{"report_id":"9f73aa20-e852-44ef-99ce-04fe1ddbf3da","version":6,"status":"done","tags":[],"date":"2026-03-26T21:03:15Z","url":{"schema":"http","addr":"xai.protousd.com","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"76.76.21.22","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"title":"Bridge for USDC","dom":{"size":33307,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26691)","md5":"96842d31a90e6349350780fdcd1389ea","sha1":"3f0b1786e4cbcf48869ed438f565a15934ee9a97","sha256":"d82dd112a289cc8ed9e18f78a0e4683413d4b1227fc80fba25a6a09111d8962d","sha512":"3e864a936270c2ed5830d55cb76d43cac0e623f293dc6fdbe37debf1dc7c33bb2696d5fe670d524ee00646322734e893776256a3919fed11ba528e22867ed5be","ssdeep":"768:KSjWkud56rSJycDcM0CzRQdiY2Zn09c90Vy7CGUDkBbejd0r10xk:3y4SJycDcM0CzRQdf2NR8yGGjwd2H","tlshash":"b3e208f5c204cc0b957b488d70b9ed1e500eda66cf648a9cb39ec4512bd3cba0ef2599","dom_hash":"domhash827689dcfbfd8162844284b87bf21f39","first_seen":"2026-03-26T21:03:23.487481Z","last_seen":"2026-03-26T21:08:55.807211Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xai.protousd.com","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"76.76.21.22","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T21:03:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"arb-mainnet.g.alchemy.com","ip":{"addr":"141.95.45.19","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"1993-03-24","domain_rank":3047661,"first_seen":"2021-11-24T13:15:09Z","last_seen":"2026-03-25T15:24:28.437792Z","alert_count":0,"request_count":4,"received_data":1508,"sent_data":2200,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-22T22:23:33.61086Z","alert_count":0,"request_count":1,"received_data":530308,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"xai-chain.net","ip":{"addr":"172.67.73.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1701442,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":2886,"sent_data":2024,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"scan.vialabs.io","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":22071,"sent_data":1805,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xai.protousd.com","ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":32,"request_count":32,"received_data":2262705,"sent_data":14642,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/main-app-a844c0b17617f688.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4448a617c5f7a37cffe958f285c6597","sha1":"ed8325bfcff566f5bd60abd66a8e16e679db9e23","sha256":"2980712a82fe4a999576030728eb19153c1a8c68ea28c5fc05f55bb93a5d29ef","sha512":"29208b96f44b1eeddcba73f6ff02a0ba774e169a7128544564d09b226af1c2bcb36d40b8f6e60685302fff1d005d55347052e97e9e6794727a5377e7c9a3e82e","ssdeep":"","tlshash":"edf08999260cb02f3d136d30fdd79d2e645d817034a79d542a05dda12c7366893f1c78","size":474,"data":"","first_seen":"2025-06-18T14:48:44.904782Z","last_seen":"2026-06-13T15:25:55.920675Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/4938-5594df91a60941fd.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"751ebc408f59a7400982e4cc30955634","sha1":"3e64e24d89e31811db82c89be1fbde050b96cdf0","sha256":"31fda6d8ce0e20cbea060b582417979e9513bdd87b1a69c7497ea1c7e1f8969d","sha512":"f5cd4062f96eadec67a823400914118cbcdd163d7deecf096efe9a1f545277a25b4fe8eba72e7c1d90ef1a91097e759262e364386e2d9a88009fcf6ea8227c8c","ssdeep":"768:3JZAvfw7ErwbKLdwXiJLmJ+pwyibNX5CX6qv6I6/c05aDNZpPj+F9f2a/Xcz1Q8x:Ziw7EGSWowyibNsX9/6IPj2UKYIpwjB","tlshash":"74a3d7b672d0f8e1079744a5843f400af3751d3e146f74a0a3e6ccd9baa14de91a3f6a","size":104728,"data":"","first_seen":"2023-12-29T16:32:38Z","last_seen":"2026-07-12T13:18:09.403105Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20c205d010d57834f7b6b0096ea43f58","sha1":"40c36b4c032984e94cb653cc7ccf2edfd0550f61","sha256":"48f3bc93ee337bb4e3958e1b66439b323dbfa9234fe6f74e21ab7b55bf5ce6d8","sha512":"beef2568e4bcbdf4a6bb9f5d8a8a9da556047be8723fddf1f72fc17c6025ede2bd8e66a79a7546fa137ddacd193c99c6391179d6bf2bee5c8714c1b06e632713","ssdeep":"","tlshash":"09e0ab3c911d110f00a225fea15b8ce93e33a8306a53ca02f559612a0032f87f586c75","size":435,"data":"","first_seen":"2026-03-26T21:03:23.523314Z","last_seen":"2026-03-26T21:08:55.864099Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-05T18:08:20.22197Z","times_seen":100380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"79ed4852228b7b9665186e2d4760d0c8","sha1":"097e3ed84c7354ffd985e28c04cef05518057335","sha256":"9412e827b712af0472dee105de90c747d2edc2b8b43a113feb47c4076d2670e0","sha512":"922032d6f9b7c22de5594a2548c28e6dbddbaa23623f5e464abcc4ceac48a62b4e626417335c9ca3c6c2881652808e425e969c27740fe036795e20e6031854ab","ssdeep":"","tlshash":"ab800470c0500c57407111131c3c7001015c505c010005401353f345151317d7705d4f","size":37,"data":"","first_seen":"2023-03-14T19:20:49Z","last_seen":"2026-08-04T14:53:38.464775Z","times_seen":5214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/410-d79a4effb3ef4ba6.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d20b82e4bcadf43edbe8065153dac9","sha1":"e21c3ef14a3198bbc9c8564003ab94efc61e396d","sha256":"01c56245f9b4314284f2f8131421e8dac1bca6c6557b1101f0f165e2adb98e75","sha512":"27313974dafb4665eeddd5680d16ff514f5e2e741bc75aea2253c2517376893123ec2d8e557b9bb7172b28f4608f5f447978c9448a07745c3745ca0a44775bbc","ssdeep":"384:tA62fb5J+PQ4mPOAAYKYGqS6n6TtmQPLxo:+b59dAJTtNzxo","tlshash":"35b2c7f5f29d318c03a618f6348ba215a12d9a44c20d009ff6a5d8ebb5f559c47a3f3b","size":24142,"data":"","first_seen":"2026-03-26T21:03:23.509342Z","last_seen":"2026-03-26T21:08:55.856029Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c9a0ed8ba768ade9602f92d6bbf5bca","sha1":"eb4783f704d068453229cb020908bae91b668385","sha256":"fd57ce8963491a14eb9e22ae903f8d5c419424ee6894fefacea2638aa0d13c4d","sha512":"5bc4515cc652e8d540c8848c3527dac6cf4886ea0105839e2d64b98100eaeff614d6e48fd52c7417d7b7b2656dc37e940eab66ab3c6121c81119d6891d12fee0","ssdeep":"","tlshash":"d3d02b48f546ece58c21a80e103d0e10d0cccd3c92b4548853eeca82c0a147c178d989","size":260,"data":"","first_seen":"2026-03-26T21:03:23.525206Z","last_seen":"2026-06-13T15:25:55.964727Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/1799.2e4af6b81553c523.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47caebdf778092accaafe524bfc320d5","sha1":"e26e51a714adab6960841ef2c044f5e05072adab","sha256":"8156ba03a7430d141cb74932061cdee22663af4a1a67d350605ae65894f4b1ba","sha512":"0ef496b133fe122f09ebdc78355924dbf58e89efd4fffb273721130630872c1bc4fb1a66f0f017ed41c5a0e01e0935fd180d6aafdaa5162d77beb97b01f6a909","ssdeep":"384:LhgIOWgvaTLvmHVsWOJG6bmO+f8Nig57H67pAGXSDXxTvyNFCruJX7kc:LhwtSntWOJDbmO+f8NiEwdXSDBFruFp","tlshash":"86e29688f391b03603926296146b550ff279ea6d644c149cf290e4f628fa8dd94fff78","size":33003,"data":"","first_seen":"2025-06-18T14:48:44.905655Z","last_seen":"2026-06-13T15:25:55.929693Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/6273.855cd1a493c7488e.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfd1afabe3fe5ce82232de87683f22d1","sha1":"f268ff9d062c996eec9922da313cbac13861febc","sha256":"905a0e17d2209f7dbc8f5d336fafc97538363d5d038ce73ba65bd81c605bd4dd","sha512":"43003b8560a75ccab3ba07723d16b08127bf9dced6a8d3dbbe05e241cdceee6a53ee79b8cc7156b8021395f318ff47dcd807add85b707caffc16a46a017e51ae","ssdeep":"","tlshash":"7431519135c8b6e07b0be360cc148566f89528effd25e29c6a1154a2bd1806d728ccfd","size":1574,"data":"","first_seen":"2025-06-18T14:48:44.871728Z","last_seen":"2026-06-24T14:08:30.836581Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/3487.4cdecf4529e996a6.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24125e1658e515866ad7c77073e9fa4b","sha1":"8ebc8265138256594f903ad5e3839e569ed654e4","sha256":"474411dedcb1c43a159a378a32c3a79587651883714976e15e4de5a32b5f8ee2","sha512":"79b12556ba5f32a3a3b6a165fbddd452e33dbcb86f7fcfb2aacc7bd9b569dd843ec11ca519a6175c77448f55d4c73070b151a040cf27b5d63482d5cce8cf2e50","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVE2:LOCO11D2qYzdyz2","tlshash":"2882ed9b8728d94e6e6b8ff8ffdcb4d9332c30e5221e04d4116e616291a359feb41d81","size":18090,"data":"","first_seen":"2024-12-30T19:43:52.659121Z","last_seen":"2026-06-24T14:08:30.838793Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ad52eb78bc23f2a7f3936035053c046","sha1":"98f0dbf5526fba396806ad86713e6063ada27f17","sha256":"fb3db76a1b40d8dee734d859c664171c5be3669a0c4a171b07d386b660899efa","sha512":"99e17dce670cded808ccdd71b29f154e796ab959d4aebf5e3c53016ee65e7d691f3f7b819981b98189b66b06090d5e2f1a2d7a3b4023445de2471714b0c9a936","ssdeep":"","tlshash":"acf046aea105fd143ca6dd06057f2e7b994cccb20779e6a89a4de99b005253f0344806","size":582,"data":"","first_seen":"2026-03-26T21:03:23.52624Z","last_seen":"2026-03-26T21:08:55.869405Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/3641.6f9cc9081f78d8d5.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4332f182767d8fdad703c4a7f22bd42f","sha1":"0a473babea4549442912006d50ea51e6f13941d7","sha256":"1999595ac11071e82329eb3976fc6f03b3b6c99eba41707dd5aacaac08efe7cc","sha512":"620899b01a8173d50a32426ac74fab7c0d30a2fb26823dbd80ac33e5925ca5c2c3ced318408525aa39a27bd8367993bfb4b220beef582be0f6fb395be329834e","ssdeep":"","tlshash":"7af08be96690bd004b4f06f4cdbd5489717778ee6a8853dda3720124b92106e750cfb8","size":569,"data":"","first_seen":"2025-06-18T14:48:44.870786Z","last_seen":"2026-06-24T14:08:30.832277Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/5931.355d71e759cb8541.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8dedd331f316451703da4eed25dae97","sha1":"6cf62f6a2c87ab0458cb27137dae522acbd76565","sha256":"ace4afcf75964f78a0b3570309c3a7ef4ff44bd24ed32d6750bc94759fadd082","sha512":"64338b765faf0b502b7de940eb393ac56a0617f2cca76d223dcd1513ba8d9f1b47c3ad78e40f40cafd73a9eb68a475382b916d536cb6d61f75d5842eeae5cd49","ssdeep":"6144:XTaIUat6ke460CSYzXEFA6Y6XCFbYEyc3ddjCUWXAgaW3QHL6keNTyDyfWNSmQUh:ura6w21M8","tlshash":"4f740a9933a2f47643da5169943f120af3395868240d802cf778fcdfb96c999922bf74","size":367789,"data":"","first_seen":"2026-03-26T21:03:23.511528Z","last_seen":"2026-06-13T15:25:55.942825Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/app/%5B%5B...slug%5D%5D/page-a9e5f1f8aa990e91.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5066abd95934de89f17898891917f57d","sha1":"49d2961f456b3d3c3f66f8130409b0cbf873e574","sha256":"11edffa258e33b6bec1499142884e4c91c921661a17c8c685799c02aca4904be","sha512":"e841e58ff7562181c823379e691503c4f3add84015caadabb46e050ecc5613a41b88bd14079a6712bbc74b7bceeb324d6296215ec28fc4ffbb3800134ea535b3","ssdeep":"1536:ospv9Ofqf/oLaB+xO+zFKShpzKmVzZsWeMKT:o7fqYL/5kSTnXeMKT","tlshash":"ff63e850f1466bbca56b84ec696f401c711e9f98c61e48b9f1fc7c7222844c8ba93bdd","size":66988,"data":"","first_seen":"2026-03-26T21:03:23.5032Z","last_seen":"2026-03-26T21:08:55.841918Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"92c8e55f42fc7b502c83f14901b1ecaa","sha1":"48c706040c739f927316d26f8b3ca112baed8c94","sha256":"6e1f301e7625c9b46093a28f6d32ce03f371aec024de2d65a15d8b41fc9aeaf5","sha512":"aa4f3f50f36afe01a006a2f043f933b7b632bead8056a1a93dc6338186b4b2d8d7839a682f9316b29740417920947c423aa1202c2adda3249c288b111f83b4f0","ssdeep":"","tlshash":"7ef0f05ea100ec013da7dd0a057b2e3ea90de8b24ab9e5bda95cd9ab445247f0318c96","size":580,"data":"","first_seen":"2026-03-26T21:03:23.527107Z","last_seen":"2026-03-26T21:08:55.870865Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca38d576336aa7c66e86dd5c1b624ac0","sha1":"06012c0b9fbd72f822f6f6e4961ee041fb727f6f","sha256":"1b0201a29d56705a3c1f55e178435f3267d2179ebaec21e434b2f42799ebaf90","sha512":"9538f416f96deee3ff758ed310925e24ab9654166a152db8c17be97a339f965bf8aa79b94cd3a8f8d30c4aea2dc996edda6086c4bf0fb4372e706799ebfd932a","ssdeep":"","tlshash":"90e0ebeeeb00fcc83823cf02447f2e15448ddcb900b8d828210dd12f9025e7dab80846","size":308,"data":"","first_seen":"2026-03-26T21:03:23.527899Z","last_seen":"2026-03-26T21:08:55.872239Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/1874-f5420b150e7097ff.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40116a66b9ddf10aa0fc3c3784ce07d0","sha1":"c6a0dc892b73e0888412b6b0c1139bf0683ed20c","sha256":"45e4d25816ba245a308c97f912ed0b421946e2abfbd14813265dcfad0a488bbc","sha512":"793649186d1ecf7d10dfbff59ba4ce9eea2b275f65b25641fa7ccc04da2bbe9cd57d722b4f4e5cc3671ce843acb263e97a74d73e6fe240f4bb3f763cfdef673f","ssdeep":"1536:p9ioR3dheJTJ1mgajzUAh4miGaSD4ZJ2ECJpSIGeU19gGV01J1G9oy9hU9vWzUXb:p9iV+UAhPLiC69SpsUX4rQEt82IDxWJ2","tlshash":"0e1409a5b361b075938b9199d07f0605f33a2998301a402cb7bdeccb696498972f7f3d","size":200709,"data":"","first_seen":"2026-03-26T21:03:23.520992Z","last_seen":"2026-06-13T15:25:55.910774Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/9749.19971cc7108c1127.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79c2dcfe3f1149eed42eadddac675406","sha1":"64b26ab346ffce9a29e8588f6ab433a9509ee5cd","sha256":"7c3ed9e67b2b35c0498426d443b908094faf71cafa43359dd53b9fc190c0dcba","sha512":"f69773c9de06a4030ec0e6fbb1af69f84c8b4d7a40a85dd5b8e9e3818875dc47890ab171aef89aa8718a1c7f8b6b64220407544107db33755be024e6304b6c12","ssdeep":"","tlshash":"9a71fed59a3dac3be92dc1cced811420710daabfdc894a5272639fef9d784856c4c670","size":3772,"data":"","first_seen":"2024-12-30T19:43:52.710783Z","last_seen":"2026-06-24T14:08:30.846555Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/1276.56045f68cf375cac.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bd8974f162d3b022737bd68ff3a9fb6","sha1":"cf4bdfc00dedde53dda33143a6f6c3b1754782df","sha256":"37822ee44919308dadfa16a1e6724d3ca83b57c4d700e3046b1bb8b56cb1a900","sha512":"86229f42ca722c7fe38ba0c382c5581259fffe5ba481717ce27fb35ec86aa59a25ba0ee166ec4ad1f1e2bb5822bb2f677754c6cfcabb6db9a336842e6ca9adc5","ssdeep":"192:K65yAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7Ms:KhiN2Qjw+FWjARaidSpx7Ms","tlshash":"fd1283ea5768627de89bce6cdf668850130d70fd35b8c8e49a9ecf686057889fd87010","size":9401,"data":"","first_seen":"2024-12-30T19:43:52.732927Z","last_seen":"2026-06-24T14:08:30.839456Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XFMNRH22ZH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b5a303dd552bbec84678fff2f67df0a","sha1":"77b38a42d92b876623719fb8e07f6a6349c74ff4","sha256":"b618f2f4e2706143931ba38110f9b9693e0722c1e51d51a63261ba1e48beef35","sha512":"f83595336308c219186c4100acd917d2b5812ed2263daba3c85533bdb6158491fe03ef7de11e2db008547d61c79acb78629b486e3a9520c0af7ac90d1564ab81","ssdeep":"6144:pcORj7FRy9rJl3FXUIzs8WVud1W+rwkQdoKQYRFohMZEIeHslc:fRyhJlWIY8l+dGhMZan","tlshash":"53b40bceb3d674625296f478903f01cba97b29e2b45cc8aaf099cce02d3455a4177f78","size":529702,"data":"","first_seen":"2026-03-26T21:03:23.498364Z","last_seen":"2026-03-26T21:08:55.857523Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/3022.a7d2a1831973543f.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"629417f85b95d3bfd5771e0f830dda31","sha1":"499e8c3c09fd0b45b126b563b8ba15a65719a2a8","sha256":"ae8189a4ea91cac405e64edf8e7e6b3e046e2b3dee4f0dc7bddf25127a0eb843","sha512":"b7114ab934e7787c29f64f6d6b0d2ae6b334ba08213444cc8878a9b2f53cc2b813ac79074df7ade75b796668b9b7568a4b41567c55aa5b43da19b16f41dff2ba","ssdeep":"","tlshash":"eb01cba5b2c8f804296bd335503c1ae0bceb229c6d1e921833900b0afc3005e48d9ebd","size":724,"data":"","first_seen":"2024-12-30T19:43:52.762621Z","last_seen":"2026-06-24T14:08:30.867922Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/webpack-3710b816ddaa36a8.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"09e332cc44e745cd02910816d1bd2900","sha1":"090746ef66cb817a0f9fab279e6ca4f59c15cf81","sha256":"d77b7a575b82d9e8804b831a1a50eb6ac518ea003bd2fcc0b0f450e88a247849","sha512":"8b794249c3e11388159e45da1045ce47e696830075271d547f2c05bef3510a9adce5b0c9aa695d723a3642d97d1e027f8a60c804bc9cb246df935c472507cda5","ssdeep":"96:novEgqeQnRqR3tyAZe81lDmPA2dU3xXRFV0scVzZrVq2UiPQoDUYAbYKP6pZxh:NgSnwR9ysAPA6UjFabWifDUXYKyLxh","tlshash":"1fd1f8ee7294f8a52b6710a1583f8861f22f7472681e98f0c75dc4b4ac70c698637f94","size":6184,"data":"","first_seen":"2026-03-26T21:03:23.494028Z","last_seen":"2026-03-26T21:08:55.833609Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5c8e7e7e28ad8256c0334bdbf68fb94","sha1":"04b48adf370a300b57f050e4b040831a53983239","sha256":"3eacb4b9906b6dab7d5c115c01e520028f79eef39627ec82ff5c0bc143fa9ce4","sha512":"c6f35bc49b7f7d2e7bfd05e048d86b036f5a37135cc8843e919bb5ca1c92b706f59a0a87589ac1013d49b97d5bb0b65899788580402db0aab1624b60eb4770d0","ssdeep":"","tlshash":"4471ce3e6805dd4bec6d3d5a027eac3654cc897b4bd5dafcc699ce040a4247927dadc0","size":3613,"data":"","first_seen":"2026-03-26T21:03:23.528712Z","last_seen":"2026-03-26T21:08:55.873628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/5087-855e901d4d5773c1.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"af6bca7f569bb99740868fc02dfd749a","sha1":"d872131e833db0632805ca38b54e90a2db58ee38","sha256":"905c3f267254e75395cc20377ecb94352a9f3dd9b33788e8650f4e711c08d555","sha512":"eac0a7894106e5e6592d1b0ed580db750892fb75f2f474081d78dbf32274a4ca9a273c018d840c83272da376f96dc80bb0ff0e8c3c25bb09b28630bc89be3710","ssdeep":"384:Hf2hn1jlkxD8EpDa/1C8/zR/mJGHQv6vvwzFiN4N/M0P:wl6pS17zVmwHQyU","tlshash":"4e9209e57392f135174780aad5bf4255f33a1909380e001cb2a85ceab517dcae2b7fb6","size":20502,"data":"","first_seen":"2026-03-26T21:03:23.504017Z","last_seen":"2026-06-13T15:25:55.945554Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"26e305ecfed005fd0f7a3e4e7a9956b9","sha1":"4992141e78acc14c44bcca8fc260e95a76bcbd6f","sha256":"4802da130a1dd2e2f774d80edb4465b60f413a69d8f4745f644b3e32f80cfcc9","sha512":"412ea640f0307c5cfe01f54085e2055ca72837b831754429f35112ab9a1ec696a3887068ab44196722562ababf537d555844c36630773255c1dbb1385678d71a","ssdeep":"","tlshash":"292183e2dd10cc06c7456e552c793cb830ccc7698559e69fd1a9c93486c7d34adf4a52","size":1352,"data":"","first_seen":"2026-03-26T21:03:23.529495Z","last_seen":"2026-03-26T21:08:55.874842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/5883.e4477e9126daa625.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c38237a840f4fe2ec98612c55298d6e","sha1":"1c0726b093d54270fc84e65eec6d88ae5dad5180","sha256":"d6cf178eb693ebb1bac8a3903e2a081b114fe58dc5af96a5ba40940450ab479c","sha512":"f6b376b77ef121aea159970266087041c3943408dfa3843b989627f8662f92a4c5e66aa748a0f4644b9e82edfba3c3feb6f875f04c0baacbb56f3ca49c284c81","ssdeep":"","tlshash":"6da0120a70823c253d3f24880ca3052119bc0c6b3824c0c5a4210440043551c0201c8e","size":86,"data":"","first_seen":"2023-05-11T09:51:53Z","last_seen":"2026-06-16T12:49:08.422975Z","times_seen":130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/app/%5B%5B...slug%5D%5D/layout-ee0e61911f8b7f8a.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5e3ca8c09a4ee36179fcd4d289623fd","sha1":"ba107cec36349624ee794bb6929600316ad93526","sha256":"083e61ce6bcf72d5bee8dff17a248d69bb971f3244c6f6e472831e5513f6c519","sha512":"dfeab11179863b064dc7e5e2ed0b73558b737f3f75a0bd1ea1fb887cd4fe1e7b1db4ea1172a494f584c32a6180f3c73e9951cadc313f31c496a6df4b1e5ad76a","ssdeep":"96:CyE2ukLQmkImKzPQQ6lhyzh8FXXKzOqoc5eeRgxDlwKIvY8LLoFZdvosi6:3d25RqQchr1RAlwXvY8LUfdo56","tlshash":"50e186957081bdacfaab0cd89a6f451c311e6a94c60b0c74f9bcbc32271a9947653fcd","size":6776,"data":"","first_seen":"2026-03-26T21:03:23.496395Z","last_seen":"2026-03-26T21:08:55.850261Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/fd9d1056-93b277276f7f5cb2.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b2becb0f24eea0d9016c42e08a93f38","sha1":"3e8a3ff134e8fa781ecb8abebd9f4970ce88a96c","sha256":"7d500719eea5afddb210d8dfdee54f78e5c3f9fbb07efad3e3262994a3f3e2b0","sha512":"cc6b752bd061815393e2388aed7e7efedfdd2937d5115af051e949ca4fb8325df7813a85227eb21800fdd0e6f820643b7dcdcd302f5ea43d85f8cdd72a544b19","ssdeep":"1536:HOjfUgTQBsC4dxpzcNdT+T0d2tslQ3qWnVImZsArX9WERiAQHOK9b3gxTCBq/GzB:XCQBzjkYwxaQbIERQ73YCBl","tlshash":"49f3e8e83955f6626eb2127700af1803737c262b280d4d60a211fd9eb5b845eb17bfdd","size":171904,"data":"","first_seen":"2023-12-08T20:59:26Z","last_seen":"2026-07-22T02:16:56.829778Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9df2474492ffb49fdf4963bc8c510f2","sha1":"be5eb8e63b16a8668780577ae0080dfbbc2250b6","sha256":"09dca6a1005d91ab023ef9cd23be87a49aec81f68a86db9943b1d51e3b537cb7","sha512":"a8aec8ef56782f412e66cd214f885fed8299a7876854badfbf207a5e49d1f39772daf9d0ee58199842d3a7f23cfe67aa2ccef0c8e13d24c1169cd371934b5d0f","ssdeep":"","tlshash":"8e800470c0500c15c031405314341105017d400d000007005350d74450111455545dcd","size":34,"data":"","first_seen":"2023-12-22T06:09:48Z","last_seen":"2026-08-05T17:26:51.522416Z","times_seen":3019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/2479.6dfcea7a8ee684d8.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"38493b69325be19acfa3e6707cfbaa6b","sha1":"086657e85dec05a9f806cc16ebc4da27f278b246","sha256":"131dfa535ae6c26dea88a45bc3bc2bed2cf6a9939bc7555a8e964197c4d6f74f","sha512":"07e9fc05b91edc42d37fd3c2ebdef2b2fc0beca7dbf13e53316baf57ef8901a291c3f9afa729b399785638a0c9fa9bb1ee81771b462a8d44070ce5df236aee30","ssdeep":"","tlshash":"0d31f1ef37e422f4d017b3a3d016902a7edb24ba7b29df8546174ad0be0185d2498d79","size":1639,"data":"","first_seen":"2024-12-30T19:43:52.719295Z","last_seen":"2026-06-24T14:08:30.842819Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/7601.df391f6f993887ee.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fab34df4e2f2daaec780043b456ca5a2","sha1":"43d9c67f639a9444a8d5261d932e9f68f3537b79","sha256":"19d39ac79674b37f80f124f40d59fbc9f8d62e4d57e563a435c5ac309e0ba4af","sha512":"1ecf85eadebbf848d769def883ef29c5219658822f1fe1ed2c8b0394064e54778b072b3b0320b4675d8f40717fbf301c46a8c9bfed53178a2d6c7c2be18dd2df","ssdeep":"","tlshash":"39011276f15cf49cd91e82a8ecaf58e3224921e6301e8254786c492aa5354cf981e568","size":811,"data":"","first_seen":"2024-12-30T19:43:52.731495Z","last_seen":"2026-06-24T14:08:30.833327Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/4e88bc13-3ba84f88b75ca0f5.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c30b4cf5d8aa16652a0f0adddb7309c","sha1":"c1838772645d0fe9520335abfc5b5bc7921f1fe1","sha256":"4342ddb0f62d360a77bb0f2cc69906f8fac186e8544022df0b1626cc344df233","sha512":"d30f5152e4e43eb08352d9d29b0a4b8fec7772bef9b49de74306ec8bef88478b26b3c036cbe2c71a7c13de55b3aa68bee69c7cd07ab4f41df0ce6eb5d66a7b84","ssdeep":"1536:Ttwi8H3Sh1nyVLoF2Noc+xx55y7tTaJfc:Tv7h1ytoFJR8IJfc","tlshash":"bfc3f9127664a20c7207c15f15d95908f6a21facd93d2e3822f4af2d6c72fc42566fbe","size":129497,"data":"","first_seen":"2026-03-26T21:03:23.505852Z","last_seen":"2026-06-13T15:25:55.921993Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/4440.e5ab7a3f947210f7.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85c7ae78c282e70454e5e706e9858ae4","sha1":"a362e7a74191a641db80b2bb4086b9a8ffaf6a76","sha256":"736383cea1e4c356526caf97438db39babb67be0458ee8a1d1364fffe2b86467","sha512":"d5086a300b27ccfcb85d870a1525cc89adcf62c638c30cf5fdb903821c2f1c8d37a4ce5438ef4c37ced8634d2136180a4aadef1cc3ce514f57805dff6e36069c","ssdeep":"192:I1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXa:6y933BU+a","tlshash":"c0d16bdb67489cbcb8271f24e34a3271613836d7692ee6994c738a79090115dbbbfcc4","size":6642,"data":"","first_seen":"2024-12-30T19:43:52.703936Z","last_seen":"2026-06-24T14:08:30.874103Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/5ab80550.a8e8c643e1be80d1.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73e4251337b45f8ce2f37f9d596a764","sha1":"40947f45213fe96972a10d93cef9b33e4f72d9c3","sha256":"694963af878a9a3e23dbcf4068a64adb894094e2b43d90b659fa5435e5c4c0e0","sha512":"0533e3c6135da56b498ad7b49deb511c8a41dfc1e3ad6a7fe36789d96b25c9851fb42be265632f96683e593e620c79c415df2f0a60ff02f9b59698ea1c33a7d0","ssdeep":"3072:Xsn1YcYuL6keX5KSbqIXPmxFAhKxxca7WwwHkJPn9ZTMboLh1F5weZ7oyC:Xsn1YcYuL6keX5KEX+7ukpn95Lh1F5wh","tlshash":"cdf30894b3b1b026879925a0042b504bf37efa6c584b046cf658ecf77cb89c4967af35","size":170375,"data":"","first_seen":"2025-06-18T14:48:44.919954Z","last_seen":"2026-06-13T15:25:55.928247Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/2081-11597d3d0d9a3ee1.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91f61d56a3b4dd72d3336afe38590102","sha1":"64536d04f27604f19247e3d6b89b025b85f6514d","sha256":"6c4bde9c0a56164358f0985ac878ac1be1b4e16fff2cdcfbe0a0cb04c1d6f415","sha512":"813cb1fecd9a1b1996a78940ef0da717fbc911dddae33a917110f2cc262e2f2249a1030a672d528855316a104a08ccfe3efe47983504fe2bc4c8fde0f83671ea","ssdeep":"6144:C6Rp9af1i8ThRKnyMWIJXKk5zDSo85SmdUrF5/zZMyYM881aI57AF+x9pg+Pmh2K:C4p9af1i8GVzDGbsMoZmAK","tlshash":"46d45b98b39174aa83cb1199585b3000f235ad96548d042dbbecd4eb6fb9ddc81fbf24","size":652508,"data":"","first_seen":"2026-03-26T21:03:23.52Z","last_seen":"2026-06-13T15:25:55.926897Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e4ce6b7bead5829b06478c15e7cb358e","sha1":"e23ce537f9242f99c93d0df75e355d143453662f","sha256":"62889365b3f7e5fb494aea9c5c7210291d0690e82fc2e4ab2044aaef7a8487ee","sha512":"5514a2b6d189af140a6839725862561e690a1a896dfd5000fc025b1d0ee91c3cadafcbeffa6ee00a368be5a9e951964f146e1584692e6e1b65555edebd4445ac","ssdeep":"","tlshash":"688000b0c0800c2a8032022b2838200202ac80080008800023a0a08a202220a8a0ae8a","size":26,"data":"","first_seen":"2023-10-24T19:54:03Z","last_seen":"2026-08-05T11:23:14.958575Z","times_seen":8892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xai.protousd.com/","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T21:02:52.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-matched-path: /[[...slug]]\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::65rp7-1774558972948-212adf0a317a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":26762,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22899)","md5":"979fa2ef6c5ec4396dadd4af58b7ada8","sha1":"51d9c15eb53f6825d4c1082d10a11bf8aebb99e0","sha256":"29a732797db8b6adb6f9c92f105e17477304800bbfca384a16391ce29c30b863","sha512":"65e76b824c75971d5f768283aade0e81dd56f9d0cb281057dd2b6ed583b38159eb2021f9434f0b5169695443ff0d80779b34b68d47465f04a67063ec1b9cd438","ssdeep":"768:NS1nPOu7rRKnlgttNLo2Zqa97VzXc9d67Wejd0r10xA:gb3RKnlgttNLo2ZqU79cd66wd2v","tlshash":"aac207f5d204cc079977488d307eed1a104eca36df588a6db69ec4412be7cb74eb2895","first_seen":"2026-03-26T21:03:23.488853Z","last_seen":"2026-03-26T21:08:55.835665Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":53,"dns":22,"connect":1,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/logos/xai.svg","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /logos/xai.svg HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"xai.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"ec08d5bc6c5ce481df3568a71e63ca6c\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /logos/xai.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::65rp7-1774558973251-9781846b6f84\r\ncontent-length: 553\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":553,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec08d5bc6c5ce481df3568a71e63ca6c","sha1":"66d4bb2340d500b3d8204d3cc39b83cbf14b70ff","sha256":"a3e5cac46288d386a13b67fc256f618e54522860af433c40fd9fc988b1e0bf94","sha512":"94d6dba9235ca7f4b10a2dcb3dc59b22224a051e5ad36ac5a18062455da2869b01e379c43ad5f4459929b6fe0f952be5c298a117f43b5c6e0fa03fd86f80e849","ssdeep":"","tlshash":"44f026998630047d7c5ec59c707885c0adff7201fb44458da1f65557315b4d007515a4","first_seen":"2026-03-26T21:03:23.490188Z","last_seen":"2026-03-26T21:08:55.854835Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/logos/xai.png","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /logos/xai.png HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xai.protousd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-matched-path: /[[...slug]]\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::65rp7-1774558973589-54e6bcee43b4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26846,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22983)","md5":"93d810db9a6b32fce994a4b292710353","sha1":"d21b832a6802d7606e7c66eccbeb7ca435dd34bf","sha256":"9777343a0269b89e66406bf0314ca6bec555867f01a0fc0e41ed25d76d39e764","sha512":"6c445abcf05b487482e2edf8b1db5897f4017309e67b43d99adf2f95b08a3ac01a12e63c072f4a57c61ce87d018682f220a3a79f4b82d42e06c45c0579fd9c21","ssdeep":"768:NS1nPOu7rRKnlgttNLo2Zqa97VzXc9d67WejNar10xA:gb3RKnlgttNLo2ZqU79cd66wNcv","tlshash":"07c2f7f5d204cc079977488d307eed1a104eca36df588a6db69ec4412be7cb74eb2895","first_seen":"2026-03-26T21:03:23.49134Z","last_seen":"2026-03-26T21:08:55.847003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb-mainnet.g.alchemy.com/v2/6Wxw5dn3Il2O5tc0BrGecJOTzkR9lonp","fqdn":"arb-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"141.95.45.19","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 18:46:54 GMT","end":"Sun, 07 Jun 2026 18:46:53 GMT"},"fingerprint":{"sha1":"6A:43:72:ED:5A:10:22:5F:9C:E6:BA:A0:CB:8C:AF:F8:93:45:69:BB","sha256":"0F:28:33:5A:73:48:DF:77:DE:4A:77:4C:0B:B9:A0:59:82:6D:D0:F7:37:20:6C:C6:93:D5:85:11:50:B4:E5:60"}}},"request":{"raw":"POST /v2/6Wxw5dn3Il2O5tc0BrGecJOTzkR9lonp HTTP/1.1\r\nHost: arb-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xai.protousd.com/\r\nContent-Type: application/json\r\nContent-Length: 48\r\nOrigin: https://xai.protousd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"jsonrpc\":\"2.0\",\"id\":0,\"method\":\"eth_gasPrice\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\naccess-control-allow-origin: https://xai.protousd.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 25\r\nserver: istio-envoy\r\nx-alchemy-trace-id: d72d7a81-ec0c-4a4a-83d6-bafeebdeb8be\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"107ffb384bb989ccb571a557429a400c","sha1":"9d04ed38cd97228a5cb9e67667f4209125dc28d1","sha256":"d0e2a66179565e5b92ea2b065d083925432a63d6c2dc3be7460b4b692265707c","sha512":"3697a81d8b5cf409174822175e00c5b5e534acce28aea095e037b73ded54f8e2feaae6b82116d01c6204f04725b2b0871d7e78cd4dff201571e58074ba207c3e","ssdeep":"","tlshash":"079004d015051f33410c0c01dd051441f7417fcc0d050d01cccd054415d4347571c331","first_seen":"2026-03-26T21:03:23.492237Z","last_seen":"2026-03-26T21:03:23.492237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/css/b516eb492f5b944c.css","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/css/b516eb492f5b944c.css HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"b516eb492f5b944c.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"871b5d96d11e9b4dddaaf22582d1aa3b\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/b516eb492f5b944c.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mnhgc-1774558973254-b76e6d4262e4\r\ncontent-length: 15667\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":83295,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (63243)","md5":"7ed8520411a7bec3ac656e817735078a","sha1":"f7ac2e2448e598cbfa26f06e61f814d0c81fadf8","sha256":"127e4b67e133b386e436080246a9deee38001412e2d0a19b30ad7b71c3279f1d","sha512":"fbc23aa452d50aae8d53a3c200c4ee44a1d1c38c23f08ff771adf97d016399b67d576846235bde55d3d7771aff198bf4e19cc988b1125b9d4f4019493cacf363","ssdeep":"768:GHj4eyXWkyiWpyx+Ci9IqH5FgoOwkDLblkFDLB5DTSM0O0E2xHKSr35sNQouwiDe:GHxyGknyxaJUChfBWKwBr5Ki","tlshash":"bf8384486215507b3d27d5e5d3acea8e900b72d1fe3a52e5fc921110bbc27f65ea3708","first_seen":"2026-03-26T21:03:23.49312Z","last_seen":"2026-06-13T15:25:55.951642Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/webpack-3710b816ddaa36a8.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/webpack-3710b816ddaa36a8.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-3710b816ddaa36a8.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"322486cd9f479469a44f4a50f3d3c6e3\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/webpack-3710b816ddaa36a8.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::65rp7-1774558973255-2ed5abd22ead\r\ncontent-length: 3399\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6184,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5745)","md5":"09e332cc44e745cd02910816d1bd2900","sha1":"090746ef66cb817a0f9fab279e6ca4f59c15cf81","sha256":"d77b7a575b82d9e8804b831a1a50eb6ac518ea003bd2fcc0b0f450e88a247849","sha512":"8b794249c3e11388159e45da1045ce47e696830075271d547f2c05bef3510a9adce5b0c9aa695d723a3642d97d1e027f8a60c804bc9cb246df935c472507cda5","ssdeep":"96:novEgqeQnRqR3tyAZe81lDmPA2dU3xXRFV0scVzZrVq2UiPQoDUYAbYKP6pZxh:NgSnwR9ysAPA6UjFabWifDUXYKyLxh","tlshash":"1fd1f8ee7294f8a52b6710a1583f8861f22f7472681e98f0c75dc4b4ac70c698637f94","first_seen":"2026-03-26T21:03:23.494028Z","last_seen":"2026-03-26T21:08:55.833609Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/fd9d1056-93b277276f7f5cb2.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-93b277276f7f5cb2.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-93b277276f7f5cb2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"6e26c10c15a173ef72a52aaa6bc17a3c\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/fd9d1056-93b277276f7f5cb2.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d4kd2-1774558973256-9a415b425b9c\r\ncontent-length: 54700\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":171904,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5b2becb0f24eea0d9016c42e08a93f38","sha1":"3e8a3ff134e8fa781ecb8abebd9f4970ce88a96c","sha256":"7d500719eea5afddb210d8dfdee54f78e5c3f9fbb07efad3e3262994a3f3e2b0","sha512":"cc6b752bd061815393e2388aed7e7efedfdd2937d5115af051e949ca4fb8325df7813a85227eb21800fdd0e6f820643b7dcdcd302f5ea43d85f8cdd72a544b19","ssdeep":"1536:HOjfUgTQBsC4dxpzcNdT+T0d2tslQ3qWnVImZsArX9WERiAQHOK9b3gxTCBq/GzB:XCQBzjkYwxaQbIERQ73YCBl","tlshash":"49f3e8e83955f6626eb2127700af1803737c262b280d4d60a211fd9eb5b845eb17bfdd","first_seen":"2023-12-08T20:59:26Z","last_seen":"2026-07-22T02:16:56.829778Z","times_seen":253,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/app/%5B%5B...slug%5D%5D/layout-ee0e61911f8b7f8a.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/app/%5B%5B...slug%5D%5D/layout-ee0e61911f8b7f8a.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-ee0e61911f8b7f8a.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"8ac9b5069b374d31c740b822adc05eef\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/%5B%5B...slug%5D%5D/layout-ee0e61911f8b7f8a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d4kd2-1774558973261-8fbfd56c0e6e\r\ncontent-length: 2862\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6776,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6774), with no line terminators","md5":"c5e3ca8c09a4ee36179fcd4d289623fd","sha1":"ba107cec36349624ee794bb6929600316ad93526","sha256":"083e61ce6bcf72d5bee8dff17a248d69bb971f3244c6f6e472831e5513f6c519","sha512":"dfeab11179863b064dc7e5e2ed0b73558b737f3f75a0bd1ea1fb887cd4fe1e7b1db4ea1172a494f584c32a6180f3c73e9951cadc313f31c496a6df4b1e5ad76a","ssdeep":"96:CyE2ukLQmkImKzPQQ6lhyzh8FXXKzOqoc5eeRgxDlwKIvY8LLoFZdvosi6:3d25RqQchr1RAlwXvY8LUfdo56","tlshash":"50e186957081bdacfaab0cd89a6f451c311e6a94c60b0c74f9bcbc32271a9947653fcd","first_seen":"2026-03-26T21:03:23.496395Z","last_seen":"2026-03-26T21:08:55.850261Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/favicon.ico","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 18972\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: W/\"00936c52a169798e6eae5e6237f4f99c\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p8dtp-1774558973402-dba2c2d93a6d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"00936c52a169798e6eae5e6237f4f99c","sha1":"1c6487c2527a4d4beb7d783da65815813224aa45","sha256":"7946eb4685cdffc76b0eb45974d6b14e7047af92b052d805d99f4a99a5dea9b4","sha512":"e3d6542986698c155adfbd91bd08b50d9dfb6f7d266efa494a027920298a46e895f6fc0f7031c7f5a87a2d89747361f6afa894e0edc8a5c8055582277b8ee87c","ssdeep":"","tlshash":"bc2168a32648a485dc49373014bfdebe03435d389ef1425e61cb3a7bbf372e00611816","first_seen":"2026-03-26T21:03:23.497426Z","last_seen":"2026-06-13T15:25:55.938873Z","times_seen":3,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-XFMNRH22ZH","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-XFMNRH22ZH HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\nexpires: Thu, 26 Mar 2026 21:02:53 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 173015\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":529702,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"1b5a303dd552bbec84678fff2f67df0a","sha1":"77b38a42d92b876623719fb8e07f6a6349c74ff4","sha256":"b618f2f4e2706143931ba38110f9b9693e0722c1e51d51a63261ba1e48beef35","sha512":"f83595336308c219186c4100acd917d2b5812ed2263daba3c85533bdb6158491fe03ef7de11e2db008547d61c79acb78629b486e3a9520c0af7ac90d1564ab81","ssdeep":"6144:pcORj7FRy9rJl3FXUIzs8WVud1W+rwkQdoKQYRFohMZEIeHslc:fRyhJlWIY8l+dGhMZan","tlshash":"53b40bceb3d674625296f478903f01cba97b29e2b45cc8aaf099cce02d3455a4177f78","first_seen":"2026-03-26T21:03:23.498364Z","last_seen":"2026-03-26T21:08:55.857523Z","times_seen":2,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":134,"dns":1,"connect":8,"send":0,"wait":35,"receive":27,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/1799.2e4af6b81553c523.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/1799.2e4af6b81553c523.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1799.2e4af6b81553c523.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"14a8d51539df14195f6e6db0aa0ec501\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/1799.2e4af6b81553c523.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wgrn4-1774558973517-662841c0ffa5\r\ncontent-length: 10426\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":33003,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31404)","md5":"47caebdf778092accaafe524bfc320d5","sha1":"e26e51a714adab6960841ef2c044f5e05072adab","sha256":"8156ba03a7430d141cb74932061cdee22663af4a1a67d350605ae65894f4b1ba","sha512":"0ef496b133fe122f09ebdc78355924dbf58e89efd4fffb273721130630872c1bc4fb1a66f0f017ed41c5a0e01e0935fd180d6aafdaa5162d77beb97b01f6a909","ssdeep":"384:LhgIOWgvaTLvmHVsWOJG6bmO+f8Nig57H67pAGXSDXxTvyNFCruJX7kc:LhwtSntWOJDbmO+f8NiEwdXSDBFruFp","tlshash":"86e29688f391b03603926296146b550ff279ea6d644c149cf290e4f628fa8dd94fff78","first_seen":"2025-06-18T14:48:44.905655Z","last_seen":"2026-06-13T15:25:55.929693Z","times_seen":9,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/6273.855cd1a493c7488e.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/6273.855cd1a493c7488e.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"6273.855cd1a493c7488e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"62a017fc9f7f625bc5cb997bce78310a\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/6273.855cd1a493c7488e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mnhgc-1774558973626-ffb01c1cf532\r\ncontent-length: 787\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1574,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1574), with no line terminators","md5":"cfd1afabe3fe5ce82232de87683f22d1","sha1":"f268ff9d062c996eec9922da313cbac13861febc","sha256":"905a0e17d2209f7dbc8f5d336fafc97538363d5d038ce73ba65bd81c605bd4dd","sha512":"43003b8560a75ccab3ba07723d16b08127bf9dced6a8d3dbbe05e241cdceee6a53ee79b8cc7156b8021395f318ff47dcd807add85b707caffc16a46a017e51ae","ssdeep":"","tlshash":"7431519135c8b6e07b0be360cc148566f89528effd25e29c6a1154a2bd1806d728ccfd","first_seen":"2025-06-18T14:48:44.871728Z","last_seen":"2026-06-24T14:08:30.836581Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/3487.4cdecf4529e996a6.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/3487.4cdecf4529e996a6.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3487.4cdecf4529e996a6.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"51b4435ec32a1d37b785e4819562edf4\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/3487.4cdecf4529e996a6.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mfrs6-1774558973629-fd90be21ad3b\r\ncontent-length: 4055\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18090,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18090), with no line terminators","md5":"24125e1658e515866ad7c77073e9fa4b","sha1":"8ebc8265138256594f903ad5e3839e569ed654e4","sha256":"474411dedcb1c43a159a378a32c3a79587651883714976e15e4de5a32b5f8ee2","sha512":"79b12556ba5f32a3a3b6a165fbddd452e33dbcb86f7fcfb2aacc7bd9b569dd843ec11ca519a6175c77448f55d4c73070b151a040cf27b5d63482d5cce8cf2e50","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVE2:LOCO11D2qYzdyz2","tlshash":"2882ed9b8728d94e6e6b8ff8ffdcb4d9332c30e5221e04d4116e616291a359feb41d81","first_seen":"2024-12-30T19:43:52.659121Z","last_seen":"2026-06-24T14:08:30.838793Z","times_seen":13,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai-chain.net/rpc","fqdn":"xai-chain.net","domain":"xai-chain.net","tld":"net"},"ip":{"addr":"172.67.73.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai-chain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 07:53:22 GMT","end":"Sun, 31 May 2026 08:53:17 GMT"},"fingerprint":{"sha1":"9F:A5:33:30:AA:3D:D5:3E:22:E6:D6:1A:4A:61:CE:88:4D:D2:7B:27","sha256":"93:54:3C:A7:47:8E:CF:E7:37:E3:8E:DA:6D:30:CE:6B:AC:52:0E:65:42:12:8D:DA:6E:9D:25:9B:79:A3:80:32"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: xai-chain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://xai.protousd.com/\r\nOrigin: https://xai.protousd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 26 Mar 2026 21:02:54 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6tAqXV3tO3G6SSEx%2FEcdjKgH0wL5e9dfWJuEZqI5JNkMRxVNVc9orjA02UaNKfNDIV0PQtFRW9YL2v5lzNxoKhjwCo%2BBD6V%2FB9VC10W%2BGEo61VnNXnW43Tvv0swY24Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e291951a9920daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T18:03:26.45457Z","times_seen":17728800,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":25,"connect":1,"send":0,"wait":695,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai-chain.net/rpc","fqdn":"xai-chain.net","domain":"xai-chain.net","tld":"net"},"ip":{"addr":"172.67.73.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai-chain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 07:53:22 GMT","end":"Sun, 31 May 2026 08:53:17 GMT"},"fingerprint":{"sha1":"9F:A5:33:30:AA:3D:D5:3E:22:E6:D6:1A:4A:61:CE:88:4D:D2:7B:27","sha256":"93:54:3C:A7:47:8E:CF:E7:37:E3:8E:DA:6D:30:CE:6B:AC:52:0E:65:42:12:8D:DA:6E:9D:25:9B:79:A3:80:32"}}},"request":{"raw":"OPTIONS /rpc HTTP/1.1\r\nHost: xai-chain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://xai.protousd.com/\r\nOrigin: https://xai.protousd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 26 Mar 2026 21:02:54 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\ncontent-encoding: gzip\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T5wOhM1Dc6vvuXjhNSf%2F1Idd7q4RGMyQ00%2FrOcMpjwuQ9uHLDIFte4HRgUwt1VXI2aF4MPpJ4Ykq1%2FRPieb%2BUGg1DIAIEgZlAgOpiIqaIdYea6nwjnFVsEBqKridycg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e291951a9b30daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T18:03:26.45457Z","times_seen":17728800,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":-1,"dns":24,"connect":3,"send":0,"wait":577,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai-chain.net/rpc","fqdn":"xai-chain.net","domain":"xai-chain.net","tld":"net"},"ip":{"addr":"172.67.73.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:54.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai-chain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 07:53:22 GMT","end":"Sun, 31 May 2026 08:53:17 GMT"},"fingerprint":{"sha1":"9F:A5:33:30:AA:3D:D5:3E:22:E6:D6:1A:4A:61:CE:88:4D:D2:7B:27","sha256":"93:54:3C:A7:47:8E:CF:E7:37:E3:8E:DA:6D:30:CE:6B:AC:52:0E:65:42:12:8D:DA:6E:9D:25:9B:79:A3:80:32"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: xai-chain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xai.protousd.com/\r\nContent-Type: application/json\r\nContent-Length: 48\r\nOrigin: https://xai.protousd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"jsonrpc\":\"2.0\",\"id\":3,\"method\":\"eth_gasPrice\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 21:02:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RUIRPS4VCp0W%2FpD8gVliCi89kBQvYhjBznQaxCvHPScmEfoKgPrcXWhiclO1XIU6uiPkfv6jXxLosfThjNl%2FENCWRRiNKCDijNsZZ5b3IhQhxrA7ByH6rxREVQ5UkM%3D\"}]}\r\ncf-ray: 9e2919554d2a0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a2e0acab8c455571a87fc881462dc4c3","sha1":"78d49ab1c4b8d34f791fc9a5e188051dfa5348e3","sha256":"012272e7d602bf513f63629776419773871504be478e644a85b8a595b5832a0b","sha512":"fc6459f18564214a0a643c0f80d88b5c92babbae32608e5ab9403e86ce7f962b24cce3b9c5818c22d6186a0d7db06c0fa8596eefe1c83509be5dd267acb5088d","ssdeep":"","tlshash":"619002a06b06077250080d119944106031516ac40e040d81844d054515b41465708222","first_seen":"2026-03-26T21:03:23.502361Z","last_seen":"2026-03-26T21:08:55.8189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/app/%5B%5B...slug%5D%5D/page-a9e5f1f8aa990e91.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/app/%5B%5B...slug%5D%5D/page-a9e5f1f8aa990e91.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-a9e5f1f8aa990e91.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"1b9d66e1695d642b6ae241ce080b8039\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/%5B%5B...slug%5D%5D/page-a9e5f1f8aa990e91.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wgrn4-1774558973261-db8b58f9a2fe\r\ncontent-length: 19079\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66988,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65502), with no line terminators","md5":"5066abd95934de89f17898891917f57d","sha1":"49d2961f456b3d3c3f66f8130409b0cbf873e574","sha256":"11edffa258e33b6bec1499142884e4c91c921661a17c8c685799c02aca4904be","sha512":"e841e58ff7562181c823379e691503c4f3add84015caadabb46e050ecc5613a41b88bd14079a6712bbc74b7bceeb324d6296215ec28fc4ffbb3800134ea535b3","ssdeep":"1536:ospv9Ofqf/oLaB+xO+zFKShpzKmVzZsWeMKT:o7fqYL/5kSTnXeMKT","tlshash":"ff63e850f1466bbca56b84ec696f401c711e9f98c61e48b9f1fc7c7222844c8ba93bdd","first_seen":"2026-03-26T21:03:23.5032Z","last_seen":"2026-03-26T21:08:55.841918Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/5087-855e901d4d5773c1.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/5087-855e901d4d5773c1.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18996\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"5087-855e901d4d5773c1.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"4b72c823b3019cf7b8350ddb26277ceb\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/5087-855e901d4d5773c1.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8skl9-1774558973261-a058db778583\r\ncontent-length: 7634\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":20502,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20502), with no line terminators","md5":"af6bca7f569bb99740868fc02dfd749a","sha1":"d872131e833db0632805ca38b54e90a2db58ee38","sha256":"905c3f267254e75395cc20377ecb94352a9f3dd9b33788e8650f4e711c08d555","sha512":"eac0a7894106e5e6592d1b0ed580db750892fb75f2f474081d78dbf32274a4ca9a273c018d840c83272da376f96dc80bb0ff0e8c3c25bb09b28630bc89be3710","ssdeep":"384:Hf2hn1jlkxD8EpDa/1C8/zR/mJGHQv6vvwzFiN4N/M0P:wl6pS17zVmwHQyU","tlshash":"4e9209e57392f135174780aad5bf4255f33a1909380e001cb2a85ceab517dcae2b7fb6","first_seen":"2026-03-26T21:03:23.504017Z","last_seen":"2026-06-13T15:25:55.945554Z","times_seen":3,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scan.vialabs.io/images/logos/usdc.png","fqdn":"scan.vialabs.io","domain":"vialabs.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.420Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /images/logos/usdc.png HTTP/1.1\r\nHost: scan.vialabs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T18:03:26.45457Z","times_seen":17728800,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/4440.e5ab7a3f947210f7.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/4440.e5ab7a3f947210f7.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4440.e5ab7a3f947210f7.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"10fc00a995521d33e9c375e40c911db3\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/4440.e5ab7a3f947210f7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tbm92-1774558973612-cc349bdeadf3\r\ncontent-length: 1279\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6642,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6642), with no line terminators","md5":"85c7ae78c282e70454e5e706e9858ae4","sha1":"a362e7a74191a641db80b2bb4086b9a8ffaf6a76","sha256":"736383cea1e4c356526caf97438db39babb67be0458ee8a1d1364fffe2b86467","sha512":"d5086a300b27ccfcb85d870a1525cc89adcf62c638c30cf5fdb903821c2f1c8d37a4ce5438ef4c37ced8634d2136180a4aadef1cc3ce514f57805dff6e36069c","ssdeep":"192:I1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXa:6y933BU+a","tlshash":"c0d16bdb67489cbcb8271f24e34a3271613836d7692ee6994c738a79090115dbbbfcc4","first_seen":"2024-12-30T19:43:52.703936Z","last_seen":"2026-06-24T14:08:30.874103Z","times_seen":8,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/4938-5594df91a60941fd.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/4938-5594df91a60941fd.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18996\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4938-5594df91a60941fd.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"b21d67a4e2878a0d7d902fc70efcd419\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/4938-5594df91a60941fd.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xzbpc-1774558973257-a0569e56f640\r\ncontent-length: 27938\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":104728,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"751ebc408f59a7400982e4cc30955634","sha1":"3e64e24d89e31811db82c89be1fbde050b96cdf0","sha256":"31fda6d8ce0e20cbea060b582417979e9513bdd87b1a69c7497ea1c7e1f8969d","sha512":"f5cd4062f96eadec67a823400914118cbcdd163d7deecf096efe9a1f545277a25b4fe8eba72e7c1d90ef1a91097e759262e364386e2d9a88009fcf6ea8227c8c","ssdeep":"768:3JZAvfw7ErwbKLdwXiJLmJ+pwyibNX5CX6qv6I6/c05aDNZpPj+F9f2a/Xcz1Q8x:Ziw7EGSWowyibNsX9/6IPj2UKYIpwjB","tlshash":"74a3d7b672d0f8e1079744a5843f400af3751d3e146f74a0a3e6ccd9baa14de91a3f6a","first_seen":"2023-12-29T16:32:38Z","last_seen":"2026-07-12T13:18:09.403105Z","times_seen":82,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/4e88bc13-3ba84f88b75ca0f5.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/4e88bc13-3ba84f88b75ca0f5.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18996\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4e88bc13-3ba84f88b75ca0f5.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"813ad4b6e32c8f246f4b58a516205e90\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/4e88bc13-3ba84f88b75ca0f5.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ppdgf-1774558973258-e3fec3ccc4e5\r\ncontent-length: 33319\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":129497,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"1c30b4cf5d8aa16652a0f0adddb7309c","sha1":"c1838772645d0fe9520335abfc5b5bc7921f1fe1","sha256":"4342ddb0f62d360a77bb0f2cc69906f8fac186e8544022df0b1626cc344df233","sha512":"d30f5152e4e43eb08352d9d29b0a4b8fec7772bef9b49de74306ec8bef88478b26b3c036cbe2c71a7c13de55b3aa68bee69c7cd07ab4f41df0ce6eb5d66a7b84","ssdeep":"1536:Ttwi8H3Sh1nyVLoF2Noc+xx55y7tTaJfc:Tv7h1ytoFJR8IJfc","tlshash":"bfc3f9127664a20c7207c15f15d95908f6a21facd93d2e3822f4af2d6c72fc42566fbe","first_seen":"2026-03-26T21:03:23.505852Z","last_seen":"2026-06-13T15:25:55.921993Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/3022.a7d2a1831973543f.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/3022.a7d2a1831973543f.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3022.a7d2a1831973543f.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"629417f85b95d3bfd5771e0f830dda31\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/3022.a7d2a1831973543f.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tpx2t-1774558973619-596e763c1e61\r\ncontent-length: 724\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":724,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (724), with no line terminators","md5":"629417f85b95d3bfd5771e0f830dda31","sha1":"499e8c3c09fd0b45b126b563b8ba15a65719a2a8","sha256":"ae8189a4ea91cac405e64edf8e7e6b3e046e2b3dee4f0dc7bddf25127a0eb843","sha512":"b7114ab934e7787c29f64f6d6b0d2ae6b334ba08213444cc8878a9b2f53cc2b813ac79074df7ade75b796668b9b7568a4b41567c55aa5b43da19b16f41dff2ba","ssdeep":"","tlshash":"eb01cba5b2c8f804296bd335503c1ae0bceb229c6d1e921833900b0afc3005e48d9ebd","first_seen":"2024-12-30T19:43:52.762621Z","last_seen":"2026-06-24T14:08:30.867922Z","times_seen":8,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/1276.56045f68cf375cac.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/1276.56045f68cf375cac.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1276.56045f68cf375cac.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"b626e3c5cdf08d4d7ec433aaa3f57e69\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/1276.56045f68cf375cac.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d4kd2-1774558973631-4b0b995d90fe\r\ncontent-length: 2932\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9401), with no line terminators","md5":"1bd8974f162d3b022737bd68ff3a9fb6","sha1":"cf4bdfc00dedde53dda33143a6f6c3b1754782df","sha256":"37822ee44919308dadfa16a1e6724d3ca83b57c4d700e3046b1bb8b56cb1a900","sha512":"86229f42ca722c7fe38ba0c382c5581259fffe5ba481717ce27fb35ec86aa59a25ba0ee166ec4ad1f1e2bb5822bb2f677754c6cfcabb6db9a336842e6ca9adc5","ssdeep":"192:K65yAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7Ms:KhiN2Qjw+FWjARaidSpx7Ms","tlshash":"fd1283ea5768627de89bce6cdf668850130d70fd35b8c8e49a9ecf686057889fd87010","first_seen":"2024-12-30T19:43:52.732927Z","last_seen":"2026-06-24T14:08:30.839456Z","times_seen":13,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb-mainnet.g.alchemy.com/v2/6Wxw5dn3Il2O5tc0BrGecJOTzkR9lonp","fqdn":"arb-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"141.95.45.19","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 18:46:54 GMT","end":"Sun, 07 Jun 2026 18:46:53 GMT"},"fingerprint":{"sha1":"6A:43:72:ED:5A:10:22:5F:9C:E6:BA:A0:CB:8C:AF:F8:93:45:69:BB","sha256":"0F:28:33:5A:73:48:DF:77:DE:4A:77:4C:0B:B9:A0:59:82:6D:D0:F7:37:20:6C:C6:93:D5:85:11:50:B4:E5:60"}}},"request":{"raw":"OPTIONS /v2/6Wxw5dn3Il2O5tc0BrGecJOTzkR9lonp HTTP/1.1\r\nHost: arb-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://xai.protousd.com/\r\nOrigin: https://xai.protousd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://xai.protousd.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,PUT,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 1800\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\nserver: istio-envoy\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T18:03:26.45457Z","times_seen":17728800,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":121,"dns":66,"connect":28,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai-chain.net/rpc","fqdn":"xai-chain.net","domain":"xai-chain.net","tld":"net"},"ip":{"addr":"172.67.73.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:54.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai-chain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Mar 2026 07:53:22 GMT","end":"Sun, 31 May 2026 08:53:17 GMT"},"fingerprint":{"sha1":"9F:A5:33:30:AA:3D:D5:3E:22:E6:D6:1A:4A:61:CE:88:4D:D2:7B:27","sha256":"93:54:3C:A7:47:8E:CF:E7:37:E3:8E:DA:6D:30:CE:6B:AC:52:0E:65:42:12:8D:DA:6E:9D:25:9B:79:A3:80:32"}}},"request":{"raw":"POST /rpc HTTP/1.1\r\nHost: xai-chain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xai.protousd.com/\r\nContent-Type: application/json\r\nContent-Length: 48\r\nOrigin: https://xai.protousd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"eth_gasPrice\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 21:02:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 70\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I20DffP6%2BaIfWuVvaO%2FHtk%2BDIrQDfkyFNFuXPqS77fudicgKrl2EubcQOidqHyQqy8i3bJEiDDjr34BmkqlvASb8zXBD3youh1%2BhdyJvcAPEpc2Q6mn3wo1VVJFXYGc%3D\"}]}\r\ncf-ray: 9e2919560faa0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b6025e4f840ffc521099d09279969967","sha1":"36bbbd3b0e37d333902d0eab257398417ab2a992","sha256":"97456700b331a5d6e5a5ab5ec97c86d5addd6f786bd61e91b9d88b00463bf7d6","sha512":"af8d3cd1820774932c0baf9e492c4029a007611f45e7db929f7afe46d06965a44b0ee5c0aa17a50537f0494d200c9b72568497507809e8fe03bac3b80254ecb3","ssdeep":"","tlshash":"b49004d077070733500c0d11dd04307031417fc40d044d51c44d054515f41475304333","first_seen":"2026-03-26T21:03:23.508551Z","last_seen":"2026-03-26T21:08:55.862519Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/410-d79a4effb3ef4ba6.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/410-d79a4effb3ef4ba6.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"410-d79a4effb3ef4ba6.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"4ae3ff5ecd24ae9d3c90d2e776dd7c12\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/410-d79a4effb3ef4ba6.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tpx2t-1774558973260-af4a8f9dedbe\r\ncontent-length: 7777\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24142,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24142), with no line terminators","md5":"e1d20b82e4bcadf43edbe8065153dac9","sha1":"e21c3ef14a3198bbc9c8564003ab94efc61e396d","sha256":"01c56245f9b4314284f2f8131421e8dac1bca6c6557b1101f0f165e2adb98e75","sha512":"27313974dafb4665eeddd5680d16ff514f5e2e741bc75aea2253c2517376893123ec2d8e557b9bb7172b28f4608f5f447978c9448a07745c3745ca0a44775bbc","ssdeep":"384:tA62fb5J+PQ4mPOAAYKYGqS6n6TtmQPLxo:+b59dAJTtNzxo","tlshash":"35b2c7f5f29d318c03a618f6348ba215a12d9a44c20d009ff6a5d8ebb5f559c47a3f3b","first_seen":"2026-03-26T21:03:23.509342Z","last_seen":"2026-03-26T21:08:55.856029Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/5ab80550.a8e8c643e1be80d1.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/5ab80550.a8e8c643e1be80d1.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"5ab80550.a8e8c643e1be80d1.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"8a53e865e1f5801c9ed51d03ca1db6ad\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/5ab80550.a8e8c643e1be80d1.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tbm92-1774558973515-ff381b78dc71\r\ncontent-length: 62498\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170375,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e73e4251337b45f8ce2f37f9d596a764","sha1":"40947f45213fe96972a10d93cef9b33e4f72d9c3","sha256":"694963af878a9a3e23dbcf4068a64adb894094e2b43d90b659fa5435e5c4c0e0","sha512":"0533e3c6135da56b498ad7b49deb511c8a41dfc1e3ad6a7fe36789d96b25c9851fb42be265632f96683e593e620c79c415df2f0a60ff02f9b59698ea1c33a7d0","ssdeep":"3072:Xsn1YcYuL6keX5KSbqIXPmxFAhKxxca7WwwHkJPn9ZTMboLh1F5weZ7oyC:Xsn1YcYuL6keX5KEX+7ukpn95Lh1F5wh","tlshash":"cdf30894b3b1b026879925a0042b504bf37efa6c584b046cf658ecf77cb89c4967af35","first_seen":"2025-06-18T14:48:44.919954Z","last_seen":"2026-06-13T15:25:55.928247Z","times_seen":6,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/5931.355d71e759cb8541.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/5931.355d71e759cb8541.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"5931.355d71e759cb8541.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"15ebf0a6a643bc05183cfcce183910fa\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/5931.355d71e759cb8541.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mnhgc-1774558973517-917c23c186f0\r\ncontent-length: 100835\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":367789,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49432), with CRLF line terminators","md5":"e8dedd331f316451703da4eed25dae97","sha1":"6cf62f6a2c87ab0458cb27137dae522acbd76565","sha256":"ace4afcf75964f78a0b3570309c3a7ef4ff44bd24ed32d6750bc94759fadd082","sha512":"64338b765faf0b502b7de940eb393ac56a0617f2cca76d223dcd1513ba8d9f1b47c3ad78e40f40cafd73a9eb68a475382b916d536cb6d61f75d5842eeae5cd49","ssdeep":"6144:XTaIUat6ke460CSYzXEFA6Y6XCFbYEyc3ddjCUWXAgaW3QHL6keNTyDyfWNSmQUh:ura6w21M8","tlshash":"4f740a9933a2f47643da5169943f120af3395868240d802cf778fcdfb96c999922bf74","first_seen":"2026-03-26T21:03:23.511528Z","last_seen":"2026-06-13T15:25:55.942825Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/2479.6dfcea7a8ee684d8.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/2479.6dfcea7a8ee684d8.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2479.6dfcea7a8ee684d8.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"dd26dcbe5dce67d1c303434cbacc91f9\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/2479.6dfcea7a8ee684d8.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mnhgc-1774558973616-b25eb37de8e2\r\ncontent-length: 750\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1639,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1639), with no line terminators","md5":"38493b69325be19acfa3e6707cfbaa6b","sha1":"086657e85dec05a9f806cc16ebc4da27f278b246","sha256":"131dfa535ae6c26dea88a45bc3bc2bed2cf6a9939bc7555a8e964197c4d6f74f","sha512":"07e9fc05b91edc42d37fd3c2ebdef2b2fc0beca7dbf13e53316baf57ef8901a291c3f9afa729b399785638a0c9fa9bb1ee81771b462a8d44070ce5df236aee30","ssdeep":"","tlshash":"0d31f1ef37e422f4d017b3a3d016902a7edb24ba7b29df8546174ad0be0185d2498d79","first_seen":"2024-12-30T19:43:52.719295Z","last_seen":"2026-06-24T14:08:30.842819Z","times_seen":9,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/7601.df391f6f993887ee.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/7601.df391f6f993887ee.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7601.df391f6f993887ee.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"fab34df4e2f2daaec780043b456ca5a2\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/7601.df391f6f993887ee.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d4kd2-1774558973627-ea85e37f2b07\r\ncontent-length: 811\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":811,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (811), with no line terminators","md5":"fab34df4e2f2daaec780043b456ca5a2","sha1":"43d9c67f639a9444a8d5261d932e9f68f3537b79","sha256":"19d39ac79674b37f80f124f40d59fbc9f8d62e4d57e563a435c5ac309e0ba4af","sha512":"1ecf85eadebbf848d769def883ef29c5219658822f1fe1ed2c8b0394064e54778b072b3b0320b4675d8f40717fbf301c46a8c9bfed53178a2d6c7c2be18dd2df","ssdeep":"","tlshash":"39011276f15cf49cd91e82a8ecaf58e3224921e6301e8254786c492aa5354cf981e568","first_seen":"2024-12-30T19:43:52.731495Z","last_seen":"2026-06-24T14:08:30.833327Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arb-mainnet.g.alchemy.com/v2/6Wxw5dn3Il2O5tc0BrGecJOTzkR9lonp","fqdn":"arb-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"141.95.45.19","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 18:46:54 GMT","end":"Sun, 07 Jun 2026 18:46:53 GMT"},"fingerprint":{"sha1":"6A:43:72:ED:5A:10:22:5F:9C:E6:BA:A0:CB:8C:AF:F8:93:45:69:BB","sha256":"0F:28:33:5A:73:48:DF:77:DE:4A:77:4C:0B:B9:A0:59:82:6D:D0:F7:37:20:6C:C6:93:D5:85:11:50:B4:E5:60"}}},"request":{"raw":"OPTIONS /v2/6Wxw5dn3Il2O5tc0BrGecJOTzkR9lonp HTTP/1.1\r\nHost: arb-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://xai.protousd.com/\r\nOrigin: https://xai.protousd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://xai.protousd.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST,GET,PUT,DELETE,PATCH\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 1800\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\nserver: istio-envoy\r\nx-envoy-upstream-service-time: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T18:03:26.45457Z","times_seen":17728800,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":119,"dns":55,"connect":28,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arb-mainnet.g.alchemy.com/v2/6Wxw5dn3Il2O5tc0BrGecJOTzkR9lonp","fqdn":"arb-mainnet.g.alchemy.com","domain":"alchemy.com","tld":"com"},"ip":{"addr":"141.95.45.19","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.g.alchemy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 18:46:54 GMT","end":"Sun, 07 Jun 2026 18:46:53 GMT"},"fingerprint":{"sha1":"6A:43:72:ED:5A:10:22:5F:9C:E6:BA:A0:CB:8C:AF:F8:93:45:69:BB","sha256":"0F:28:33:5A:73:48:DF:77:DE:4A:77:4C:0B:B9:A0:59:82:6D:D0:F7:37:20:6C:C6:93:D5:85:11:50:B4:E5:60"}}},"request":{"raw":"POST /v2/6Wxw5dn3Il2O5tc0BrGecJOTzkR9lonp HTTP/1.1\r\nHost: arb-mainnet.g.alchemy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xai.protousd.com/\r\nContent-Type: application/json\r\nContent-Length: 48\r\nOrigin: https://xai.protousd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_gasPrice\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\naccess-control-allow-origin: https://xai.protousd.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 25\r\nserver: istio-envoy\r\nx-alchemy-trace-id: f639432e-37a8-468c-9bca-29ef54847c4f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"80c17043b8abaf8a717b29622bdf4f19","sha1":"2cf4ea365fb968a80ae1b858e6a11001df3d2531","sha256":"dd3867a92172a697eeda93680359fda02bd29fad687bfa090d53ca2a3cdc7875","sha512":"2bcaca8e935187f7ba0759e9ae53da486fc53b8a764e26d1957264dfb6d1350e54489bfbdcabeba6cc1e37aa56fc00727e1e0226af02446dc4ded33fd03cce6b","ssdeep":"","tlshash":"a49004d0150d1733c00c0c01d5041441f3417fc40d050f414dcd054411c4347571d331","first_seen":"2026-03-26T21:03:23.513889Z","last_seen":"2026-03-26T21:03:23.513889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xai.protousd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"e4af272ccee01ff0-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/e4af272ccee01ff0-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tpx2t-1774558973250-b5be0c920b1f\r\ncontent-length: 48432\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-05T18:05:26.25278Z","times_seen":87051,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/css/e541236b675bf2d2.css","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/css/e541236b675bf2d2.css HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"e541236b675bf2d2.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"c2ddad3c9d2d8120b7257d4158f1015a\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/e541236b675bf2d2.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fv2qx-1774558973253-fd03f14752bc\r\ncontent-length: 5023\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":30277,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30277), with no line terminators","md5":"f4eca80e41e493746028daba5c94b757","sha1":"e4971fca90deae9fa3efb8d68902f0d26bff0d94","sha256":"a1cc60a12f31b35cd2afac54d6478b9de9fc8fe28ebafe172a9277da2725dfd9","sha512":"9cbed3d0a7ca6613926454442630ab536133c01de752768a8faffa951a49292633d57546a1f86a753133dece06133436aa215a34010fee905e32bad98d923852","ssdeep":"384:DLvpSed283ZcW23qWF7O36AgzyAIfPojPFEIN4:DLvpSUJoAgzyAcojPFEw4","tlshash":"edd21e093e2d3f38b923a72440c0949c620b775feebd4797ac91275d9d9d78432aca39","first_seen":"2026-03-26T21:03:23.515193Z","last_seen":"2026-06-13T15:25:55.905812Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/main-app-a844c0b17617f688.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/main-app-a844c0b17617f688.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-a844c0b17617f688.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"d4448a617c5f7a37cffe958f285c6597\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/main-app-a844c0b17617f688.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p8dtp-1774558973258-25483b3b21fb\r\ncontent-length: 474\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":474,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (474), with no line terminators","md5":"d4448a617c5f7a37cffe958f285c6597","sha1":"ed8325bfcff566f5bd60abd66a8e16e679db9e23","sha256":"2980712a82fe4a999576030728eb19153c1a8c68ea28c5fc05f55bb93a5d29ef","sha512":"29208b96f44b1eeddcba73f6ff02a0ba774e169a7128544564d09b226af1c2bcb36d40b8f6e60685302fff1d005d55347052e97e9e6794727a5377e7c9a3e82e","ssdeep":"","tlshash":"edf08999260cb02f3d136d30fdd79d2e645d817034a79d542a05dda12c7366893f1c78","first_seen":"2025-06-18T14:48:44.904782Z","last_seen":"2026-06-13T15:25:55.920675Z","times_seen":7,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scan.vialabs.io/images/logos/usdc.png","fqdn":"scan.vialabs.io","domain":"vialabs.io","tld":"io"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scan.vialabs.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 03:22:43 GMT","end":"Tue, 12 May 2026 03:22:42 GMT"},"fingerprint":{"sha1":"E4:9C:6D:95:00:AC:E9:5A:96:28:A7:82:38:50:7C:CB:21:30:31:A9","sha256":"F1:3D:34:90:77:B3:44:62:60:A5:24:42:3B:2A:D3:6B:B3:CF:49:6E:45:EF:0A:CC:08:AA:2F:34:E8:A5:BA:A6"}}},"request":{"raw":"GET /images/logos/usdc.png HTTP/1.1\r\nHost: scan.vialabs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=600\r\ncontent-type: image/png\r\netag: \"d2be0201fe1bc97334099818ca6252a7b66956a56ff78622ae757fa8c1524fba\"\r\nexpires: Thu, 26 Mar 2026 21:12:54 UTC\r\nlast-modified: Wed, 01 Oct 2025 19:38:11 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01KMNZA402JJH7723ADSVMEH9V\r\ncontent-length: 9276\r\ndate: Thu, 26 Mar 2026 21:02:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 181 x 181, 8-bit/color RGBA, non-interlaced","md5":"bb400a72232101f48b1a16e52ab18fda","sha1":"25ee99942134fca6167e3beefcd377443ce1273e","sha256":"6d14601d0b1109046e366592b8c0f256ffb075f69180b65dddd97ae665d49f9e","sha512":"86479d8136144517d960978e01640b6f935b1056297846f5e2e136e5f37b671054aa067e9fce793db0f7eebb8b7fd420f3ec5be89dca41baa6e695ead9e8e500","ssdeep":"192:Yj9GF6d6C44reHkPWsuT3skx6kY+ur1GtuoPVS3OgmgHCNEZsK:Yjwsd6n4qwWsxw6C2AMoMOgmgiNI","tlshash":"de12af851657c48d77302a070e062be6337c02264b5bd368badb85a7bd43a25e63df47","first_seen":"2023-05-01T22:39:41Z","last_seen":"2026-08-04T10:04:47.542649Z","times_seen":1559,"resource_available":false,"data":null}},"time_used":979,"timings":{"blocked":307,"dns":1,"connect":125,"send":0,"wait":262,"receive":103,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/3641.6f9cc9081f78d8d5.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/3641.6f9cc9081f78d8d5.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3641.6f9cc9081f78d8d5.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"4332f182767d8fdad703c4a7f22bd42f\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/3641.6f9cc9081f78d8d5.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d4kd2-1774558973616-1c4fb6e1cf94\r\ncontent-length: 569\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (569), with no line terminators","md5":"4332f182767d8fdad703c4a7f22bd42f","sha1":"0a473babea4549442912006d50ea51e6f13941d7","sha256":"1999595ac11071e82329eb3976fc6f03b3b6c99eba41707dd5aacaac08efe7cc","sha512":"620899b01a8173d50a32426ac74fab7c0d30a2fb26823dbd80ac33e5925ca5c2c3ced318408525aa39a27bd8367993bfb4b220beef582be0f6fb395be329834e","ssdeep":"","tlshash":"7af08be96690bd004b4f06f4cdbd5489717778ee6a8853dda3720124b92106e750cfb8","first_seen":"2025-06-18T14:48:44.870786Z","last_seen":"2026-06-24T14:08:30.832277Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"scan.vialabs.io/images/logos/chains/42161.png","fqdn":"scan.vialabs.io","domain":"vialabs.io","tld":"io"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scan.vialabs.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 03:22:43 GMT","end":"Tue, 12 May 2026 03:22:42 GMT"},"fingerprint":{"sha1":"E4:9C:6D:95:00:AC:E9:5A:96:28:A7:82:38:50:7C:CB:21:30:31:A9","sha256":"F1:3D:34:90:77:B3:44:62:60:A5:24:42:3B:2A:D3:6B:B3:CF:49:6E:45:EF:0A:CC:08:AA:2F:34:E8:A5:BA:A6"}}},"request":{"raw":"GET /images/logos/chains/42161.png HTTP/1.1\r\nHost: scan.vialabs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=600\r\ncontent-type: image/png\r\netag: \"d2be0201fe1bc97334099818ca6252a7b66956a56ff78622ae757fa8c1524fba\"\r\nexpires: Thu, 26 Mar 2026 21:12:54 UTC\r\nlast-modified: Wed, 01 Oct 2025 19:38:11 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01KMNZA402JJH7723ADTMGVXS6\r\ncontent-length: 6301\r\ndate: Thu, 26 Mar 2026 21:02:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"9645eb8d524e5f121a8437714bfac868","sha1":"fc60ae79e9ebe02e9116c7609fa111b86d5f1668","sha256":"f212affafc717f6142d452bb4dd6b60098f2ab5e3cb41c3d5d3dcc3888187906","sha512":"b7828ee2a4d9cc5961df45808b702b3f33d71c0652505e4e280d55d161c404960d3a1caa8e298b6b8b96abdffbeb807315f86d44a3c7e60cc7b01a649e909642","ssdeep":"96:fFtWFedZrLiri4GUnSL2BzH4UMSIraycPX0NkgtrjB6liCW0f3BYrF6TkS+SY0J:HWFosm4NrHhbSap0NkOlG/BYrWkS+Sv","tlshash":"48d19e8f0be8711dff7416012ca5e78688a21fd280ed7bd64c5da46267439d0ada38cb","first_seen":"2026-03-26T21:03:23.518249Z","last_seen":"2026-03-26T21:08:55.830929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":241,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"scan.vialabs.io/images/logos/chains/660279.png","fqdn":"scan.vialabs.io","domain":"vialabs.io","tld":"io"},"ip":{"addr":"35.185.44.232","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"scan.vialabs.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Feb 2026 03:22:43 GMT","end":"Tue, 12 May 2026 03:22:42 GMT"},"fingerprint":{"sha1":"E4:9C:6D:95:00:AC:E9:5A:96:28:A7:82:38:50:7C:CB:21:30:31:A9","sha256":"F1:3D:34:90:77:B3:44:62:60:A5:24:42:3B:2A:D3:6B:B3:CF:49:6E:45:EF:0A:CC:08:AA:2F:34:E8:A5:BA:A6"}}},"request":{"raw":"GET /images/logos/chains/660279.png HTTP/1.1\r\nHost: scan.vialabs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=600\r\ncontent-type: image/png\r\netag: \"d2be0201fe1bc97334099818ca6252a7b66956a56ff78622ae757fa8c1524fba\"\r\nexpires: Thu, 26 Mar 2026 21:12:54 UTC\r\nlast-modified: Wed, 01 Oct 2025 19:38:11 GMT\r\npermissions-policy: interest-cohort=()\r\nvary: Origin\r\nx-request-id: 01KMNZA403GH42YBBCMNMS3ETB\r\ncontent-length: 5279\r\ndate: Thu, 26 Mar 2026 21:02:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"13b2c2114699c2c0472b1f6c8d6e0020","sha1":"5a920952f3512d21b16bdbb448c73d1b8c9de0e9","sha256":"53210da83a5fbf73570dadc008d73e658c7c88e9ac48076c4183ade14fae5115","sha512":"4e33264a3317ca39c9f01ffc647b099e974563af73b1fd5adf70230131570a7486adf2114a86f1d3617022e80673075b2f63199f985d32fb88d67b88be0e1005","ssdeep":"96:MFrmVUW2dY6UJYvHRkfJAAiTSqHbLnGSyCX/9StpKm5v2e/ha:MFyO1U0uBAAusVtn7Za","tlshash":"50b18f2b94e865b74a827ace8ceb752fc0d6251e4878f294f4c893a5e850d3507f8352","first_seen":"2026-03-26T21:03:23.519158Z","last_seen":"2026-03-26T21:08:55.853695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":245,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/2081-11597d3d0d9a3ee1.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/2081-11597d3d0d9a3ee1.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18997\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2081-11597d3d0d9a3ee1.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"39efbae8a76b68607d65c879cadd3525\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/2081-11597d3d0d9a3ee1.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mn782-1774558973258-85f1cb6874b7\r\ncontent-length: 198188\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":652508,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"91f61d56a3b4dd72d3336afe38590102","sha1":"64536d04f27604f19247e3d6b89b025b85f6514d","sha256":"6c4bde9c0a56164358f0985ac878ac1be1b4e16fff2cdcfbe0a0cb04c1d6f415","sha512":"813cb1fecd9a1b1996a78940ef0da717fbc911dddae33a917110f2cc262e2f2249a1030a672d528855316a104a08ccfe3efe47983504fe2bc4c8fde0f83671ea","ssdeep":"6144:C6Rp9af1i8ThRKnyMWIJXKk5zDSo85SmdUrF5/zZMyYM881aI57AF+x9pg+Pmh2K:C4p9af1i8GVzDGbsMoZmAK","tlshash":"46d45b98b39174aa83cb1199585b3000f235ad96548d042dbbecd4eb6fb9ddc81fbf24","first_seen":"2026-03-26T21:03:23.52Z","last_seen":"2026-06-13T15:25:55.926897Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/1874-f5420b150e7097ff.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/1874-f5420b150e7097ff.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18996\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1874-f5420b150e7097ff.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"e06f1b51b1659f0d336755d450a5574d\"\r\nlast-modified: Thu, 26 Mar 2026 15:46:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/1874-f5420b150e7097ff.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::65rp7-1774558973260-137179144cc9\r\ncontent-length: 66253\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":200709,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31106)","md5":"40116a66b9ddf10aa0fc3c3784ce07d0","sha1":"c6a0dc892b73e0888412b6b0c1139bf0683ed20c","sha256":"45e4d25816ba245a308c97f912ed0b421946e2abfbd14813265dcfad0a488bbc","sha512":"793649186d1ecf7d10dfbff59ba4ce9eea2b275f65b25641fa7ccc04da2bbe9cd57d722b4f4e5cc3671ce843acb263e97a74d73e6fe240f4bb3f763cfdef673f","ssdeep":"1536:p9ioR3dheJTJ1mgajzUAh4miGaSD4ZJ2ECJpSIGeU19gGV01J1G9oy9hU9vWzUXb:p9iV+UAhPLiC69SpsUX4rQEt82IDxWJ2","tlshash":"0e1409a5b361b075938b9199d07f0605f33a2998301a402cb7bdeccb696498972f7f3d","first_seen":"2026-03-26T21:03:23.520992Z","last_seen":"2026-06-13T15:25:55.910774Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/5883.e4477e9126daa625.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/5883.e4477e9126daa625.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"5883.e4477e9126daa625.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"7c38237a840f4fe2ec98612c55298d6e\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/5883.e4477e9126daa625.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d4kd2-1774558973517-d81a4dbc5ff7\r\ncontent-length: 86\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"7c38237a840f4fe2ec98612c55298d6e","sha1":"1c0726b093d54270fc84e65eec6d88ae5dad5180","sha256":"d6cf178eb693ebb1bac8a3903e2a081b114fe58dc5af96a5ba40940450ab479c","sha512":"f6b376b77ef121aea159970266087041c3943408dfa3843b989627f8662f92a4c5e66aa748a0f4644b9e82edfba3c3feb6f875f04c0baacbb56f3ca49c284c81","ssdeep":"","tlshash":"6da0120a70823c253d3f24880ca3052119bc0c6b3824c0c5a4210440043551c0201c8e","first_seen":"2023-05-11T09:51:53Z","last_seen":"2026-06-16T12:49:08.422975Z","times_seen":130,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/_next/static/chunks/9749.19971cc7108c1127.js","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:53.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /_next/static/chunks/9749.19971cc7108c1127.js HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18950\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9749.19971cc7108c1127.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:53 GMT\r\netag: \"703ac29d865f0f4e575f21391601658f\"\r\nlast-modified: Thu, 26 Mar 2026 15:47:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/9749.19971cc7108c1127.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tbm92-1774558973624-ded705e45045\r\ncontent-length: 985\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3772,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3772), with no line terminators","md5":"79c2dcfe3f1149eed42eadddac675406","sha1":"64b26ab346ffce9a29e8588f6ab433a9509ee5cd","sha256":"7c3ed9e67b2b35c0498426d443b908094faf71cafa43359dd53b9fc190c0dcba","sha512":"f69773c9de06a4030ec0e6fbb1af69f84c8b4d7a40a85dd5b8e9e3818875dc47890ab171aef89aa8718a1c7f8b6b64220407544107db33755be024e6304b6c12","ssdeep":"","tlshash":"9a71fed59a3dac3be92dc1cced811420710daabfdc894a5272639fef9d784856c4c670","first_seen":"2024-12-30T19:43:52.710783Z","last_seen":"2026-06-24T14:08:30.846555Z","times_seen":9,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xai.protousd.com/logos/xai.png","fqdn":"xai.protousd.com","domain":"protousd.com","tld":"com"},"ip":{"addr":"66.33.60.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xai.protousd.com/","date":"2026-03-26T21:02:54.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xai.protousd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 14:33:03 GMT","end":"Wed, 24 Jun 2026 14:33:02 GMT"},"fingerprint":{"sha1":"CF:7A:D9:F1:C3:76:E9:2C:46:A8:A0:67:B3:03:1C:60:1C:E9:43:1E","sha256":"6F:5D:C8:1F:D6:89:A1:25:1F:1C:42:D9:47:EF:B0:CA:60:7E:49:E7:07:1D:15:84:7B:B3:86:D7:51:2F:92:19"}}},"request":{"raw":"GET /logos/xai.png HTTP/1.1\r\nHost: xai.protousd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xai.protousd.com/\r\nCookie: _ga_XFMNRH22ZH=GS2.1.s1774558973$o1$g0$t1774558973$j60$l0$h0; _ga=GA1.1.759761690.1774558974\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 26 Mar 2026 21:02:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-matched-path: /[[...slug]]\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::ppdgf-1774558974015-719ca7e7435b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":26846,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22983)","md5":"93d810db9a6b32fce994a4b292710353","sha1":"d21b832a6802d7606e7c66eccbeb7ca435dd34bf","sha256":"9777343a0269b89e66406bf0314ca6bec555867f01a0fc0e41ed25d76d39e764","sha512":"6c445abcf05b487482e2edf8b1db5897f4017309e67b43d99adf2f95b08a3ac01a12e63c072f4a57c61ce87d018682f220a3a79f4b82d42e06c45c0579fd9c21","ssdeep":"768:NS1nPOu7rRKnlgttNLo2Zqa97VzXc9d67WejNar10xA:gb3RKnlgttNLo2ZqU79cd66wNcv","tlshash":"07c2f7f5d204cc079977488d307eed1a104eca36df588a6db69ec4412be7cb74eb2895","first_seen":"2026-03-26T21:03:23.49134Z","last_seen":"2026-03-26T21:08:55.847003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"xai.protousd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
