{"report_id":"966d1ad9-b12e-4c42-9435-648f87356889","version":6,"status":"done","tags":[],"date":"2026-03-04T13:09:05Z","url":{"schema":"http","addr":"lighterliquid.xyz","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.76.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"lighterliquid.xyz/","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"title":"90.0550 SOLUSDT","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T16:51:58.475838Z","times_seen":17873861,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lighterliquid.xyz","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"104.21.76.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T13:09:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":1,"received_data":164294,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.sunx.io","ip":{"addr":"104.18.33.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-02","domain_rank":0,"first_seen":"2026-01-24T13:42:47.155984Z","last_seen":"2026-03-01T02:45:59.753126Z","alert_count":0,"request_count":1,"received_data":6257,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.binance.com","ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-04-01","domain_rank":543119,"first_seen":"2017-12-19T18:31:49Z","last_seen":"2026-03-03T17:22:01.651616Z","alert_count":0,"request_count":1,"received_data":81786,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"lighterliquid.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-28","domain_rank":0,"first_seen":"2026-03-04T13:09:06.969359Z","last_seen":"2026-03-04T13:09:06.969359Z","alert_count":11,"request_count":11,"received_data":2027672,"sent_data":4954,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"stream.binance.com","ip":{"addr":"13.112.53.101","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2017-04-01","domain_rank":283179,"first_seen":"2021-01-29T10:54:12Z","last_seen":"2026-02-26T18:12:25.865798Z","alert_count":0,"request_count":2,"received_data":480,"sent_data":1165,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lightweight-charts@4.2.1/dist/lightweight-charts.standalone.production.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee95eb36e92f7094bd17d692e41ff5ab","sha1":"ad8678fcad8673c8a866421ca0a1aefc1409f62a","sha256":"72f76147b084dbe039ea473cf83974822e587ecd9683a6af67fcfb914bd34b09","sha512":"4f3d4b198dca25e8bfa20f50759f2f7e3a7e44bc37d5b9673d764623d901d20ec43b05d81208f58fa9178ac9c0c26e6d2b96083304908212bf2ada26ee177ba6","ssdeep":"3072:hpWhrtD7bm3ivJLEFFJJLwujG44OvGmOyY0Tw1T2SVwu8QdgY:hportD3m3ivJ4FFJJtjG44sGmOyY0TW3","tlshash":"51f3c6527296f42213f1c6fa14760402f31a7589388b856cb5bdddc73c9988a72bef78","size":163500,"data":"","first_seen":"2025-09-23T01:03:26.274414Z","last_seen":"2026-07-21T03:48:57.420759Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/config.js","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88bf6b32dd2238053e7c0f1b1006f5f1","sha1":"0eb73ca24073ee15d5c75c0983264edb6a7216fb","sha256":"89b45b5957c50ccc479bfabf27d19b017281bdba7aae7b864740bfd5bb1336fc","sha512":"454b1555561a3fb16202100a676c99ce5cd99f9ac3d9a7999bb52ad27cef51f175392670a21ef29dbb3210987d0359ee9090c4a052f25abf104295ee4a82d1d6","ssdeep":"","tlshash":"66f059110fe0460b49291480255e366eb255e16b0f4cfd21796c87545fac22b543934a","size":516,"data":"","first_seen":"2026-03-04T13:09:10.892165Z","last_seen":"2026-03-04T13:22:08.439152Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/header.js","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d77c8f786c7eec77046c2f9a5a6602f0","sha1":"6ec4d2d9d90725a33191839f787d0b78f2d7a513","sha256":"5ed7f4b0816fc1d4f85e0acc6435a6b4ca6b2b68a3f6769cb1d2d8d393653e3a","sha512":"400eaef259f9e184e04cac2fc93a9085317c6c46bc9c6fd27d27c956d551a70bfde62f4a0ec181486fd49e32c44b1256bddb30b06044ee33422835fcf2bea0d5","ssdeep":"192:5KXEH8yn3tVSzQ62hO9wSAnCz5lhagqvbKdkPt6BHfmB6:UXEHV9i3iye6Q8","tlshash":"f01274aa96b32a7542af31bd47df6259373190037449da087f0dcb881fe689091f7bd8","size":9334,"data":"","first_seen":"2026-03-01T02:46:01.654112Z","last_seen":"2026-03-04T13:22:08.435531Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30f392934dc6864181d5d83af2ac3c30","sha1":"b446af0194bb13eb3982117eec274bcd8b89c997","sha256":"e9e57a4e8a13a80fde606100e695a0514ac772497722ff4317f723b06479b4d3","sha512":"be068832fc14f869122c5acab9264904f5573cb05b6fff8f208ec0ebba864040ddb59d4a6b1733e3ff0a7b1d6501ef87f5093956d3e95109c7986c17182db304","ssdeep":"","tlshash":"4cb0118800a3822000b082008a0ba220e20200230802aca0bc0cc2a8af0820b0888382","size":105,"data":"","first_seen":"2026-01-14T17:34:37.706259Z","last_seen":"2026-03-26T00:46:50.274522Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a8b33ddd5476e2b948ba48ecae7aa9d","sha1":"50260fc75e0e1eefece9878d7793f128b5fb9748","sha256":"80e9860df3f293f36c79f17f0bfcd23ce4692ad97d05652d86532d3665e16537","sha512":"b313ae147652e77c829b7099df05df25dc492ddf64c792af91a68962ae2b50cbcfe0bb8fe8321dd7e9c1a51eb3e33a5c410843601ca7a9be968f76aaff9def81","ssdeep":"","tlshash":"a0c012d0d6b0da60992c10da20bc678475a4657d434a508ac2bd99abaa9dec05984511","size":186,"data":"","first_seen":"2026-03-01T02:46:01.685598Z","last_seen":"2026-03-04T13:22:08.458629Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/app.js","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3eef022afb038a701e4388f455f5f48","sha1":"2215b107334a1ae24afbf6e9ac60291e2a58762a","sha256":"e6f58ebb7825f2dcc43d3b78ebb183a299fd64e384808386a2346a4bbc893266","sha512":"9ba7911be2a14743d307f8f8fc1f971dc52a2a5cff650d653538fbd80446bf258026e23a68c81a0574a88a76e86abc0608dbd9324b11e17cf90e9c7ccfed349e","ssdeep":"384:Eb+LOiO5iNwieiA7V6BURRywIR9miVifVF3cJx6Cw5:TfOANNvm62jolENFoc","tlshash":"35a2a4b6a2f724364163717e1b5b5649366460073907ca883f5c87c42fe2b28c6f6bed","size":22050,"data":"","first_seen":"2026-01-24T13:42:49.754193Z","last_seen":"2026-03-04T13:22:08.459864Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/secureproxy?s=%2Fipfs%2FPW1JVLp9OMCP2URd-reZKA62898a14a1dd2f12597736a5d5565e24%3Ft%3D1772629724526","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7bf92211c46b6ace59a3ec8cd65df44","sha1":"49246097d9ea12ce7e39e668ec2b7b8e24f2822b","sha256":"9964d8c97f5255cd8700dc5fd173cbee6ce301e4aec6501e0cc70c99ef34cae0","sha512":"0d94c82832d290b43f4cb1819768451ed50bf8fcaa15e23f633e36328974dfa428f08cfac5c77dbb67ab37f80c76dce40c44528a9523de94505afbf6d56898fc","ssdeep":"6144:fh5gDODJjJJhOb1ntpwro5gxPoGeDtGXsdnrZtF6VHp3JTa:nsE9XhOb1tpDWPQdnrr","tlshash":"c6d4aac8873a967b44a013a7053792bfbfca0d7da24f8c607ac09cd2da6571e92f455c","size":610073,"data":"","first_seen":"2026-03-04T13:09:10.888042Z","last_seen":"2026-03-04T13:09:10.888042Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d99fd66e9871d423b4cd6607a4f8e94","sha1":"758087e77fd87a619ae2de257c0cc558c10b2266","sha256":"6764c45c8c8c4ff89ea931918ab0fa08abcabce11265fbe4c1b2d940715e602a","sha512":"f348c9d09b8eada2b84346d4132240952fba4fbe4f3ae6b13a5aad00ac6552a31db8862d69fab6ef8ffcf8710b46305e8747148f0e7621b33f4310a04ce3a069","ssdeep":"","tlshash":"df319d651af9186d025fd31bd78a5e093c71007f310a42063e2e4bbe6fd043846af6d9","size":1525,"data":"","first_seen":"2026-01-24T13:42:49.76604Z","last_seen":"2026-03-04T13:22:08.460641Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lighterliquid.xyz/header.js","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:43.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"GET /header.js HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:09:53 GMT\r\netag: W/\"2476-19cb5f70f75\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOOXtf04Sua9AgIp9eMMXML2J2PDgDDD6nRo2uF4cNzBeDus0Wfja%2FQzW3RIlgzC7YwDNMnwm%2BbBuyK3wHJikX1RWCt8KG3MXrT%2Baf6Bx%2FSL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711c7e19a0e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9334,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d77c8f786c7eec77046c2f9a5a6602f0","sha1":"6ec4d2d9d90725a33191839f787d0b78f2d7a513","sha256":"5ed7f4b0816fc1d4f85e0acc6435a6b4ca6b2b68a3f6769cb1d2d8d393653e3a","sha512":"400eaef259f9e184e04cac2fc93a9085317c6c46bc9c6fd27d27c956d551a70bfde62f4a0ec181486fd49e32c44b1256bddb30b06044ee33422835fcf2bea0d5","ssdeep":"192:5KXEH8yn3tVSzQ62hO9wSAnCz5lhagqvbKdkPt6BHfmB6:UXEHV9i3iye6Q8","tlshash":"f01274aa96b32a7542af31bd47df6259373190037449da087f0dcb881fe689091f7bd8","first_seen":"2026-03-01T02:46:01.654112Z","last_seen":"2026-03-04T13:22:08.435531Z","times_seen":5,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/secureproxy?s=%2Fipfs%2FPW1JVLp9OMCP2URd-reZKA62898a14a1dd2f12597736a5d5565e24%3Ft%3D1772629724526","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:44.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FPW1JVLp9OMCP2URd-reZKA62898a14a1dd2f12597736a5d5565e24%3Ft%3D1772629724526 HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:45 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"94f19-SSRgl9nqEs5+OeZo7Ct7jiTygis\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=OTBIqfDx25p909vqKFcVVQ.js\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 03/04/2026 13:08:45\r\ncdn-edgestorageid: 883\r\ncdn-requestid: f5dbe6c8b398681987891a73bf586d84\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twHkVsybJe15siAmsLAUnwUEPLUx%2BRqsm%2Bmkjj98RF9f%2B%2FEckPdEMrpjxqRC5A1JyaUdsLMZl7GbIyNPe7KurJFWRxPdM%2FZ7ISXPQRJ4Haou\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711c82593be0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":610073,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7bf92211c46b6ace59a3ec8cd65df44","sha1":"49246097d9ea12ce7e39e668ec2b7b8e24f2822b","sha256":"9964d8c97f5255cd8700dc5fd173cbee6ce301e4aec6501e0cc70c99ef34cae0","sha512":"0d94c82832d290b43f4cb1819768451ed50bf8fcaa15e23f633e36328974dfa428f08cfac5c77dbb67ab37f80c76dce40c44528a9523de94505afbf6d56898fc","ssdeep":"6144:fh5gDODJjJJhOb1ntpwro5gxPoGeDtGXsdnrZtF6VHp3JTa:nsE9XhOb1tpDWPQdnrr","tlshash":"c6d4aac8873a967b44a013a7053792bfbfca0d7da24f8c607ac09cd2da6571e92f455c","first_seen":"2026-03-04T13:09:10.888042Z","last_seen":"2026-03-04T13:09:10.888042Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1142,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/favicon.svg","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:45.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:45 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:09:53 GMT\r\netag: W/\"a4b1-19cb5f70f71\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RX5mhQnSJAgUbw7Ksf9NR2%2BIEoPomG%2BsTWq%2BLZnGaYaKlJJvFMV8aI2Z7SvReKcJFAnzJJYLy%2BqvhtkkJsRpd7YblGRVPMC%2BqEzgRcyHACcm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d711c86286be0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42161,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e70481e21eb43c6955d77ab3606172bb","sha1":"c484b3faa7be2dacbe02746b41e66715fce82f74","sha256":"35149cd1838059affd823ac58fb8a5c19a85dc4d072aa272cefa61b906461616","sha512":"b917fb9df473d62950d53ee1173931f31b5847d2794aa13a33e79882ba85088967698ddc5e1abce76c06d614badcdb0d18a02ae612aa8aba0486d88d0881c275","ssdeep":"768:lJOV9sTjMJ0DnYdBhOq89NbzpcO5N08GEIc5WfVVqQF/Hfrh3kA:3ESjMJGu89Jt5NxWfVVDF/pZ","tlshash":"3613e0e41f29009b3641623b3e268df935ac2164f23d8685f71ed066beec4b41b6d1d7","first_seen":"2026-01-14T17:34:37.681423Z","last_seen":"2026-03-04T13:22:08.446137Z","times_seen":9,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/config.js","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:43.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:09:53 GMT\r\netag: W/\"204-19cb5f70f91\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQmIM4%2FQFak9QK6%2B8rB%2F56OIkGAabfDicvdNL%2BfilJDowKrf17hCJTO1vWwpYn7p188i5pq%2BHIatTufvL7Kyq8tUbQCVvq241O6ycFxRIOlR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711c7e199de0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":516,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"88bf6b32dd2238053e7c0f1b1006f5f1","sha1":"0eb73ca24073ee15d5c75c0983264edb6a7216fb","sha256":"89b45b5957c50ccc479bfabf27d19b017281bdba7aae7b864740bfd5bb1336fc","sha512":"454b1555561a3fb16202100a676c99ce5cd99f9ac3d9a7999bb52ad27cef51f175392670a21ef29dbb3210987d0359ee9090c4a052f25abf104295ee4a82d1d6","ssdeep":"","tlshash":"66f059110fe0460b49291480255e366eb255e16b0f4cfd21796c87545fac22b543934a","first_seen":"2026-03-04T13:09:10.892165Z","last_seen":"2026-03-04T13:22:08.439152Z","times_seen":3,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/app.js","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:43.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:44 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:09:53 GMT\r\netag: W/\"5622-19cb5f70f8e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qekzwdr8AN2ye0Hlw1w0fE4YchOgBo8QpKOA0LbULsLTR8yBQzYlQBhnDLqwMCoXCUUspKfV1X1ogsKdZcMnHGoy7pT0TW1sU4tv7EEXyOLN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711c7e19a2e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":22050,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"a3eef022afb038a701e4388f455f5f48","sha1":"2215b107334a1ae24afbf6e9ac60291e2a58762a","sha256":"e6f58ebb7825f2dcc43d3b78ebb183a299fd64e384808386a2346a4bbc893266","sha512":"9ba7911be2a14743d307f8f8fc1f971dc52a2a5cff650d653538fbd80446bf258026e23a68c81a0574a88a76e86abc0608dbd9324b11e17cf90e9c7ccfed349e","ssdeep":"384:Eb+LOiO5iNwieiA7V6BURRywIR9miVifVF3cJx6Cw5:TfOANNvm62jolENFoc","tlshash":"35a2a4b6a2f724364163717e1b5b5649366460073907ca883f5c87c42fe2b28c6f6bed","first_seen":"2026-01-24T13:42:49.754193Z","last_seen":"2026-03-04T13:22:08.459864Z","times_seen":7,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/apple-touch-icon.png","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:45.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1890\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:09:53 GMT\r\netag: W/\"762-19cb5f70f8f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJF25XKAXAnrV90gWoenDXm%2FkQ1y%2BfhwLuKWni8lnTfBb26N7vglwImPay8y8vAsmRGP8V4pyyitXLvRsDT%2BYJ8iUSp1nJNheAQC4v0wP061\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711c862869e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"b9b4f64d0e801f0035027e8001ce95f0","sha1":"7cee55acdcd8178538c36ac7d03c153ed477a354","sha256":"65ad1c00bf61b7c13318a8145df3040fef00926709d1846a8fffd3465433e3c6","sha512":"7482e3cbc3d49b2d0e712cf1e8e2c5eb47612f6fc34b7f58d5a595b3fa64b003fad9f4c5434897f03551488c2daefc9aef4d8257faf2accb002aee86c826f351","ssdeep":"","tlshash":"024119f31ef0396af8f73531751190e346972244009589d6cb93f3b465827032408e55","first_seen":"2026-01-14T17:34:37.689027Z","last_seen":"2026-03-04T13:22:08.438244Z","times_seen":9,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"stream.binance.com:9443/ws/solusdt@kline_1m","fqdn":"stream.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"13.112.53.101","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:45.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /ws/solusdt@kline_1m HTTP/1.1\r\nHost: stream.binance.com:9443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://lighterliquid.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: JoCp4aHMoaVyzkPK8/vztA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 04 Mar 2026 13:08:46 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 4Kx84sWycqvOzDbRrux/NbAIiWc=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T16:51:58.475838Z","times_seen":17873861,"resource_available":true,"data":null}},"time_used":2583,"timings":{"blocked":-1,"dns":858,"connect":1142,"send":0,"wait":289,"receive":0,"ssl":1156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/secureproxy?s=%2Fjmpd%2F","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:46.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lighterliquid.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1404\r\nOrigin: https://lighterliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1404,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB3wKxAhcADwDAAhMDHQD8Ah8AAgEAJQMAAO8nhn2XtsKCAfZsgZLpmnwFs2OL9mgCAAAowNEnN4e4e93XE3E0c1878WRXrq0vCmhrpX8XwwCxK1hfKrSVqEL9mq00SmRPO4_tYCA_frYT_HF7e-gKP-_5pWyLqQ01wR5TrGNnlxbYOymNdhn3BVWMgH-ewOJcTgvpvy4mhjqlZDtOT8zHFOektiO6gS70paRikBfAbp4BMSBMIWe5TbRKy4EFrwnyJ70TWBRCexQV8QCAluoe0P6yZMjAPa5604ch13wpIaT23fulr_gXdwCyxo0TFXb17lWtg3dh2qENshQiEJ7AhXjiLbHSV__9dBMJ0l2vkFDCh7IlT1oXShaHC65mfgOHt4LMWOJuXsBnlF4RB8atwhzzlkMnrvxWpqLeZ6712cLRQTTlPwKKtQZN0l2ZLxNA9Fz-4AdJYV6CrZmnhtCulz7gubsDgUhVAJpsthxJVkDxKtHmd0m6_vOJA70XUl1M6_UY6l98wE_MWAcdNE5vMZBDYqtuG4FKAMhx_yNZz17rVgtv2PjkmB7XlVqYzSN0Mpn-xAIdotsaimbgatJrNSC-GL6714tdfyM4d5GrMnckUqoeBrIckVXCnKFmeqSZxOaX_45mjAcMBwZpI-3vTDIyb-5T-J4g28VIvuBmBrRWOlPEUpHWLd-bAzx6C74tW3-FFX8CE-NSgX0X-r_CRu1Fm7y6rXRrpQ0_W9iiWufWRAe7-5BbXh9qzOQ6OS9Ley1foGzd1MXKHbH1dkek71t_3HgTYhqw6zDkl4foCTnabiqixj8YXxIvVzENLLbcbRbNQHeUZROYm7aTKsQE05xZEa7Clf9sdYVloWOySxtHsbsLkn7uHWdwwdpaw-dYqGZsGmwrHwiiQxJKrVQCSaymXq7x8YYg0KxH6TzCELvORO-L-T6W73EKALjOIWlNIO8HQ_1Z8fZL-i0gsNezJEdyOst0sSKT2K0by78bnXlYhspF3c9JI8FWZVCbF4dhEaSmp4Ebg5FZ4dGk3pDJykQ8so913InQnaMH9lt6wm9QP9XwfiZucJGL5jBVpLNipEB1IDLbPR5jFsft6XWw8FP0ew_NONrwrU03-fkvxKaUdX415mywGWygjg_CK2dfhVfZdSVR8wA2DuIHKMcQ\",\"challenge\":\"eyJpZCI6IjZTcHVxR0g2S0xZY0RjZkZXQ05aY3ciLCJub25jZSI6NDUzLCJoYXNoIjoiMDA1NTYxODI3MTlmY2Q3YjFhZTY1ODZjYjZlNjUwMGY2NDliMWFhM2YwYjE5N2JjYTFhOTVlMzYwZGRjOTIyZiJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 04 Mar 2026 13:08:47 GMT\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9998\r\nx-ratelimit-reset: 1772629786998\r\ncdn-proxyver: 1.47\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 03/04/2026 13:08:47\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 40eefa91b170dd7050fa99820939578d\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VHweVPfeyfV15LLST5IeQ9%2BoZTlD%2BDA5XDrZXJjVPz%2BtN%2FcTA7YNskN2NxZ26rZ5bxq0wC0CiwLBKr0S1KahawPnZTR8sg6N8utXYyAp5vCl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d711c906837e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T16:51:58.475838Z","times_seen":17873861,"resource_available":true,"data":null}},"time_used":839,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":837,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:08:43.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:09:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vncbvk95Wz7FZOWbWhXHSfu%2FHfzkKiOKwVy8ZQKKhJjF9%2BphY86G9QAiRYW0PCnimJpvAPbsDc0n4agHeve6mzfjRkoh9tCxOuXHtoZ9Uxmi\"}]}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d711c7aadd0a106-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":267671,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (540)","md5":"9dac8ea37eeb73a4c68c68bdf7fd6b4b","sha1":"4ca7026664f5c1fe6693cfacfab596a375e269e4","sha256":"8c29a5023dfcb8c51999d8aa893197d37d3baac7f6e6bbb7555ba9f135c5f1db","sha512":"4aad18a9b696e9178c6486cf9e429ac1f27253ab29276e73bcbcf0a84f6a11d50155bf10ddc5e711b95b23bfebc01080c2d085fc96a07a982dbb6f9957394767","ssdeep":"384:nyXGwPL3w24hV4uixCQtayAm8dU/MOganZLuO8BWkfUzhJmyuER2ZHiiJb0Vo6nZ:nyWwP7n4h5zAa8U8xds9T30Z","tlshash":"f344cda038f156d1a1f6c3885831a62a768af67bdc4e41cff35ca6d5cbf5cc1880b694","first_seen":"2026-03-01T02:46:01.650255Z","last_seen":"2026-03-04T13:22:08.433649Z","times_seen":5,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":54,"dns":22,"connect":8,"send":0,"wait":365,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lightweight-charts@4.2.1/dist/lightweight-charts.standalone.production.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:43.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/lightweight-charts@4.2.1/dist/lightweight-charts.standalone.production.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.2.1\r\nx-jsd-version-type: version\r\netag: W/\"27eae-B7KRKeiG3UnAd6R/sYFZqEDxr8I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 131934\r\ndate: Wed, 04 Mar 2026 13:08:43 GMT\r\nx-served-by: cache-fra-eddf8230222-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 52018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163502,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65349)","md5":"ee95eb36e92f7094bd17d692e41ff5ab","sha1":"ad8678fcad8673c8a866421ca0a1aefc1409f62a","sha256":"72f76147b084dbe039ea473cf83974822e587ecd9683a6af67fcfb914bd34b09","sha512":"4f3d4b198dca25e8bfa20f50759f2f7e3a7e44bc37d5b9673d764623d901d20ec43b05d81208f58fa9178ac9c0c26e6d2b96083304908212bf2ada26ee177ba6","ssdeep":"3072:hpWhrtD7bm3ivJLEFFJJLwujG44OvGmOyY0Tw1T2SVwu8QdgY:hportD3m3ivJ4FFJJtjG44sGmOyY0TW3","tlshash":"51f3c6527296f42213f1c6fa14760402f31a7589388b856cb5bdddc73c9988a72bef78","first_seen":"2025-09-23T01:03:26.274414Z","last_seen":"2026-07-21T03:48:57.420759Z","times_seen":14,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":72,"dns":40,"connect":13,"send":0,"wait":41,"receive":17,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/pages.css","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:43.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"GET /pages.css HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:44 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:09:53 GMT\r\netag: W/\"3419-19cb5f70f79\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0VnirvD620043C%2Fdko4ak%2Bn8FpAV0WNCdtfxVabGG%2F64UAJHf1FxC%2FNQ2zYjcn%2Bq1z8oWn1%2FzMp8xy2KibfcMM4TkIyxZEtTP7teD8qMnha\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711c7e19a6e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13337,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"dd2e079b6e40063aee115b00a0627efd","sha1":"2896173de7bfd1dce0db2e987b0df4b1f9a7af51","sha256":"2b368de3d6e5cfb8f72b1e46c1913a11e710f06c118a15b9cb223110b6b884c6","sha512":"ab2deeaa03fba029f884d52f9a02ff03d9fc92b0d47d520cbc67db9b69d6ab03ee866f36d025ce2de6a6ab1c1637db4abce69e7005e3c2b28106cfaaa1301f26","ssdeep":"192:SxaKYVTLL6oKH6tQPJ2mY6jlsS9OnRSpkro93QlgoWwYMQlLMSgHFjaWLb7cUOKR:SctK6mNuZrNcUPNuU","tlshash":"315221969aa31a91b92bd2586ffbcb47739c9003c00dca7d7f89315c4f8d2e99461f48","first_seen":"2026-03-01T02:46:01.639991Z","last_seen":"2026-03-04T13:22:08.436407Z","times_seen":5,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.sunx.io/v4/dex-web/static/media/iconfont.e4bb62ac.woff2?t=175611939961","fqdn":"static.sunx.io","domain":"sunx.io","tld":"io"},"ip":{"addr":"104.18.33.108","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:44.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunx.io","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 17 Nov 2025 07:41:51 GMT","end":"Tue, 17 Nov 2026 07:48:06 GMT"},"fingerprint":{"sha1":"C3:38:CE:54:D9:B4:D4:4D:30:3E:87:D5:FD:C1:5D:B3:6F:1B:7B:DD","sha256":"02:15:41:B4:2B:BD:0E:83:80:F4:DC:16:C4:86:93:40:67:86:C2:44:55:60:85:10:8C:06:97:01:26:C4:90:C3"}}},"request":{"raw":"GET /v4/dex-web/static/media/iconfont.e4bb62ac.woff2?t=175611939961 HTTP/1.1\r\nHost: static.sunx.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lighterliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:44 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5472\r\ncf-ray: 9d711c835d2e2efa-OSL\r\nx-amz-id-2: i+elOjAPWvIB9i0MSlGJcxiQa4nAjmIy4QvupnQZFqWnU2FGxVh7tDoKDo3BcRA55YPq/4PMe22wuGnMnqTieb0hIaI1dyWB\r\nx-amz-request-id: ZMNZYH21QDD82ZNW\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 22 Dec 2025 09:34:46 GMT\r\netag: \"1ff2f88a3520270ce105b4cff2e7081e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536009\r\naccept-ranges: bytes\r\nexpires: Thu, 04 Mar 2027 13:08:53 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5472, version 1.0","md5":"1ff2f88a3520270ce105b4cff2e7081e","sha1":"0f4a6c2d71a09dcd074b48041e2db5277953fa7b","sha256":"ed8213188571271eea055881888de429eafbff90baf97eaba172c26617310aae","sha512":"ec3e149fcf1020b113406f88968a1de084b9be18614a750f932057da346cde67a028af18a99a227e56d685226b808efc78e7f125146dc0b7d28153496f2aba5a","ssdeep":"96:Z9apJKIKnbnRXIiuk752NSKtvaYSuTgbO8oNuHnSJDS3v1b7gQ5sK:Z9apgvbnFDD75cSKghbH+uHShS/13gQF","tlshash":"74b1aeeef806d9fcc08652a528459f54b16cbf2296e0efcf73c9c94a04f9a43609c558","first_seen":"2026-01-04T15:09:29.619522Z","last_seen":"2026-03-04T13:22:08.453852Z","times_seen":9,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":69,"dns":42,"connect":1,"send":0,"wait":183,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.binance.com/api/v3/klines?symbol=SOLUSDT\u0026interval=1m\u0026limit=500","fqdn":"api.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"3.167.5.231","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:44.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /api/v3/klines?symbol=SOLUSDT\u0026interval=1m\u0026limit=500 HTTP/1.1\r\nHost: api.binance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://lighterliquid.xyz/\r\nOrigin: https://lighterliquid.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json;charset=UTF-8\r\ncontent-length: 22294\r\ndate: Wed, 04 Mar 2026 13:08:44 GMT\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\nserver: nginx\r\nx-mbx-uuid: 80ac9b2e-a42f-486b-8697-8cc698cf644c\r\nx-mbx-used-weight: 2\r\nx-mbx-used-weight-1m: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'\r\nx-content-security-policy: default-src 'self'\r\nx-webkit-csp: default-src 'self'\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\naccess-control-allow-origin: *\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 677df3933c00907ecb7cdafc768e98fc.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Vvofzx46gyZiwKqp3vxEupF9HRkbMWjNL1dRWtDp5jmMWIwsOWlr8w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":80861,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c092f198d7deb18ac38d994d5d84101c","sha1":"fe12ad346baddad6bdd3bca7965031ffa5f81f37","sha256":"46a1b66c2edce8cce2d9dcc29bcbce50faa1864ee12d441cbaa2c68ab83029b7","sha512":"1f7d5f8d86d705cc13488d8c834c29aad911d7bffa445c3ef3205db8772885e192e664839ce35a143b8d0e169cea44274d33bb0afa46e7f0dc8a0c8531f5810b","ssdeep":"1536:4RLJghGosqGFELO7ZUOrVo9CcG2hhhOdWtw:ZhR07","tlshash":"d683b66117958354fa7a886937d2f8e2596b70ab9cce0cd4ed936e2e08f50723bcd311","first_seen":"2026-03-04T13:09:10.903158Z","last_seen":"2026-03-04T13:09:10.903158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":53,"dns":40,"connect":1,"send":0,"wait":248,"receive":239,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/styles.css","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:43.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:44 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:09:53 GMT\r\netag: W/\"5948-19cb5f70f7d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5wbnHXURsiesApE6tIryxKuP3zQ3xELi7AK62awxbj49haVAbFr3widwFNIBihmfh%2BWrGpfUyS7cP9mm5xsUDc6CdgtZ9GH%2BoblOM0xIpDcR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711c7e19a3e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22856,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"c8850366ba03280d0d469475f6f79983","sha1":"52d3fea8433620a3f8b8786c8ab879abb14c43c4","sha256":"1bf1481be1d2a7cd66027268e160ad845fbd7b7949d809e3e03b2580515f5961","sha512":"92fdf4af3344298ee48615e297518af8b1712283557df448290823b8e59c2eea78699f57f929f812414496d95f7e01f8c31186731b55db2b39306a4a6f21ed78","ssdeep":"192:s697dAXYyo9bvKrB09Xjrisu9TzhK8zJjWcxn3tRsDYIqZVpzqqcFXUO5PDcm1TB:Nyg77FAubkz+FhJ1mpK","tlshash":"38a26410da4618467133e3a8eff3470df7aa5027c206817e7bdda2594fb52a885a5fcc","first_seen":"2026-01-14T17:34:37.702705Z","last_seen":"2026-03-04T13:22:08.445396Z","times_seen":8,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lighterliquid.xyz/styles11.css","fqdn":"lighterliquid.xyz","domain":"lighterliquid.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:43.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lighterliquid.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 14:23:59 GMT","end":"Sat, 30 May 2026 14:23:58 GMT"},"fingerprint":{"sha1":"EE:6B:96:83:75:99:96:7E:F9:C5:5E:86:A1:4F:C8:F2:57:AD:8D:4C","sha256":"27:B7:F4:45:20:29:D5:B6:97:51:F9:12:FD:28:FB:4A:B4:B8:AC:B2:AB:0B:90:61:8D:E0:1F:36:49:86:45:DD"}}},"request":{"raw":"GET /styles11.css HTTP/1.1\r\nHost: lighterliquid.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lighterliquid.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:08:44 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Tue, 03 Mar 2026 23:09:53 GMT\r\netag: W/\"fa8c1-19cb5f70f89\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YHKTbYgIRzsMF65Vpmj2xkNUNHarLNmgVa8vWWfbd%2B8%2BTt8JR3Rtpe9mc%2F6sv751QhB2SW0bEzqlvTM0ODlT9%2BW4auzZoIhuGL2Mb9YQ4Nzi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d711c7e19a4e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1026241,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"b86a42a380f39297b86cae367a2f24b3","sha1":"03553a2af505786e1877a2911909d6f9e5a7b942","sha256":"e073858b3201392f5f373c007d9edde39a974b75370c1ccfc0c1c578fa51db9f","sha512":"ef650f29d68609d3c8df7a81adbb7b15510270dd8772ac45ba497b0bc9a2af1d34bf047426f0e5dbebd10781782c6c9033c0001389026f5998f597af61b1ec2d","ssdeep":"6144:pFj4DGkLA4Acb5rkdvp/ku+azUcVL/845Xylyr86mBwYRYq3XhbPQKxpPbzUq6ud:NXyKmBwYRYq3X5PJsuKTuGvzYSMN","tlshash":"e6259320eb17126722378f39bbe95605fb14a4238e0616bdf7c4a11c4ff95b85692f8c","first_seen":"2026-03-04T13:09:10.906419Z","last_seen":"2026-03-04T13:22:08.439968Z","times_seen":3,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"lighterliquid.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"stream.binance.com:9443/ws/solusdt@depth20","fqdn":"stream.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"13.112.53.101","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://lighterliquid.xyz/","date":"2026-03-04T13:08:47.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":"Binance Holdings Limited"},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /ws/solusdt@depth20 HTTP/1.1\r\nHost: stream.binance.com:9443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://lighterliquid.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: lsnrW9tVjH4ZctieCQUrGw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 04 Mar 2026 13:08:47 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: m9bbK4clwdXTOgnNYOVrVAEMgQ0=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T16:51:58.475838Z","times_seen":17873861,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":0,"dns":1,"connect":279,"send":0,"wait":280,"receive":1,"ssl":287},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}