{"report_id":"8e84d348-8d2c-41b6-ba19-6ba8ab3b8137","version":6,"status":"done","tags":[],"date":"2026-05-01T12:26:50Z","url":{"schema":"https","addr":"xrpayments.pages.dev","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xrpayments.pages.dev/","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"title":"XRPayments","dom":{"size":142313,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (734)","md5":"c89050eafd942954d6105af8b8630ade","sha1":"0a3e70d17a9004307cf41e0b91b50b025b54938b","sha256":"29f64c432823e3c11e5ae70a75e50397dd58996e61597cb0f5dce8cb79418d6a","sha512":"9c735ba8656f3a657667d6c889ccb1628351a21957eea6e0840b1d1a98a22a15f325adb5be4a1a05c981a722549b1c0907bf47579270e6f127f434de2e79a976","ssdeep":"768:4d268lrwb+sTpkezCIMA/2GihMOzIcfdvVrOklKC6pQjcnfd2zdPEvYFF74/FTce:sgIMNVfd9hqQjcnAzpEvLWvSyiues0v","tlshash":"67d3e7b232b510307b57c9ad65ab47963120f007f90645547a9c32e48feeea1dcb3af9","dom_hash":"domhashff433236e61c4d958b13a2663cb66174","first_seen":"2026-05-01T12:26:56.932665Z","last_seen":"2026-05-01T12:26:56.932665Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xrpayments.pages.dev","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-05T12:26:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-01T12:26:28Z","timestamp":1777638388,"ip_dst":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53226,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-01T12:26:28.642148+0000\",\"flow_id\":629305519676928,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":53226,\"dest_ip\":\"172.66.44.109\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"xrpayments.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2634,\"start\":\"2026-05-01T12:26:28.630272+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"xrpayments.pages.dev","ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-01T12:26:52.64956Z","last_seen":"2026-05-01T12:26:52.64956Z","alert_count":0,"request_count":6,"received_data":1322706,"sent_data":2698,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"xumm.app","ip":{"addr":"172.66.149.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-06-03","domain_rank":627723,"first_seen":"2019-06-03T14:30:40Z","last_seen":"2026-02-28T11:05:25.813567Z","alert_count":0,"request_count":1,"received_data":110671,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-26T22:35:53.043088Z","alert_count":0,"request_count":2,"received_data":469421,"sent_data":942,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.binance.com","ip":{"addr":"3.164.243.88","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-04-24T09:24:59.571577Z","alert_count":0,"request_count":1,"received_data":939,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xrpayments.pages.dev/deficonnect.umd.js","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3ed4b2479eb377ad9c7600d9a444777","sha1":"55dbe93ab3e15e5b4ff38018b04e731a37c3d25c","sha256":"82e2a4571cd57fccff30369e797242dba489ed3a00748984ca929f315dfe3d87","sha512":"a695f293e6033eb3513fdd706f69a132e7a406d9e065f55f4789ebb7d10ffc0ecb1b52278f8a2163615f77a5ce7d0c1d32068e5cd1c6e332596c34c3f949c29a","ssdeep":"1536:Lq+kG1+1hditUTr1UFIDiXeLF9cd1hO9awpPOAkxkJ+ap4aiyyLafvToOQN/DkHN:2+BQPhR9cH0VPzdiyvvkDkHCG","tlshash":"9004e7c9f2d2b0a103a761a5503f500bf23b6d69741e90d0e366e4e17cb898e917bf6d","size":187933,"data":"","first_seen":"2026-05-01T12:26:56.949126Z","last_seen":"2026-05-01T12:26:56.949126Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpayments.pages.dev/","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04834d2d6e17f95d7dc5909475da58c5","sha1":"64f76ce69ac0424b174b229b5ff8789acf36fe48","sha256":"9011509016f7c636853e7870254a9fb42c168a6b7c5131c635ecc40ffc371908","sha512":"72542fd849b65adf7034f4dbc36593172cc73270b5bfaca1dabb17fb89047a4b920301df1acb52adc66a843a40ca65580f5b6a54fdde7e265e91abad194ec986","ssdeep":"","tlshash":"764154c262a8ce291f2513a463cf3e55768352174d40f54bf27e828a8bdf6257a349cb","size":1916,"data":"","first_seen":"2026-05-01T12:26:56.963112Z","last_seen":"2026-05-01T12:26:56.963112Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@walletconnect/universal-provider@2.23.9/dist/index.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"baa53df549387dbb891cb61136294bd1","sha1":"b2844d055d688f8d33cbc177a8446b71ce2bd426","sha256":"942c934834f04f84447895d78de3dfdab1ba6c9e96fb3243a9407311e9c33599","sha512":"b1ef91ee9e6a2659bcddeb0419d28d77ab34e0a6c010d6e3b306fa882648bf4b11223da857545b67479c7629013437827a5a7047c5aaeb4af1f17c6dd8dc3c08","ssdeep":"12288:mHWuZfF2/OQmx5jz7naaZ5xBDyxTmt8oiS:GWuZfF2WQmxzZ5xBDyxVoiS","tlshash":"06a43b4072e2a47243ea55e9a4375101f23a9864304d846cfbacfdef7d95889963bf38","size":463386,"data":"","first_seen":"2026-05-01T12:26:56.951857Z","last_seen":"2026-05-01T12:26:56.951857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpayments.pages.dev/","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d35763c5d854a7c8ce86235b9a501def","sha1":"eaeaa016efdfba1d05a93d80adbf9accb0787673","sha256":"56384452f10e40f10e20208b00739bcc56f0b84ba30c1a81c4e741204119abcb","sha512":"b45ea8281dea81e1519917a65afd0a895836d34feb7cf92149b1bf06c2da4f3ced9b6fe0dae28939dfe9fa419edceac3ee418bc9d75630a775ab20e026d20bba","ssdeep":"768:7KC6pQjcnfd2zdPEvYFF74/FTcdHupzjnqlubnZiYaQ6Kwxni6RdJqMX0rwWxIAs:LqQjcnAzpEvLWvSyiues06","tlshash":"5393a4b632b510307b8bd5be645b43963131b0073906199975ac72608fedfa1e8b3ef5","size":96368,"data":"","first_seen":"2026-05-01T12:26:56.964617Z","last_seen":"2026-05-01T12:26:56.964617Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@coinbase/wallet-sdk@3.9.3/dist/CoinbaseWalletSDK.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4c280903bbba1e23c8683b9cb2d4029","sha1":"4551005cfeca596e98cec7341ee9f6ffffa6b3ed","sha256":"5326e2eaab4e4de815614b29e97cf81b971a5575fa70a689e440d245bcecb1f8","sha512":"baff6249ebe2f201b2149bbe46d903c9bc7518a7eff2960e888fd4f9d15591a667509122a2c52b5025255536bb0613ce7d24ab0ada972f03210e9c161553c9c7","ssdeep":"96:GNyEy478xN8cTWOoEr4Pqsmd4mX7figu40HrDR9e3qXMcjB7yj1bstazmFZEPpsM:KyEy478xN8cTWOoEkCtd4kig903RuMMD","tlshash":"b99183c28775751120294acb713373b2e3203956767990f8ba8d0eee95ef785224ac7d","size":4454,"data":"","first_seen":"2026-05-01T12:26:56.961578Z","last_seen":"2026-05-01T12:26:56.961578Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpayments.pages.dev/proton-web-sdk.bundle.js","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fed128256fa1ecea302fb5ba8331f4db","sha1":"63b724328b25c0489d2270474562a2ad8dddb821","sha256":"aba922609c5f45357793ab6b7a5e852f46ed8377e47556de34b29ee0426e2ede","sha512":"5a6fbf8ad7556ea70623059d88a89c8500779b43c857fb3651016d6138abedbfb44d70713a7aeacb4e9ef06e4f61e53e26e8f333550c8d6184d8a56594cd5eed","ssdeep":"6144:SHi4hfLCTvmsr4CKtTcyKTsFSzw1h578odubodgnsZD7NOqeBVqmn2:SCmL0msrCSC5gnsZD7NOqeBVq62","tlshash":"bfc42a84b3a0b03643a664a1543f040af339b96c784b40acf66de8f67df96c59536f39","size":579007,"data":"","first_seen":"2026-05-01T12:26:56.946353Z","last_seen":"2026-05-01T12:26:56.946353Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xumm.app/assets/cdn/xumm.min.js","fqdn":"xumm.app","domain":"xumm.app","tld":"app"},"ip":{"addr":"172.66.149.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8fb98978c3a7d4ce7db38916d35540f","sha1":"c5b0a0b145738df8d4206c333d455e3b1fb6ed94","sha256":"97ca7668dfa01cd3e81f1a94d282ea57cc29140672a9666bcb41fe0c2739a095","sha512":"1a068d1dcbb759e7c58769c70ab72c44517e3a0c9c8d3c03f10bb5424e382ffecdeb9c44b3daac29f23da834f940c68f02d359302be276dd894af941facc523f","ssdeep":"1536:ZR8VTcocWbzA9t95XXrZAZVTm0dKHi7/Lp7399/v5PijzNHTtVC:wTcoJA99XVWVTm0dj7/LdN9EH/o","tlshash":"48b3e884f791f06107a369a5903b1117f2367b29340d84a8f265dce57cb9a8fa13bf78","size":108211,"data":"","first_seen":"2026-02-12T19:41:59.204637Z","last_seen":"2026-07-12T16:57:59.71467Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xrpayments.pages.dev/icon-512.png","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrpayments.pages.dev/","date":"2026-05-01T12:26:29.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpayments.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 17:35:13 GMT","end":"Sat, 27 Jun 2026 17:35:12 GMT"},"fingerprint":{"sha1":"5A:A6:D0:BC:F1:04:1D:E9:7E:C2:3D:A8:01:D2:3D:C7:BA:C9:30:35","sha256":"2F:E4:CE:69:35:EE:9B:7C:9F:15:16:37:95:2D:45:59:4C:7D:4B:33:19:96:0F:8C:D3:63:08:1B:B1:DE:E4:25"}}},"request":{"raw":"GET /icon-512.png HTTP/1.1\r\nHost: xrpayments.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xrpayments.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 12:26:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 232567\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"86379959a0429d4fa34ec258a81e8511\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfMEwblnj7ODbXauW8AxbQUbqkt8IZN%2Fo4mX1hkk%2Bi0o5qSFWV%2Bk0URLVIyMLxhMUTrkt5eEyu%2BrZEwoF5ZkGleVQTLG760XKCa7%2BmQ6B7EzmEy%2FMFxrqu0i11sng%2BcbBLycSipKrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4ec660ab5d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"865a9888f455434470792783a73216a1","sha1":"3581cf5f42a122580cd6c3c97f153882dd8860e9","sha256":"3bc6ff3a11834433a5412edea43b3f4b9fabffe3ce4998837ef116d71af78791","sha512":"c61133ed80a2a5e00956d32b54f321d41036963249703a960a0b14b8cac9031384bf5602b0add0aa8a5484eed3d842601ccc476e184a87cafbd13063c31eb608","ssdeep":"6144:WnRVb4F0LUHU9KMIb5FfLw8CqYBCrw5SVtyf:QRVbdWU9gbP5XYBAtLu","tlshash":"4234234a29f89913593a37197325ead34cd2de7126f189b2239afd011db0ca1d23d36b","first_seen":"2026-05-01T12:26:56.939304Z","last_seen":"2026-05-01T12:26:56.939304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xumm.app/assets/cdn/xumm.min.js","fqdn":"xumm.app","domain":"xumm.app","tld":"app"},"ip":{"addr":"172.66.149.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpayments.pages.dev/","date":"2026-05-01T12:26:29.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xumm.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 14:14:09 GMT","end":"Sat, 20 Jun 2026 14:14:08 GMT"},"fingerprint":{"sha1":"49:1F:A0:86:D9:A6:30:12:69:E1:F8:EF:F5:CA:79:AC:66:C8:DB:68","sha256":"69:16:B7:2D:D8:7B:28:DF:3B:57:11:B6:AE:02:04:2E:9E:51:DC:F2:66:DD:C4:5A:D8:66:FA:B9:37:49:13:46"}}},"request":{"raw":"GET /assets/cdn/xumm.min.js HTTP/1.1\r\nHost: xumm.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xrpayments.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:26:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, PATCH, DELETE, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization, PayID-Version, PayID-API-Version\r\ncontent-security-policy: object-src 'none'; manifest-src 'self'; frame-ancestors 'self'; default-src 'none'; script-src 'self' 'unsafe-eval' 'sha256-xZT4QgHECLfE0jlh63xgqi9PCTdAN/80U4g0/Sy0uPY=' 'sha256-fynwwNeatXCacHQ6swcxEezVAL4vYjU1A7aWVSTlQ+Q=' 'sha256-3Ey30PJkNcf9LrK7CIqrujoq79a+uJqKgYsaBDj15Eo=' polyfill.io kit.fontawesome.com *.zdassets.com xumm.zendesk.com support.xumm.app remotejs.com plausible.io 'sha256-/6SBPqW+GW+//4nlXX6Y1nR9dWlh0gsQJ6KK71djH6A=' 'sha256-s19A4pbeDbVHX5GhO7tFyE3f57NCT5QJoTXpqZJTiHE=' plausible.io; style-src 'self' 'unsafe-inline' stackpath.bootstrapcdn.com use.fontawesome.com kit-pro.fontawesome.com kit-free.fontawesome.com fonts.googleapis.com use.typekit.net p.typekit.net xaman.app xumm.app; connect-src 'self' wss://xaman.app wss://xumm.app wss://custom-node.xrpl-labs.com xaman.app xumm.app ka-f.fontawesome.com api.rss2json.com ka-p.fontawesome.com *.zdassets.com xumm.zendesk.com support.xumm.app remotejs.com plausible.io kit.fontawesome.com plausible.io; img-src 'self' image-proxy.xrpl-labs.com xaman.app xumm.app media.giphy.com cdn.xaman.app cdn.xumm.pro cdn.xumm.app xumm-cdn.imgix.net xumm.nyc3.cdn.digitaloceanspaces.com badge.fury.io github.com *.cloudfront.net cdn-images-1.medium.com cdn-images-2.medium.com; font-src 'self' use.fontawesome.com kit.fontawesome.com kit-free.fontawesome.com kit-pro.fontawesome.com fonts.gstatic.com use.typekit.net ka-p.fontawesome.com ka-f.fontawesome.com; upgrade-insecure-requests\r\nx-dns-prefetch-control: off\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-download-options: noopen\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nfeature-policy: camera 'none'; microphone 'none'; geolocation 'none'\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncache-control: max-age=604800, public\r\nlast-modified: Mon, 27 Jan 2025 22:20:14 GMT\r\netag: W/\"1a6b3-194a9d9d933\"\r\nx-backend: @default_backend\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f4ec65bbb53568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108211,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (48821)","md5":"a8fb98978c3a7d4ce7db38916d35540f","sha1":"c5b0a0b145738df8d4206c333d455e3b1fb6ed94","sha256":"97ca7668dfa01cd3e81f1a94d282ea57cc29140672a9666bcb41fe0c2739a095","sha512":"1a068d1dcbb759e7c58769c70ab72c44517e3a0c9c8d3c03f10bb5424e382ffecdeb9c44b3daac29f23da834f940c68f02d359302be276dd894af941facc523f","ssdeep":"1536:ZR8VTcocWbzA9t95XXrZAZVTm0dKHi7/Lp7399/v5PijzNHTtVC:wTcoJA99XVWVTm0dj7/LdN9EH/o","tlshash":"48b3e884f791f06107a369a5903b1117f2367b29340d84a8f265dce57cb9a8fa13bf78","first_seen":"2026-02-12T19:41:59.204637Z","last_seen":"2026-07-12T16:57:59.71467Z","times_seen":3,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":35,"dns":22,"connect":1,"send":0,"wait":153,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpayments.pages.dev/proton-web-sdk.bundle.js","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpayments.pages.dev/","date":"2026-05-01T12:26:29.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpayments.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 17:35:13 GMT","end":"Sat, 27 Jun 2026 17:35:12 GMT"},"fingerprint":{"sha1":"5A:A6:D0:BC:F1:04:1D:E9:7E:C2:3D:A8:01:D2:3D:C7:BA:C9:30:35","sha256":"2F:E4:CE:69:35:EE:9B:7C:9F:15:16:37:95:2D:45:59:4C:7D:4B:33:19:96:0F:8C:D3:63:08:1B:B1:DE:E4:25"}}},"request":{"raw":"GET /proton-web-sdk.bundle.js HTTP/1.1\r\nHost: xrpayments.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xrpayments.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 12:26:29 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flfMjKGxnSSmm1BoFZEmD968j9iR6sfv%2FfFivpg9MISEfkllmg14j85u0h%2BHYjlfx9ouetCjmWQQ8Fv2UNIZ501gDqxUrMStEI%2FnudtPZUgZ5br4%2F3lGWmJrnCu59L%2BY%2BsecbxUUUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"16143d61f067e837045c25a9888dc2ae\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4ec65b78c10b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":579007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1915)","md5":"fed128256fa1ecea302fb5ba8331f4db","sha1":"63b724328b25c0489d2270474562a2ad8dddb821","sha256":"aba922609c5f45357793ab6b7a5e852f46ed8377e47556de34b29ee0426e2ede","sha512":"5a6fbf8ad7556ea70623059d88a89c8500779b43c857fb3651016d6138abedbfb44d70713a7aeacb4e9ef06e4f61e53e26e8f333550c8d6184d8a56594cd5eed","ssdeep":"6144:SHi4hfLCTvmsr4CKtTcyKTsFSzw1h578odubodgnsZD7NOqeBVqmn2:SCmL0msrCSC5gnsZD7NOqeBVq62","tlshash":"bfc42a84b3a0b03643a664a1543f040af339b96c784b40acf66de8f67df96c59536f39","first_seen":"2026-05-01T12:26:56.946353Z","last_seen":"2026-05-01T12:26:56.946353Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpayments.pages.dev/deficonnect.umd.js","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpayments.pages.dev/","date":"2026-05-01T12:26:29.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpayments.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 17:35:13 GMT","end":"Sat, 27 Jun 2026 17:35:12 GMT"},"fingerprint":{"sha1":"5A:A6:D0:BC:F1:04:1D:E9:7E:C2:3D:A8:01:D2:3D:C7:BA:C9:30:35","sha256":"2F:E4:CE:69:35:EE:9B:7C:9F:15:16:37:95:2D:45:59:4C:7D:4B:33:19:96:0F:8C:D3:63:08:1B:B1:DE:E4:25"}}},"request":{"raw":"GET /deficonnect.umd.js HTTP/1.1\r\nHost: xrpayments.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xrpayments.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 12:26:29 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEZ8plkd%2FPSxlaqrn7A7AJ0IVkXbQeYat%2FQPOGdqi8tmksDE6iwWJFTFAhLHBwJS6krHTraDfCo0TzrvwcQ7%2Bet7DWFerq45XRu09%2Fzeohwz%2B7oXO8MLOlw3mMJYiZIUi8AYrq4nCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5ffda07cb3e17821a526672c224c2797\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4ec65b88c40b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187933,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56034)","md5":"c3ed4b2479eb377ad9c7600d9a444777","sha1":"55dbe93ab3e15e5b4ff38018b04e731a37c3d25c","sha256":"82e2a4571cd57fccff30369e797242dba489ed3a00748984ca929f315dfe3d87","sha512":"a695f293e6033eb3513fdd706f69a132e7a406d9e065f55f4789ebb7d10ffc0ecb1b52278f8a2163615f77a5ce7d0c1d32068e5cd1c6e332596c34c3f949c29a","ssdeep":"1536:Lq+kG1+1hditUTr1UFIDiXeLF9cd1hO9awpPOAkxkJ+ap4aiyyLafvToOQN/DkHN:2+BQPhR9cH0VPzdiyvvkDkHCG","tlshash":"9004e7c9f2d2b0a103a761a5503f500bf23b6d69741e90d0e366e4e17cb898e917bf6d","first_seen":"2026-05-01T12:26:56.949126Z","last_seen":"2026-05-01T12:26:56.949126Z","times_seen":1,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@walletconnect/universal-provider@2.23.9/dist/index.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpayments.pages.dev/","date":"2026-05-01T12:26:29.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@walletconnect/universal-provider@2.23.9/dist/index.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xrpayments.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.23.9\r\nx-jsd-version-type: version\r\netag: W/\"7121a-soRNBV1oj40zy8F3qERrcc4r1CY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 743759\r\ndate: Fri, 01 May 2026 12:26:29 GMT\r\nx-served-by: cache-fra-etou8220135-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 129087\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":463386,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57663)","md5":"baa53df549387dbb891cb61136294bd1","sha1":"b2844d055d688f8d33cbc177a8446b71ce2bd426","sha256":"942c934834f04f84447895d78de3dfdab1ba6c9e96fb3243a9407311e9c33599","sha512":"b1ef91ee9e6a2659bcddeb0419d28d77ab34e0a6c010d6e3b306fa882648bf4b11223da857545b67479c7629013437827a5a7047c5aaeb4af1f17c6dd8dc3c08","ssdeep":"12288:mHWuZfF2/OQmx5jz7naaZ5xBDyxTmt8oiS:GWuZfF2WQmxzZ5xBDyxVoiS","tlshash":"06a43b4072e2a47243ea55e9a4375101f23a9864304d846cfbacfdef7d95889963bf38","first_seen":"2026-05-01T12:26:56.951857Z","last_seen":"2026-05-01T12:26:56.951857Z","times_seen":1,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":56,"dns":0,"connect":26,"send":0,"wait":52,"receive":58,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpayments.pages.dev/favicon.ico","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrpayments.pages.dev/","date":"2026-05-01T12:26:29.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpayments.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 17:35:13 GMT","end":"Sat, 27 Jun 2026 17:35:12 GMT"},"fingerprint":{"sha1":"5A:A6:D0:BC:F1:04:1D:E9:7E:C2:3D:A8:01:D2:3D:C7:BA:C9:30:35","sha256":"2F:E4:CE:69:35:EE:9B:7C:9F:15:16:37:95:2D:45:59:4C:7D:4B:33:19:96:0F:8C:D3:63:08:1B:B1:DE:E4:25"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xrpayments.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xrpayments.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 12:26:29 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d3LI6Pqcg4vZbffpkOZMfoKOnnoZ%2F%2FdDHytXvo%2BsCBnAP1Y3YWxku5SHSeEnbJpYD42ofYUCaZz3dNk%2FLglErI6f8LQvwslXD4Nh2APN6tR25xLiqxDPc8kSYFhbYgUOj0EA93%2BZRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1df4df5c87d7c9e7dce2a4935733c4b9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4ec660ab5e0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"5a986c9642f0b5178639b6d727971903","sha1":"954b3ae20aeba60105cc28a12fb8cfb95f640787","sha256":"b1a5385ee8d121a4531cba8544a48576d76d1b4cef9aac8691cffb3761226af4","sha512":"c263aaafa8e65cbcca3fd38a454ff2a121b83e82bc71abbb9daf42368e611d58fe418c73f9ce99ff0c134e91de51c585329b5b78fcd34ab2723f2a5aa520a9ee","ssdeep":"96:mFxWW0otrQ6HPzRPGdyu/9PnqC28A4GRYFxcWf1I/W5P:mFx/0otrQUzRu19C/4P5","tlshash":"7e91f1ab0a254c85e0312b789ed6ff0c97751fb6343fcb06796028886f26b993d43a54","first_seen":"2026-05-01T12:26:56.953886Z","last_seen":"2026-05-01T12:26:56.953886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpayments.pages.dev/bg.jpg","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xrpayments.pages.dev/","date":"2026-05-01T12:26:29.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpayments.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 17:35:13 GMT","end":"Sat, 27 Jun 2026 17:35:12 GMT"},"fingerprint":{"sha1":"5A:A6:D0:BC:F1:04:1D:E9:7E:C2:3D:A8:01:D2:3D:C7:BA:C9:30:35","sha256":"2F:E4:CE:69:35:EE:9B:7C:9F:15:16:37:95:2D:45:59:4C:7D:4B:33:19:96:0F:8C:D3:63:08:1B:B1:DE:E4:25"}}},"request":{"raw":"GET /bg.jpg HTTP/1.1\r\nHost: xrpayments.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xrpayments.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 01 May 2026 12:26:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 172188\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ffc56ef36386c9c7467e3bb2157f1206\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgxwsT5u%2BZsl6DnRd1%2Be1n%2BSWK2FnGgc7%2BOpQN%2B55pnqDt5QBwPs1kCz2mb0thY9KamZfEdJ4ZQV6JlG0BhqwsKVBowHmWjwz142d9Rq7M62dsQGSHLVBIZpBEt3o0y8wvmAFmmKfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f4ec6615bc00b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172188,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=2340, software=Android BP2A.250605.031.A3.S926USQS5CZB2, orientation=upper-left, datetime=2026:03:29 15:39:06, width=1080], baseline, precision 8, 1080x1486, components 3","md5":"a4b0665a7cf2755ffb676efdd40a86d6","sha1":"f9bac613ab23878f3fd23996a67d1c69df71cb30","sha256":"05423ba0936da7d4eb8ce32a78377a4e885189ffc0791ea8a48d213926372975","sha512":"28773c718fe632c912d4368222ae36ff75911b3b1f2e96614de114e2fc9ee2c5cd0e223bb4f6d3edf1e92aaf153f9ff3030e318e5d48e95b130b8c6e475f12a7","ssdeep":"3072:A4U9/TFZPQYBEkbUNlBxS3hv3Lt7UH0AdfdqiTz9DyYmQmuUCdHB:N8/HPQYNYShv3qHD0uzFfpmWRB","tlshash":"46f31236ec122612ebfde4b9119c71420d2bb410fa3978508b593b453f9d9abcb71ca7","first_seen":"2026-05-01T12:26:56.955706Z","last_seen":"2026-05-01T12:26:56.955706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/ticker/price?symbol=XRPUSDT","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.164.243.88","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xrpayments.pages.dev/","date":"2026-05-01T12:26:29.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/ticker/price?symbol=XRPUSDT HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xrpayments.pages.dev/\r\nOrigin: https://xrpayments.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 41\r\ndate: Fri, 01 May 2026 12:26:30 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: a9109cd4-d858-41be-a855-465ae64c56e5\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 b5ef788d0f05b31973ca8ae989fe9748.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: R5spQQD6G5DPm-As7YVqP5LpCTDD-xlVs_9LN8ZofomkrsVuUdh6ZQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b31f39030b8d17be620503984c02ebc9","sha1":"8059f1752e33140ef3043261f6a8d23707213db1","sha256":"f47ccb976c1ecfdb596910cd9fc7718a427294374ca9e7fe32a79c4b9db3bb24","sha512":"489f493e27f8eaf4df41f5f32d47c0f4bb1a48485320b46c33faeaf7a3de9fc1ba9d2a5b590fb3955d9ca36c0280b49e636dc87af89a9691c034f1a8ac69a668","ssdeep":"","tlshash":"46900417151cc705c404c4415dc3151c00c13d0117f10755515f0c0c51f077f303d740","first_seen":"2026-05-01T12:26:56.957248Z","last_seen":"2026-05-01T12:26:56.957248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":58,"dns":32,"connect":8,"send":0,"wait":268,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xrpayments.pages.dev/","fqdn":"xrpayments.pages.dev","domain":"xrpayments.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T12:26:28.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xrpayments.pages.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 17:35:13 GMT","end":"Sat, 27 Jun 2026 17:35:12 GMT"},"fingerprint":{"sha1":"5A:A6:D0:BC:F1:04:1D:E9:7E:C2:3D:A8:01:D2:3D:C7:BA:C9:30:35","sha256":"2F:E4:CE:69:35:EE:9B:7C:9F:15:16:37:95:2D:45:59:4C:7D:4B:33:19:96:0F:8C:D3:63:08:1B:B1:DE:E4:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xrpayments.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 12:26:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJlZiOwn3lCl5AbEKBlN%2FSsdr0f3%2Bk%2BCGWLPn1D5anawbJy0oXR%2BprDU4Phvr%2BAEWy9qjuesFGfOCKlpmo%2FByDXPM6nmKzoZPkZK4wVqYNyU3O3zevA6D2sSTfjXgpnpaBVDy8XQaQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f4ec6591cda0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":142091,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (671)","md5":"c1caefd3dc0d8661d6b9904f69286455","sha1":"a3e6a0feb81f015a8d9df4a6314824615f62a65e","sha256":"287d01b980cb8a3a1857be2138265605aa42bb5fd39df2e466a9c716a3986e68","sha512":"9805dd799fda6cfe5393a18f1e080b3dbdd90f50d98397f6cbe6f565b2440a73d7f68c39690e19714b8a76d1ee1730d2eee02dcec01441238c63182b50621e4f","ssdeep":"768:pdN68lrwb+sTpkAzCMMwcNp1hZpq0OXdvVFOaWKC6pQjcnfd2zdPEvYFF74/FTc2:McMMYPXd9AqQjcnAzpEvLWvSyiues0T","tlshash":"d4d3e7b232b510307b57c9ad65ab47963120f007f90645547a9c72e08feeea1dcb3af9","first_seen":"2026-05-01T12:26:56.958821Z","last_seen":"2026-05-01T12:26:56.958821Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":28,"dns":8,"connect":1,"send":0,"wait":177,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@coinbase/wallet-sdk@3.9.3/dist/CoinbaseWalletSDK.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xrpayments.pages.dev/","date":"2026-05-01T12:26:29.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@coinbase/wallet-sdk@3.9.3/dist/CoinbaseWalletSDK.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xrpayments.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.9.3\r\nx-jsd-version-type: version\r\netag: W/\"1166-RVEAXP7KWW6Yzsc0Hun2//+ms+0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 250\r\ndate: Fri, 01 May 2026 12:26:29 GMT\r\nx-served-by: cache-fra-eddf8230224-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1650\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4454,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4103)","md5":"a4c280903bbba1e23c8683b9cb2d4029","sha1":"4551005cfeca596e98cec7341ee9f6ffffa6b3ed","sha256":"5326e2eaab4e4de815614b29e97cf81b971a5575fa70a689e440d245bcecb1f8","sha512":"baff6249ebe2f201b2149bbe46d903c9bc7518a7eff2960e888fd4f9d15591a667509122a2c52b5025255536bb0613ce7d24ab0ada972f03210e9c161553c9c7","ssdeep":"96:GNyEy478xN8cTWOoEr4Pqsmd4mX7figu40HrDR9e3qXMcjB7yj1bstazmFZEPpsM:KyEy478xN8cTWOoEkCtd4kig903RuMMD","tlshash":"b99183c28775751120294acb713373b2e3203956767990f8ba8d0eee95ef785224ac7d","first_seen":"2026-05-01T12:26:56.961578Z","last_seen":"2026-05-01T12:26:56.961578Z","times_seen":1,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":61,"dns":0,"connect":27,"send":0,"wait":109,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}