{"report_id":"90a7a9fb-69c4-44a8-bd09-3059af240fee","version":0,"status":"done","tags":[],"date":"2026-07-26T12:52:24Z","url":{"schema":"http","addr":"snapshot-stable.xyz","fqdn":"snapshot-stable.xyz","domain":"snapshot-stable.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"New Private Tab","dom":{"size":4247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"653a915299de5df3d30c1db778f2f629","sha1":"f82b280d26b70a490ef5ccd9126022906fb4bf68","sha256":"ac5e8b6a0e99b08dd28d112a7d822a3c03da7d3cfce0dac36b999edd85625be1","sha512":"66a4bf23c7e66a9715b46c6e30edea8778a9bf1bd6a3294044fc0b01f9bce230359f2edac662ae81651deb0aa85b15bbde7b67f3b18d3f836e72656d8b663b6d","ssdeep":"96:DJFs1Bx13gb61j1l0x7gx10UFZV4jl22D+i8kDNLeOl:H61rpRmULV4jM2D+z0sI","tlshash":"749162a444f5663b18a386a9e9d07f47af817607ce8d29417baf00e31f87d54886f20c","dom_hash":"domhashe55c5b0a9b0c37e90d2a11b31f2bc448","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"snapshot-stable.xyz","fqdn":"snapshot-stable.xyz","domain":"snapshot-stable.xyz","tld":"xyz"},"ip":{"addr":"104.21.78.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-30T12:52:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"data-image-svg--base64.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"snapshot-stable.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"stable-app-47643.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-07-26T12:52:24.183994Z","last_seen":"2026-07-26T12:52:24.183994Z","alert_count":0,"request_count":1,"received_data":594,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-07-26T02:35:00.635862Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":590,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"data-image-svg--base64.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-05-12T17:14:21.516492Z","last_seen":"2026-07-23T03:12:00.270182Z","alert_count":7,"request_count":7,"received_data":126921,"sent_data":3694,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"snapshot-stable.xyz","ip":{"addr":"172.67.219.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":607,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cca-lite.coinbase.com","ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":2742073,"first_seen":"2023-08-12T20:47:03Z","last_seen":"2026-07-23T13:25:17.67264Z","alert_count":0,"request_count":2,"received_data":2342,"sent_data":1072,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"stable-app-47643.b-cdn.net/","fqdn":"stable-app-47643.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":true,"md5":"33286ff94f986f04221b64404ceb6782","sha1":"cf7598dec50b861e625e19d7473ed2df9152b300","sha256":"c81402569b6fd2536c584d3c88d1bb5e9081d8ce8d499d8a26c0dc70ca6144cc","sha512":"e9790418a63c51047798573ea4d9bfff60a00ff7e1bef6b42e51bc8cb989b2ef53752600ac97f7eb7c6770b4372fd0c436ae3da8ea9dd6ba72a033ecf549d353","ssdeep":"","tlshash":"bd015927222233707cd9d5dca8b6d98e39bb500ae40a0090a08e844c1834bc544f7bdc","size":843,"data":"","first_seen":"2026-06-08T13:08:16.104529Z","last_seen":"2026-07-26T14:21:50.079505Z","times_seen":338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"v3.1","filename":"https://fonts-css2-sans.b-cdn.net/index-3731bmtv859.js line 1 \u003e Function","line_number":3,"column_number":2206569},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj76 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.16614860609607607] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj77 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.785070317608e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj78 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj140 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process7//obj141 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj142 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj143 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj144 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj145 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj146 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj147 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj148 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj149 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj150 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj212 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process7//obj213 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj214 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj215 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj216 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj217 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj218 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj219 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj220 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj221 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj222 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj284 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process7//obj285 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj286 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj287 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj288 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj289 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj290 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj291 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj292 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj293 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj294 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982},{"level":"error","text":"Error checking Cross-Origin-Opener-Policy:NetworkError when attempting to fetch resource.","filename":"https://data-image-svg--base64.b-cdn.net/assets/index-0b64b1a4.js","line_number":3,"column_number":556},{"level":"error","text":"Error checking Cross-Origin-Opener-Policy:NetworkError when attempting to fetch resource.","filename":"https://data-image-svg--base64.b-cdn.net/assets/index-0b64b1a4.js","line_number":3,"column_number":556},{"level":"warn","text":"[Reown Config] Failed to fetch remote project configuration. Using local/default values.NetworkError when attempting to fetch resource.","filename":"https://data-image-svg--base64.b-cdn.net/assets/index-511fa38d.js","line_number":374,"column_number":32366},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj302 class:HTMLDivElement contentDomReference:map[browsingContextId:3 id:0.16614860609607607] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:div nodeType:1] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":13399},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj303 class:Date extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[timestamp:1.785070317608e+12] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14498},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj304 class:Function displayName:value/this.func extensible:true frozen:false isAsync:false isClassConstructor:false isError:false isGenerator:false location:map[column:14772 line:1 url:https://cdn.jsdelivr.net/npm/disable-devtool] ownPropertyLength:4 parameterNames:[] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":14875},{"level":"log","text":"map[actor:server1.conn0.watcher16.process7//obj366 class:Array extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[items:[map[actor:server1.conn0.watcher16.process7//obj367 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj368 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj369 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj370 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj371 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj372 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj373 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj374 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj375 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object] map[actor:server1.conn0.watcher16.process7//obj376 class:Object extensible:true frozen:false isError:false ownPropertyLength:500 sealed:false type:object]] kind:ArrayLike length:50] sealed:false type:object]","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":15485},{"level":"warn","text":"You don't have permission to use DEVTOOL!【type = 6】","filename":"https://cdn.jsdelivr.net/npm/disable-devtool","line_number":1,"column_number":7982}]},"http":[{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/send-bb23cecc.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stable-app-47643.b-cdn.net/","date":"2026-07-26T12:51:58.882Z","timestamp":1785070318882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/send-bb23cecc.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://stable-app-47643.b-cdn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stable-app-47643.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 12:51:58 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50192a-8313\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:58 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/22/2026 01:48:35\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bed264c8426b47a51d624f926f67b506\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":33555,"size_decoded":9700,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1859)","md5":"9bb6134ab8668105bd6b354bf395e69f","sha1":"fde54db9036e967ef1f9a39ef23f86c7f17001df","sha256":"a4945bcef122e828a6bd3ea350424a8c3c5d81624702d31e086362bca68d14b5","sha512":"ac764a071be886c56b849d01b45c74e13711ecf9b7e13d94bc6b8dc4f3647db552ccc2b152a8713d204e67af5b8452d4d3fcb0b0d4ee8b055b37dedc9472a13e","ssdeep":"768:HaYsioM0DBzIaErALdwmBwfZmTLsRCjeHu+DJd4XwMPzGiY623a7vl6CcT16I8:6YsN9zIaEUXqt4XzPzGB5K7N6CcZ58","tlshash":"73e2c69033fa281d2aa791ad99e65e0053215017c11cc5fefaece2f18fa9e4248f7770","first_seen":"2026-07-09T22:10:07.023006Z","last_seen":"2026-07-26T12:52:28.163257Z","times_seen":5,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"data-image-svg--base64.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/swaps-5640d306.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stable-app-47643.b-cdn.net/","date":"2026-07-26T12:51:58.872Z","timestamp":1785070318872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/swaps-5640d306.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://stable-app-47643.b-cdn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stable-app-47643.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 12:51:58 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50192b-d97f\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:59 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/26/2026 12:51:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f45a7b57ae0f7b2e31dc4d101e0c93fa\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":55679,"size_decoded":12871,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3371)","md5":"d71f6fd8184d27fdedf5e99b25175003","sha1":"2f93a90ce3e43121e1d2371719fd0dd85223b9ef","sha256":"fac57804502bdd39d7bc04337b55be59a0ac892f42b02385fa9aa9ebc89fd326","sha512":"fcb6a061addbc76f3e17044a21ae60bec5aea609f62ecb588706a22fd81da7d42095920c41d6038f74051e72b9106c748189b58e47bfc8ac7a681c6cf34ec97c","ssdeep":"768:wUsJ3ry4n2cdAfJl5N7FK54PXYAQMpUGOE/G67sFRuo2T2XxCU+NBf5am1X5Qkm1:YY47dAfD5u4/J6GOJ67sFXXxCj1XO","tlshash":"7f43c99073b6285c7956a2adddeb8d005322d00bc019d9fdfaec42e18f95a4b19fb371","first_seen":"2026-07-10T15:56:03.046495Z","last_seen":"2026-07-26T12:52:28.164879Z","times_seen":4,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"data-image-svg--base64.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"snapshot-stable.xyz/","fqdn":"snapshot-stable.xyz","domain":"snapshot-stable.xyz","tld":"xyz"},"ip":{"addr":"172.67.219.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T12:51:46.870Z","timestamp":1785070306870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"snapshot-stable.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 11:47:59 GMT","end":"Thu, 22 Oct 2026 12:44:11 GMT"},"fingerprint":{"sha1":"DF:07:D4:F7:CA:E8:3B:57:F0:85:5F:A7:AF:83:DE:09:74:C1:AA:28","sha256":"CB:93:D7:45:98:50:46:0E:91:58:E4:AB:EE:4C:0C:57:01:0B:DD:B8:83:AF:76:92:4A:DC:40:16:2A:07:13:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: snapshot-stable.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 26 Jul 2026 12:51:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nlocation: https://stable-app-47643.b-cdn.net\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MKOh27IANEtvaC8IjQOU2pPsKCXhQIOwkgRbJJPQT3RXsE5tkRC5yspYbvyROPkKAeVwqI2rSYWPTUL1Lf2zeekR1wjIcA5bcA61DebCKOUtT7QTat6QaLfKWZ%2FqnJHpaw68uhvY\"}]}\r\ncf-ray: a21389aaa96eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T19:51:00.720151Z","times_seen":17549342,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"snapshot-stable.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/receive-ba048af1.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stable-app-47643.b-cdn.net/","date":"2026-07-26T12:51:58.885Z","timestamp":1785070318885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/receive-ba048af1.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://stable-app-47643.b-cdn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/assets/index-511fa38d.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 12:51:58 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a501928-19fd\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:56 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/22/2026 01:48:35\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5d500d25d4ec25d39a6f48dc08e2304d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6653,"size_decoded":3496,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1038)","md5":"22baef097fbc936a24879952b84f7c9e","sha1":"707c37c225a773e76bf50f1ec2de8c5e1cd0ae01","sha256":"4fbf8bb8dac342e66abd3a4dc18206ec46c19a3ef2f598abcdb40be4736330b4","sha512":"0c95dbae4a7c3cbd4d408a27e6dc6d3584c5a4ca6d311c0a609490267762a681999a2dc1d81582da611a9c1e0d541a5955629108046fd6d4fd254a6460909c05","ssdeep":"192:WsH9KKjVyeIWuIevxqeOlFhlmpqWF+yNX:WxzvIGDOlblmpqWF+yNX","tlshash":"b1d1c64559f6389db903e05c1aab9a00c131100b852dc5fdfafc93e5cfe9a4689ef722","first_seen":"2026-07-09T22:10:07.02384Z","last_seen":"2026-07-26T12:52:28.167561Z","times_seen":5,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"data-image-svg--base64.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-25e89062.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stable-app-47643.b-cdn.net/","date":"2026-07-26T12:51:58.884Z","timestamp":1785070318884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-25e89062.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://stable-app-47643.b-cdn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stable-app-47643.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 12:51:58 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50190b-fe0\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:27 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 385\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/22/2026 01:48:35\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f078cf115bbb60b3cc97ec93a5200ad5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4064,"size_decoded":2642,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"211467039f78c96c9e544fdf2cf7ffb4","sha1":"1cd4fa45f4110f1aa58dfdb9bc9b89bcd041432c","sha256":"6953ae0065c467f8d8e0af58c88fdcefa55e7ef173022741ea84efeaa36d4d43","sha512":"e993e082a1138b7b009cebeade7b8b8a9f8e01981087761a3345a59016d2160a35fd03c59b57d691ada2cab1eaa2518bf152d42150cea709786e3b8e84fac60d","ssdeep":"","tlshash":"3981b4857335e911251a896467fb8206373a50274511c0ecb7cedaf44fbfe459b71b70","first_seen":"2026-07-09T22:10:07.011171Z","last_seen":"2026-07-26T12:52:28.168656Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"data-image-svg--base64.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/SwapController-2e16b6f2.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stable-app-47643.b-cdn.net/","date":"2026-07-26T12:51:58.874Z","timestamp":1785070318874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/SwapController-2e16b6f2.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://stable-app-47643.b-cdn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stable-app-47643.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 12:51:58 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50192a-396b\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:58 GMT\r\ncdn-storageserver: SE-582\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/22/2026 01:57:04\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 393bd80d7ceeaea23356508e666cbfb8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14699,"size_decoded":5557,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14698)","md5":"8c77fb655311df29aaac9a646cd45743","sha1":"06ca5136e975b3b97ef6fd51172dc063221c36ae","sha256":"76a2bf277b519f749984dbe72f018ece0ffb3509450e3179377c1b75f95f1b25","sha512":"a58a249a2b5b83b2fc5973bd6f73bfd1f559bd4b8d326b2e415629ea81144370cadee866fda7bf752dae75a195e8fa724bff93a1b7484f52645989887172b8e8","ssdeep":"384:3tEUnUFX5mq2YlqWfVgGVd9MYpah3KXMiyV27m1OyT3On:9JnUFJmqjtfVgGV4Oq8pE27m1OyT3O","tlshash":"8d628466b3617172b31db588a6f6032011163cd4d86ef4e8f4ae16e30bf159f1adb931","first_seen":"2026-07-09T22:10:06.994283Z","last_seen":"2026-07-26T12:52:28.169856Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"data-image-svg--base64.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/index-7f66dcb1.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stable-app-47643.b-cdn.net/","date":"2026-07-26T12:51:58.875Z","timestamp":1785070318875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index-7f66dcb1.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://stable-app-47643.b-cdn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stable-app-47643.b-cdn.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 12:51:58 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50190d-1228\"\r\nlast-modified: Thu, 09 Jul 2026 21:56:29 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/22/2026 01:57:04\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5c6799fd2dc0166778200a8e36ae4d28\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4648,"size_decoded":2527,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (654)","md5":"f78df1add79b2e2945f630d9fdefde1e","sha1":"d3bf73b457c30f12090a1846c3334491f2bcf934","sha256":"1c318dde583524906cf2cdce691b0d3928a70bb62ac02657c4a71b6dba2da23c","sha512":"ba948679615eb0334e9d88179d6e7e0a6d0e9a0bd7145e182a893446adf5ed59cffd26e0630907fecf6eaab2caa6302e5078b7f1a4a0a0e16885af3d2550a1aa","ssdeep":"96:1Ps7o9KKKPhXLcK/RWbAoIlWY2vPUlCrwBdgEThTJ/U55Veg:1Ps7o9KK8ZMY2vchaC5c7eg","tlshash":"70a143d22dba26293951d099ae6b8901e321c007d21ddebdbddca1fccf59583147e722","first_seen":"2026-07-09T22:10:07.096931Z","last_seen":"2026-07-26T12:52:28.171073Z","times_seen":5,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"data-image-svg--base64.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://stable-app-47643.b-cdn.net/","date":"2026-07-26T12:51:58.927Z","timestamp":1785070318927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 04:30:46 GMT","end":"Tue, 13 Oct 2026 05:30:25 GMT"},"fingerprint":{"sha1":"0E:D8:37:32:73:91:42:F6:80:4F:1C:67:0A:B0:01:C0:AE:CF:19:90","sha256":"B4:80:8C:87:51:99:55:65:54:72:08:85:A0:C4:23:34:16:B7:0C:64:08:93:44:91:51:5A:C9:70:94:C0:04:FD"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 3012\r\nOrigin: https://stable-app-47643.b-cdn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stable-app-47643.b-cdn.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3012,"data":"e=%5B%7B%22device_id%22%3A%22de2c18b5-2e37-4c72-9706-f2e80a6b8fb9%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785070318810%2C%22event_id%22%3A1%2C%22session_id%22%3A1785070318871%2C%22event_type%22%3A%22perf_first_contentful_paint%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22measurement%22%2C%22duration%22%3A4029%2C%22vitalsScore%22%3A%22poor%22%2C%22deviceMemory%22%3A0%2C%22hardwareConcurrency%22%3A8%2C%22isLowEndDevice%22%3Afalse%2C%22isLowEndExperience%22%3Afalse%2C%22serviceWorkerStatus%22%3A%22supported%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22page%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785070318788%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%226569252d-e747-43d8-a643-0a9813c2e1a0%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22075c7441-cdf3-45af-adaf-d6fe4d10bcf7%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A1%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%2C%7B%22device_id%22%3A%22de2c18b5-2e37-4c72-9706-f2e80a6b8fb9%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785070318871%2C%22event_id%22%3A2%2C%22session_id%22%3A1785070318871%2C%22event_type%22%3A%22provider.request.started%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%22e06ca4b7-9a13-4f64-a80b-491f79ba1f29%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fstable-app-47643.b-cdn.net%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785070318788%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%226569252d-e747-43d8-a643-0a9813c2e1a0%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%226569587d-f8b6-4d96-b577-98c3408267a0%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A2%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1785070318872\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=f95eeddacccd04e1196ddc2c26d1f6dd"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 12:51:59 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 8315282185150158883\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjHGIvvKTJaO0YO4Hbsdb0Q6j1fwrjzwsA4H%2FSUkKB1g9HMtc%2FC9ZM8Ql6p1u187NrZWAPmaLcnGxttyhx%2BwPNwMs22WWvlUbDJuKaQu1lJwG8G7OU%2BRpT5OsFEcG7gDgi8oVrMhFQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=dd9b27c3-8ec0-417d-8cca-db6c72bd5cc4; Path=/; Domain=coinbase.com; Expires=Sat, 26 Jul 2036 12:51:59 GMT; HttpOnly; Secure\n__cf_bm=bYw1rlCf3X.LbYinpbz38i2.EBuLj3FBQ7Gx_PtwTUg-1785070318.9477952-1.0.1.1-P.uW4ULqRrTiyK3PPVKcPtM6R_ocHlXsr__Hy2LpjmZxBikIDW2ftQneY1QVt.W.gNul5AZEa1vU1ZpKbyGYwenwMyapX2hCj3wxwEkWhYpa5Dvw6iyZguLSdQGqw67I; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Sun, 26 Jul 2026 13:21:59 GMT\r\ncf-ray: a21389f56d933181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7,"size_decoded":1171,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"260ca9dd8a4577fc00b7bd5810298076","sha1":"53a5687cb26dc41f2ab4033e97e13adefd3740d6","sha256":"aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27","sha512":"51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7","ssdeep":"","tlshash":"c0400003000000c000000000000000003000000000000000c00000000f0000000c3000","first_seen":"2023-04-05T04:46:42Z","last_seen":"2026-07-26T19:30:13.351008Z","times_seen":35918,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":129,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stable-app-47643.b-cdn.net/","fqdn":"stable-app-47643.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T12:51:50.323Z","timestamp":1785070310323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stable-app-47643.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 12:51:50 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6218584\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sat, 25 Jul 2026 15:01:10 GMT\r\ncdn-storageserver: DE-635\r\ncdn-fileserver: 1353\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 07/26/2026 12:51:50\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c4cee6c078805a4fbe64a7d5435f74de\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T19:51:00.720151Z","times_seen":17549342,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data-image-svg--base64.b-cdn.net/assets/transactions-624ba669.js","fqdn":"data-image-svg--base64.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stable-app-47643.b-cdn.net/","date":"2026-07-26T12:51:58.886Z","timestamp":1785070318886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/transactions-624ba669.js HTTP/1.1\r\nHost: data-image-svg--base64.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://stable-app-47643.b-cdn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://data-image-svg--base64.b-cdn.net/assets/index-511fa38d.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 12:51:58 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5832674\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: zstd\r\netag: \"6a50192c-3aa\"\r\nlast-modified: Thu, 09 Jul 2026 21:57:00 GMT\r\ncdn-storageserver: SE-583\r\ncdn-fileserver: 584\r\ncdn-proxyver: 1.58\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 07/26/2026 12:51:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c2a4b040acc72abb0310ef1ed5c1064c\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":938,"size_decoded":1546,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (407)","md5":"a7e0812244493eafd4727d833005275b","sha1":"68e88cee5a29dbe102200ce09fb444c9efc8c017","sha256":"9a9a574755fd51c5bd977bf9c5ea92c0fb0082bf072cd39e7f8e35f66d3c1032","sha512":"b6db2b0dc33e73802e9109cf27a421241b8487b2a1ccb25a70e0e4b247d85181f813cba48b68a18af77ee70ce17c95bd2acc0c66aa11c29a6401d8b88c9e2452","ssdeep":"","tlshash":"0c1121a52065aaf824c322916aa396026006c46b4bbdd092779d97c48f0c2dd0cd329b","first_seen":"2026-07-10T15:56:02.98074Z","last_seen":"2026-07-26T12:52:28.173029Z","times_seen":4,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"data-image-svg--base64.b-cdn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=2ae562535b08b12ba6692b8e12a6b84c\u0026st=appkit\u0026sv=react-wagmi-1.8.7","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"172.66.157.155","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://stable-app-47643.b-cdn.net/","date":"2026-07-26T12:51:59.137Z","timestamp":1785070319137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 22:00:21 GMT","end":"Sun, 06 Sep 2026 23:00:08 GMT"},"fingerprint":{"sha1":"27:B8:7C:0B:CF:77:D5:0D:0A:B3:4F:D7:38:61:AE:D8:E7:63:4F:1F","sha256":"04:00:B5:75:D9:C7:C6:62:04:D2:5B:C1:7C:57:38:72:C8:FE:89:2F:06:E7:FA:3C:F9:B9:B2:F2:92:33:BB:2F"}}},"request":{"raw":"POST /batch?projectId=2ae562535b08b12ba6692b8e12a6b84c\u0026st=appkit\u0026sv=react-wagmi-1.8.7 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1974\r\nOrigin: https://stable-app-47643.b-cdn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stable-app-47643.b-cdn.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1974,"data":"[{\"eventId\":\"91a1893d-a53a-4e53-8f7b-9ee55e6364a6\",\"url\":\"https://stable-app-47643.b-cdn.net/\",\"domain\":\"stable-app-47643.b-cdn.net\",\"timestamp\":1785070318757,\"props\":{\"type\":\"track\",\"event\":\"INITIALIZE\",\"properties\":{\"networks\":[1,56,100,137,43114,10,42161,42220,25,1088,122,8217,4689,30,40,2222,1030,324,2020,1101,1116,1111,14,7777777,8453,59144,5000,169,534352,204,34443,7000,4200,81457,252,196,13371,200901,223,60808,1729,6001,167000,7560,1329,1625,1135,33139,42793,48900,480,2818,1923,146,177,57073,2741,1868,80094,130,1514,232,239,9745,2345,98865,747474,43111,999,88888,4326,16661,50,4114,4217,124816,143,988,2366,4663,369],\"metadata\":{\"name\":\"\",\"description\":\"\",\"url\":\"\",\"icons\":[\"\"]},\"projectId\":\"2ae562535b08b12ba6692b8e12a6b84c\",\"themeMode\":\"dark\",\"themeVariables\":{\"--w3m-z-index\":999999999},\"features\":{\"email\":false,\"socials\":false,\"onramp\":false,\"analytics\":false},\"defaultNetwork\":{\"id\":1,\"name\":\"Ethereum\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"blockTime\":12000,\"rpcUrls\":{\"default\":{\"http\":[\"https://eth.merkle.io\"]}},\"blockExplorers\":{\"default\":{\"name\":\"Etherscan\",\"url\":\"https://etherscan.io\",\"apiUrl\":\"https://api.etherscan.io/api\"}},\"contracts\":{\"ensUniversalResolver\":{\"address\":\"0xeeeeeeee14d718c2b47d9923deab1335e144eeee\",\"blockCreated\":23085558},\"multicall3\":{\"address\":\"0xca11bde05977b3631167028862be2a173976ca11\",\"blockCreated\":14353601}}},\"featuredWalletIds\":[\"c57ca95b47569778a828d19178114f4db188b89b763c899ba0be274e97267d96\",\"4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0\",\"ecc4036f814562b41a5268adc86270fba1365471402006302e70169465b7ac18\",\"fd20dc426fb37566d803205b19bbc1d4096b248ac04548e3cfb6b3a38bd033aa\",\"971e689d0a5be527bac79629b4ee9b925e82208e5168b733496a09c0faed0709\",\"c03dfee351b6fcc421b4494ea33b9d4b92a984f87aa76d1663bb28705e95034a\",\"1ae92b26df02f0abca6304df07debccd18262fdf5fe82daa81593582dac9a369\"],\"sdkVersion\":\"react-wagmi-1.8.7\",\"siweConfig\":{\"options\":{}},\"caipNetworkId\":\"eip155:1\"}}}]"}},"response":{"raw":"HTTP/3 202 \r\ndate: Sun, 26 Jul 2026 12:51:59 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a21389f6bce03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2832,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T19:51:00.720151Z","times_seen":17549342,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://stable-app-47643.b-cdn.net/","date":"2026-07-26T12:51:58.943Z","timestamp":1785070318943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 04:30:46 GMT","end":"Tue, 13 Oct 2026 05:30:25 GMT"},"fingerprint":{"sha1":"0E:D8:37:32:73:91:42:F6:80:4F:1C:67:0A:B0:01:C0:AE:CF:19:90","sha256":"B4:80:8C:87:51:99:55:65:54:72:08:85:A0:C4:23:34:16:B7:0C:64:08:93:44:91:51:5A:C9:70:94:C0:04:FD"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 1613\r\nOrigin: https://stable-app-47643.b-cdn.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stable-app-47643.b-cdn.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1613,"data":"e=%5B%7B%22device_id%22%3A%22de2c18b5-2e37-4c72-9706-f2e80a6b8fb9%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1785070318877%2C%22event_id%22%3A3%2C%22session_id%22%3A1785070318871%2C%22event_type%22%3A%22provider.request.error%22%2C%22version_name%22%3A%221.0.0%22%2C%22platform%22%3A%22Web%22%2C%22os_name%22%3A%22Firefox%22%2C%22os_version%22%3A%22134%22%2C%22device_model%22%3A%22Windows%22%2C%22language%22%3A%22en-US%22%2C%22event_properties%22%3A%7B%22action%22%3A%22unknown%22%2C%22method%22%3A%22eth_accounts%22%2C%22correlationId%22%3A%22e06ca4b7-9a13-4f64-a80b-491f79ba1f29%22%2C%22errorMessage%22%3A%22%22%2C%22sdkVersion%22%3A%224.3.6%22%2C%22appName%22%3A%22Dapp%22%2C%22appOrigin%22%3A%22https%3A%2F%2Fstable-app-47643.b-cdn.net%22%2C%22appPreferredSigner%22%3A%22all%22%2C%22auth%22%3A0%2C%22component_type%22%3A%22unknown%22%2C%22platform%22%3A%22web%22%2C%22project_name%22%3A%22base_account_sdk%22%2C%22locale%22%3Anull%2C%22session_lcc_id%22%3Anull%2C%22time_start%22%3A1785070318788%2C%22has_double_fired%22%3Afalse%2C%22session_uuid%22%3A%226569252d-e747-43d8-a643-0a9813c2e1a0%22%2C%22height%22%3A1024%2C%22width%22%3A1280%7D%2C%22user_properties%22%3A%7B%7D%2C%22uuid%22%3A%22f4acf5e7-3a57-492a-851f-b91700a0c925%22%2C%22library%22%3A%7B%22name%22%3A%22%40cbhq%2Fclient-analytics%22%2C%22version%22%3A%2210.6.0%22%7D%2C%22sequence_number%22%3A3%2C%22user_agent%22%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0%22%7D%5D\u0026v=2\u0026upload_time=1785070318878\u0026client=c66737ad47ec354ced777935b0af822e\u0026checksum=652532b358a9e152ce97fc82043ccf88"}},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 26 Jul 2026 12:51:59 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 2302888008482475375\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUOW76D7IVEMCFlFJCqLJBZz2gcSTwMCt3d1vGTtCfwP6PPmH4Vr8Xsg5uON%2FIHs%2FAOBXlhOEhv0XMh4ylwMo%2FRxGpVjQ5xp8mJmo%2F7lkUzvETsnSyUZZG36tiaoVHFHGJ6MDvkmlg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=06a16ba8-d286-4ff1-b599-cdfa253e2a3b; Path=/; Domain=coinbase.com; Expires=Sat, 26 Jul 2036 12:51:59 GMT; HttpOnly; Secure\n__cf_bm=Cob_Zl455cwjPwgO2_Mxivutc9kVkKhhUrD5CbY6wck-1785070318.9484005-1.0.1.1-8raAcMAzmTHG.9fVrT_jkqcQ1V4LL4Es5Ik60Hs3fJiobjBAYvLEL_tNAsT2K5rEfxFJPtXpoS4wvMQwMfcgyoLvJCGEhf2kae2GJ8SV4bbt3dhQ8R4aM2gWMVTM04O3; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Sun, 26 Jul 2026 13:21:59 GMT\r\ncf-ray: a21389f56d993181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7,"size_decoded":1171,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"260ca9dd8a4577fc00b7bd5810298076","sha1":"53a5687cb26dc41f2ab4033e97e13adefd3740d6","sha256":"aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27","sha512":"51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7","ssdeep":"","tlshash":"c0400003000000c000000000000000003000000000000000c00000000f0000000c3000","first_seen":"2023-04-05T04:46:42Z","last_seen":"2026-07-26T19:30:13.351008Z","times_seen":35918,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":1,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}