha256":"0e6f8e2d3f927c5ed8bd288dafa3f82a0f10bdba83f7348773c381e2f15a2ccc","sha512":"dbc4e65d7dfd8ed9c8815ceb414e26f1a2b02c6c501561e9fa6cc06997519f56215f54a554036743890e7df938ed81f97914d3987a01574ed78efc0bf6457e51","ssdeep":"192:WwYiB32JTitjwabRETOalsBUFG9C1EXpNSoUUqW5mlyc98fC8EtH9vkwPwM/4gF8:WwYkmgJbESByiemOKbmuwPwM/4Y8","tlshash":"3152df4f554b29b3e81b25319981f13de2529b037402b1d3dd3fb1469cf86898889e63","first_seen":"2025-03-02T13:24:55.272698Z","last_seen":"2026-05-11T12:38:43.983561Z","times_seen":4,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":951,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-Ct4x_lr4.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:01.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-Ct4x_lr4.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-fa4\"\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5IvWqMoZn4%2BcajqN93V97XXb9wfx4IvOjQS2ndwpxqahsNeaa9KcU3gY%2F08L27ter5Wvni%2FvKacJqEo2kXyfiHYqRyp4e7AM9K3EjjWGkWLcjXPX30PMX4tlK41qtiwbsNEd5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a172d1d1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4004,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3956)","md5":"7eac49f5921620b26c50f2fa5e83a980","sha1":"92da01efa39a02f4af252029598f468b36887cdd","sha256":"5dd44544777b0d284be8c863114aae8290174597c49c2dff4d76181b8e64429a","sha512":"bbd98636eecf8a2f2bef42fc950037d98839127ce0288422b192b027e277428952ac8d82776baf2b155a60b64a6b4be9e218af1007e8f9938674318d82a23ff6","ssdeep":"","tlshash":"e381878cfc0549baeeb3655058184410365c3ba6f11d48f6f6fedd06b3b58b9ea04715","first_seen":"2026-05-11T12:36:28.410062Z","last_seen":"2026-05-11T12:38:43.985334Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/currencyItem-R4vfPicV.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:01.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/currencyItem-R4vfPicV.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:02 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-4d1\"\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EODq1aiLVtSOSOniyZ%2FYv4BqB9VYPG%2FeiFa7DkzIF5Ob0Zda9ftGXLmfr%2FeX%2FBStUXiiwUfZSqAu18HwdgfabFd9JKa3NI5DX5id5mvdI6mbkg2g%2FKIxzNJIbYcX%2FfS4hbkj%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a172d1e1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1233,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1182)","md5":"7d8467885d543bfcc08f9ec74f8a3d6a","sha1":"1503eb551ce1d74106e7a04c8a5042607e5efbf4","sha256":"420094bbf26e5ea0761e95e8533a3a6a85b57bd1cf0ffb24fcbf82fd9d4e4880","sha512":"f7ee87eef272bc2f59ed29a2c56a9b486db0b465e1406dea13420b2f1c73ccf828f10e4ffd354f95ea84fc0c0338868a44c9cfeff0e758bc62a40413ffc2bdfd","ssdeep":"","tlshash":"eb219d8a9e56cfb1d6ff9462847d4804161e7fcaf01145c5faee14883b479bcd728a31","first_seen":"2026-05-11T12:36:28.41271Z","last_seen":"2026-05-11T12:38:43.989193Z","times_seen":2,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.cryptoweb3pro.com/ws/19db6b11-2c08-46be-9671-b8d4e4ad91b1","fqdn":"webapi.cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:01.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /ws/19db6b11-2c08-46be-9671-b8d4e4ad91b1 HTTP/1.1\r\nHost: webapi.cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cryptoweb3pro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: j41t0B7/84svnBLCzNamOA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 11 May 2026 12:36:02 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6380\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hp9G5vub%2BEkHMUMt00kHVG6YTucmWHVfdpnWekwleW52PCW%2FuuSW0mu4a3bC4QQ83gTxIGHC8i5WwOvcB9Ql62ulaG%2FyqWCp%2BPOp04xr%2BFIG0g5foeve9xfISww9gpWbDWbh6JqctiSEv3A%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9fa13a179821a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=563\u0026min_rtt=506\u0026rtt_var=196\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3205\u0026recv_bytes=1340\u0026delivery_rate=6214592\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=195d9658320d227f\u0026ts=665\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T17:56:14.330193Z","times_seen":15498331,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":650,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.cryptoweb3pro.com/ws/f6cda3e1-aba7-4131-843a-8920e664e423","fqdn":"webapi.cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:06.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /ws/f6cda3e1-aba7-4131-843a-8920e664e423 HTTP/1.1\r\nHost: webapi.cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cryptoweb3pro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: vQkwnAkhK3otHYHukCaDhQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 11 May 2026 12:36:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6380\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=g%2FivuTmKJ%2FjhkcVTTqLUMifmb%2BPBrDmB%2BrjJ8aalEv5onJXtoJREEd3jvsxngisANTSeZpM91%2FjpSYnLqMkfdsxdy07EHOKAfnYZSsFEv8Frbh1t4BrdGqa7pDojM%2Beh1SzWy5eO%2B%2B2XL8k%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9fa13a32794675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=591\u0026min_rtt=550\u0026rtt_var=180\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3204\u0026recv_bytes=1340\u0026delivery_rate=6295652\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=59b592d7cf9b1fcf\u0026ts=732\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T17:56:14.330193Z","times_seen":15498331,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":713,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/filters-kA4bJVa-.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:01.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/filters-kA4bJVa-.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-c46\"\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zVID14KsKlYBewdm%2Be1gAsx%2F7trG9gMw4RgdFLkvjCCfwFdGlbTsNG5prbkg471zr6wx3gBU1NWhAXBWUyGv0T%2BCUTFXTZRa94AnJW%2B7zAcsPodd6KL3b1QwznX0ROY8GRd94w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a172d1c1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3142,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3096)","md5":"e079d58ece7e9eb43131cc7d857887d6","sha1":"fe4852546ec0640323e2126fc16e1ce422f3cc24","sha256":"32205c7360786115eb69a714cb8315b68dc3c20091e68bd99a0b00f78b1a73c7","sha512":"404d13acf534a0f61d3f989e84c231af09314b62d542a426e53285052bd1625b47b6dc171a21512e667b1c5bc16c52da9be86c8534c6c3e2fd7db890ae4fafab","ssdeep":"","tlshash":"da5141fdf8d3a13352ea9df940188511728eae10686e4b4ef54bd0466a33888d07b764","first_seen":"2026-05-11T12:36:28.421819Z","last_seen":"2026-05-11T12:38:43.984408Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-DIKcFZCe.css","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:35:59.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-DIKcFZCe.css HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:35:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-4132a\"\r\nexpires: Tue, 12 May 2026 00:35:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Len2kLwc3FkC%2FU6LYTq%2FPgI6vRJv1MzJ3y2Xl%2BW9bTKUssYB79DKqB3cJB1%2FnL6uf%2FeQo0pACkoTukUO1U88AEZGtuB3KsqrMm8BC34rRkxG8h%2Fmgz%2FvwSG8R4D0R6kF6VZqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a06aadb1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267050,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65108), with no line terminators","md5":"67f8ac84f56d135c41e8aff3e0d77438","sha1":"fd5ce7efb7efe2be7ced44336ad0b197f42a03c0","sha256":"e978ee1078227de907a8d3f670c380f81f14093d3310b0e025f307916459b8c4","sha512":"5d5b3484e611a105ad4baf6f6333b83aa148e01797788f387eb13d81160cf44a17e6aefb47d6df913201f0959e67d2b9ff61b5534aeb47c503dbb3d84e835438","ssdeep":"1536:OEBUrkCwsBlDOFIxuVoxHtIyNBi3MFYaQj7FCwsBlDOFIxuVoxieN7F51Ah5aIzY:nBxClDsIxuVSHnNIClDsIxuVSJgJiv","tlshash":"d644e695f690517c6f2bf678ab8b96dcf23cfa60dd01daa4f10051580ec7bf5062362a","first_seen":"2026-05-11T12:36:28.430277Z","last_seen":"2026-05-11T12:38:44.002561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1075,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":869,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.cryptoweb3pro.com/api/common/getCoinList","fqdn":"webapi.cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"172.67.179.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://cryptoweb3pro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6453\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9fa13a114d0e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T17:56:14.330193Z","times_seen":15498331,"resource_available":true,"data":null}},"time_used":788,"timings":{"blocked":52,"dns":18,"connect":3,"send":0,"wait":682,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-C4bPcWsJ.css","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-C4bPcWsJ.css HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-428\"\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXcLAy1Q6UHEzFZPoUm3sxfq4ULia1nKgPI74rGVd0MPK2XeX8buzh37DKYwtrhiL6SOJgiEMQMeaJikh9QSAH72a9fRPB5e8MPuxLju1dAXnEcELjPcKXbzAipeddJUtFnu0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a112c3b1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1064,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1063)","md5":"96d8acd51f9d0d37252b8b005d9b8a62","sha1":"c12ba4904a952741f088d60716ced838d73d87d0","sha256":"03ac0663722a3eb86bfe293346df8d15b4bf6997da702dd5d3f418915a589fbf","sha512":"65ce6b127cf732423fc188c713f75447e8b7adf76f0a3c14a5b332b828b74fd3e303a9a65843980120cd06c1f7de9927fedc2b948d7a0f34aa6da82654ac4f4b","ssdeep":"","tlshash":"4811bb74d86a0968f89392d92ac41f049472ea20d74318ba62c320474bbf2ef77f13a4","first_seen":"2026-05-11T12:36:28.432687Z","last_seen":"2026-05-11T12:38:43.990004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-Dznm7csb.css","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-Dznm7csb.css HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-2761\"\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjB0gFV23Y2dONNZFszuI64DyjQA6sHg%2BQBGr%2BUPBpcYui%2F3Pj4YCuwIYubFpSC11%2FhJSsUZ0HhgAakVg36cRgM%2FjnJhlsO3w3c6aMMPautYJ9UDPPzX4qJ93aeTbDJSlgrNHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a113c3f1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10081,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10080)","md5":"ec2a9024d93d90c064817471cc838d9f","sha1":"29f187190a53dda515dd65da69b8e3c544008e99","sha256":"37df4933e16f7a6fd49a1c6dd92a1780f3aa105c2a17d735686d9b91d226f85f","sha512":"d01820b16bc4a99fd5d3a9b0eedaaba87d6cea93bf3cdc2199cba75cd8b1e783352b533eeda7345012b7f87e7ac414695d4b96f863af17ca1abedddee047a674","ssdeep":"96:7fyGo/DAV7lajAjXMp5mXUVM2tLb48vszUaU62rRrJ9g4zRNQLGrVV1:7vo/DolKAEYDf+tgiRNQLGrVX","tlshash":"5d224338b6942239ec3be1a9fbc44eccf51db951ea939ed4e55785260cc76e31a3024c","first_seen":"2026-05-11T12:36:28.434081Z","last_seen":"2026-05-11T12:38:43.995696Z","times_seen":2,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":689,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-D8SYkcxw.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-D8SYkcxw.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-3c8c\"\r\nset-cookie: server_name_session=5685a245d0fef950e7d4728bed94bdf4; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GDiTQp6M7svJtD0bSFpZF4CKv5g80lY97g8yBCeme%2BU1Jlwf9BpHXevydCoNzi1hbMoCPKR5y1m4Xp3CgEm588uaoi9rTvOlAWZQodrPtMxe4J7TiIUNrgo2dzJcrPz2XThrFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a113c411a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15500,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15456)","md5":"186637a72642fbb58617c5c69204d658","sha1":"d877a12b143b45bc67403f516b0d18092f1a6a88","sha256":"1de63fbfdf34e9444654c63f035bdc010a99af82665dab151bba33d5efdc914e","sha512":"8a8f952f699b4f8787630b26b6e09f8e8f244975eed1635be922bc2750a9762c1b5c3b1d2f8f6f116d681828601935416dd178dca27b00e08cb172437452ce87","ssdeep":"384:x7SRVnFdb4CO9W1VFoLXNfJtZfYCnJjwCWjZDf8SCGQ8NjyO:BSRVnFWi94XNfJbqZDf8SCGQlO","tlshash":"0562d899b442aa3cf6fb90914048085077397fde900989b2f5bebc472762efcf759614","first_seen":"2026-05-11T12:36:28.435157Z","last_seen":"2026-05-11T12:38:44.004692Z","times_seen":2,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.cryptoweb3pro.com/ws/efd0fded-cd77-43c4-a422-714806943229","fqdn":"webapi.cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:15.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /ws/efd0fded-cd77-43c4-a422-714806943229 HTTP/1.1\r\nHost: webapi.cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cryptoweb3pro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: hWaWMWz/tTFA16WCJ/J8qw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 11 May 2026 12:36:16 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6380\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=O%2BFV0udvZZ7GNHSXb0VAzMwCObeHUNAwtPGbkcHk2HZi%2FtHlVRQN49TSiifDvGhezq6F42PsPUZ%2Bf9wWAu5Y17ZPOKbo4xKGu0Hmjetby9xbcd6Wjafm4FHjH%2BUGk%2BXphLFoQT933tDNIsA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9fa13a6ea97f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1178\u0026min_rtt=858\u0026rtt_var=663\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3204\u0026recv_bytes=1340\u0026delivery_rate=2368593\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=0ca3d8c29bf69591\u0026ts=726\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T17:56:14.330193Z","times_seen":15498331,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":704,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/platform/dev/config.js?1778502960777","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /platform/dev/config.js?1778502960777 HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 30 Jan 2026 15:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"697ccfcc-17e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbs%2FtXfxqtHQRfBBP1qWjvYi7TR2ztTl4XRt9NxO5usb3a1uK0CgEMWpoCuMvn1auY4cldyC4JfuHziqtm70QXhgabCQgpMQbYYNuy7bvHyKyLwadepwpZ3ATRnxea%2BYJNAykQ%3D%3D\"}]}\r\ncf-ray: 9fa13a10ec301a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"e5b2d14d21bf45992ec083408f892f36","sha1":"ea0676026f6951a8f24bd9d0ecae136eb148fa49","sha256":"600378e8acb9d09724ad658249830e95de4a79579f9d12eaa2d4668d2755ba1c","sha512":"93f487b83bcb716539d3dff7e7f3ed3012bb69ea2fb62e778d327ed589bc4a7113dd7b77c0e71278020613d2cc326c52e19ccbc874bc4ce055bf432cae3c1d7e","ssdeep":"","tlshash":"fee0f8fb3238c1b050809e1a2cec502bf3db25738c9c0a2ef484aa082e4de6c217c090","first_seen":"2025-06-03T16:32:00.298116Z","last_seen":"2026-05-18T21:31:53.569521Z","times_seen":10,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/currencyItem-Da1RKmKo.css","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/currencyItem-Da1RKmKo.css HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-77b\"\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZ5a%2Fc%2FF3xJ3vAUiClj8rfpSy6pNvilCo3y2iQMMfJ3DvLEuGF320O80iHvqPmtih3%2BZxsi9JNjwZrfpJoSHsXPaoU7EwJc%2FFquX2HgUQ%2FJVMD3pKXNu%2FjW81yt6lsNK%2BtX7vQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a112c3e1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1914)","md5":"13896daabd73de055f6fad44e8dfe093","sha1":"a67d5f6e0e9dc9403a5b1c1a3c06d89f8938d99b","sha256":"6c0a7e2c5bdf18da1a4ccd5672a10823a241ecbae36c9aeefdfb2c268d4fb09e","sha512":"d2e9efad692f8086e832d99335b274d62cbde1d87a63430c078ae9e4509ee6aa0c44889255dc89ced2b8b5f381b5862c450787b62902f6271e57ecefd441f68f","ssdeep":"","tlshash":"5e41bde553291235ea37c48a7fa8014d91353ec5904797caed8f8a232ccb7e31b7092d","first_seen":"2026-05-11T12:36:28.439104Z","last_seen":"2026-05-11T12:38:43.994204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-1yJUv2Y6.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-1yJUv2Y6.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: server_name_session=57012e0ef36e85cb1b9347a0f05603bb; Max-Age=86400; httponly; path=/\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\netag: W/\"697ccfd8-334\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwfJUZ9PA8JZEROtCR%2F8GB7R09ztZZwsxm5a0nAU2Cr7vt05RL9w%2FF8n4tdx9mDQLuAmxpY8cPm0uIOGJREi7QiJQ7ZHifnRjsp4vn7bg5XlF6BnydF0OzNBiqWRx4PWA8ZPAw%3D%3D\"}]}\r\ncf-ray: 9fa13a113c451a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":820,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (776)","md5":"c32e6696705be8c6d0fd245423925d61","sha1":"5d1d7cf0e3760f1dffdd05457197599c25784d25","sha256":"5186f22841fd2b634330e7962760d4a24d7ba0d614abe32e6165c5e582283c11","sha512":"76063cbef06de669be499b3ca9f81e4bd010e203cc0b251b4bfd81cb1f447d1602bc43a5e43944017f278a5a585274a1a5ddf1baf18501aa54937bd7a2b0139f","ssdeep":"","tlshash":"c801f1f9fc6c8fbb2eb3051511816a00100a0fedfd2019d598577e652bf1c408a8eb1c","first_seen":"2026-05-11T12:36:28.424847Z","last_seen":"2026-05-11T12:38:43.988306Z","times_seen":2,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.cryptoweb3pro.com/ws/a44df403-fd1d-4b87-b085-e369cda57f80","fqdn":"webapi.cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:02.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /ws/a44df403-fd1d-4b87-b085-e369cda57f80 HTTP/1.1\r\nHost: webapi.cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cryptoweb3pro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: f6/CFm0nhIv42lp6J0LYmg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 11 May 2026 12:36:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6380\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=o%2BE6FibC30M44gGoJ84DyWRPVNpwQMOUC828Gv8ekOLLrNKBGno8efkAnbIporPQhkm%2B8gtR6Otg67IOtgu72K72NZ4uPcr%2FRfCMMdXDEUwG4b%2FGfrrP93nUYWbvz4a7hZy%2BNHAPKEc5wmc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9fa13a1ebdcbb50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=602\u0026min_rtt=546\u0026rtt_var=212\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3205\u0026recv_bytes=1340\u0026delivery_rate=5402985\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=56c76ca7ccf30298\u0026ts=734\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T17:56:14.330193Z","times_seen":15498331,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":717,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.cryptoweb3pro.com/ws/ec8ecd76-cf3e-484d-86be-af891591bd6c","fqdn":"webapi.cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:08.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /ws/ec8ecd76-cf3e-484d-86be-af891591bd6c HTTP/1.1\r\nHost: webapi.cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cryptoweb3pro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: kqr1FQy6uLFTFFF1hsHYjg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 11 May 2026 12:36:09 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6380\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tTPcer3Mi7cryxDJM0hHJS%2BwUAsDRge4GedvgLHjdK%2FoohZ1bw%2BQVNA41dztICLPfaGs2pJUtoq1DsSm%2FyxbzujduByLHIlR6gmY%2B0m3UguhSz0OTrr7m2m%2F3WZCPUveE8TNpULhcboNMJ4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9fa13a40c82ab509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=897\u0026min_rtt=634\u0026rtt_var=399\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3204\u0026recv_bytes=1340\u0026delivery_rate=6621951\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=5b586e654b4a97b5\u0026ts=721\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T17:56:14.330193Z","times_seen":15498331,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":709,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-BpHoCjZx.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:35:59.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-BpHoCjZx.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:35:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-e79ff\"\r\nexpires: Tue, 12 May 2026 00:35:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5iXx%2F%2B9qrEqxIlgJ%2B31vCZ%2F9PZ4%2BMKZ720pPzrk2tJgj1BjJRN9atS1j2729tTseWrU0M08Ai9qCPha6muVh4WHVzI8khe8616N7Jmx0JWYuCs4h5NzgpO7%2BWeFklnJlHYlzEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a069ada1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60222)","md5":"64f9a5046bd3286e166d08668348fd72","sha1":"f2936957a938311d28490e3c4f3a6fafab4426c7","sha256":"a54fc902c09d1a403adb1ef3a1674c376713559a6b99956b2ea19286c4f3e604","sha512":"cd177f1c319dec53ebd50746135982e2a63838a47de4a7a78c3594060dbcd477c02b9c42fab1d20274d3ff53a81cf8710430c0555a107909291cb2bbfa2887d0","ssdeep":"12288:xxGde6rX78MwsSyalX4CEw2sB7rCasMXkCWvr3Y3U9jQErE:5GLw3b4sB7TsmkCWvr3YkI","tlshash":"ba154bc97692f06147ab10e250bb0002f3396e59744e84a4f169d8eb7eb9d89d277f3c","first_seen":"2026-05-11T12:36:28.440845Z","last_seen":"2026-05-11T12:38:43.987459Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":629,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-DYTWkGcO.css","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-DYTWkGcO.css HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-a01\"\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UeMuX24QAvuGNB%2Fsk6BXMCTqWhCSz764c2A3qiF6TodX%2F%2BuTD2PktODLJ16nOJL8Z%2BZtzLCe8EMuDU6qN0bR1wEtm0bR62iRvrpSUh39CNqv%2B%2FyxJKLHKTeDEHg%2B3pWEaUhziA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a112c3c1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2560)","md5":"b02fb15603d940348579451de197bdf4","sha1":"c3d5ab7cb2ac7d04d920e6ca22e6de43f6df6101","sha256":"c81160a7133f1c7c3c833bd882ac586c8508bd9acee70c3663aced3d1248bd30","sha512":"97583b2d25ab6ef4ac60c01ce37ff4cf0b80bc77208b81bf59f52e895408189a5390eaff00b58c2062b1526553dda4f1e14e7e71dd3e50b67986bf278eb9bb59","ssdeep":"","tlshash":"ad51325cf79515355c77ee8b7ea88f4c8120af93e4869ca4f103961609ef6e7293021f","first_seen":"2025-10-09T01:20:13.310625Z","last_seen":"2026-05-11T12:38:43.993464Z","times_seen":3,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.cryptoweb3pro.com/api/common/getAllSetting","fqdn":"webapi.cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"172.67.179.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:00.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://cryptoweb3pro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 502 Bad Gateway\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6453\r\nretry-after: 60\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9fa13a114d1232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T17:56:14.330193Z","times_seen":15498331,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":54,"dns":20,"connect":1,"send":0,"wait":649,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/assets/index-D8SYkcxw.js","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:01.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /assets/index-D8SYkcxw.js HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 30 Jan 2026 15:35:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"697ccfd8-3c8c\"\r\nexpires: Tue, 12 May 2026 00:36:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71Z2rxxr1HXvu9e4l%2FoIWvrTAqwxU0P7ZuR1yqi5e%2Fk91hq8i83hpwUiDnEFK3vvV%2F%2Bvr8BVRzujgRWUGK9%2BZdEzBGJHo21WDD7HRojsbiaHX%2BC9unY4E8zKP36m13uJDKAteg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa13a15aceb1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15500,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (15456)","md5":"186637a72642fbb58617c5c69204d658","sha1":"d877a12b143b45bc67403f516b0d18092f1a6a88","sha256":"1de63fbfdf34e9444654c63f035bdc010a99af82665dab151bba33d5efdc914e","sha512":"8a8f952f699b4f8787630b26b6e09f8e8f244975eed1635be922bc2750a9762c1b5c3b1d2f8f6f116d681828601935416dd178dca27b00e08cb172437452ce87","ssdeep":"384:x7SRVnFdb4CO9W1VFoLXNfJtZfYCnJjwCWjZDf8SCGQ8NjyO:BSRVnFWi94XNfJbqZDf8SCGQlO","tlshash":"0562d899b442aa3cf6fb90914048085077397fde900989b2f5bebc472762efcf759614","first_seen":"2026-05-11T12:36:28.435157Z","last_seen":"2026-05-11T12:38:44.004692Z","times_seen":2,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptoweb3pro.com/platform/dev/favicon.ico?2.0.1769758552390","fqdn":"cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:01.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1769758552390 HTTP/1.1\r\nHost: cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: server_name_session=73ef8524995298220ba2663fbcd74583\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 11 May 2026 12:36:02 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 30 Jan 2026 15:35:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=1\r\ncf-cache-status: MISS\r\netag: W/\"697ccfcc-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f325hn6EpnETDXld4VKn0z3j4F0%2B0MnAvREgPmGsvaYUQMd%2BUj8dwq3KDC33LUKoJCu%2Fj4o%2Fg%2FgPdK%2BmXLV53idnNzfhSUGKr0GKOvj0kCJKHefW9GlDgTe1jTDr%2FNs85evy%2FA%3D%3D\"}]}\r\ncf-ray: 9fa13a16ed0f1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"110f59ead20ec36822cb58ad3ed65037","sha1":"4904aff5d83ddd9790af8d6188757ddb0a8e7841","sha256":"29478f9129ac8c9bd2b39107be704063a9fb1a6b9771de080aa244804e9f6100","sha512":"9eff4adb4418f51ec3e8f23851a5502ec39ee55e42c57721fdeb3cd802250dede2595b5aa59ef3dc5296ee1bebbe61498031697808c2add0c3443421dd3462eb","ssdeep":"24:su2uZ1fMzoF1GaGBBbdf+sVnrKckwLFBwiS08iX6VVHlwSLDRv9lOkwfK4sL9bNE:cncGOsprVeiSliYTOkwfKBCzHoooOV","tlshash":"3a9165f1368326dae103a6f41322b755ca9dcfedbc73389612d97721f6f89260c12914","first_seen":"2025-03-02T13:24:55.235956Z","last_seen":"2026-05-11T12:38:44.006117Z","times_seen":6,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.cryptoweb3pro.com/ws/ed39b0b9-d665-47f4-8bc6-7c60327d0293","fqdn":"webapi.cryptoweb3pro.com","domain":"cryptoweb3pro.com","tld":"com"},"ip":{"addr":"104.21.59.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cryptoweb3pro.com/","date":"2026-05-11T12:36:04.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptoweb3pro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 09:43:26 GMT","end":"Sat, 11 Jul 2026 10:42:09 GMT"},"fingerprint":{"sha1":"A4:CD:D4:70:2A:BA:C9:93:AE:82:A4:C6:2B:3A:E9:23:49:D3:94:CB","sha256":"0C:2A:03:AB:39:77:0F:A4:56:D2:FA:F8:FA:84:FB:EB:09:B3:E1:E7:8A:5B:B2:23:09:2A:9A:F5:BF:89:C0:93"}}},"request":{"raw":"GET /ws/ed39b0b9-d665-47f4-8bc6-7c60327d0293 HTTP/1.1\r\nHost: webapi.cryptoweb3pro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cryptoweb3pro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: YDC20AA/B47/OAe09lFMWA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Mon, 11 May 2026 12:36:05 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6380\r\nConnection: keep-alive\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eWLfvynqVZKc%2Bl3l53MD024Tpj3LYzRYmc81EaOvG4tuVNf4G2qca0eGoco7pOrbANmE56186g%2F878XEba6WZTf8rl7CsQeb%2BqnTl7UW7OJnjpNqK6BwCNMVhEW7VeM3E5eEh%2BqLtuzI%2Bfs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: same-origin\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nServer: cloudflare\r\nCF-RAY: 9fa13a27ada056aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=597\u0026min_rtt=556\u0026rtt_var=181\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3205\u0026recv_bytes=1340\u0026delivery_rate=6295652\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=9a6f9fd4e73bc6d8\u0026ts=668\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T17:56:14.330193Z","times_seen":15498331,"resource_available":true,"data":null}},"time_used":674,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":656,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"webapi.cryptoweb3pro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}