{"report_id":"9fd1e353-c735-4749-b015-ce6ecc2fb061","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-02-14T17:06:08Z","url":{"schema":"http","addr":"ecos.login-app-secure.com","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"ecos.login-app-secure.com/","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"title":"Update Withdrawal Address | Customer Portal","dom":{"size":152361,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28023)","md5":"7f70b4c13ee47281f6c0535e662f9531","sha1":"357f9304757b27df6b1da5e860aca6db69597c61","sha256":"f0942b8d8885717df08aac1afbae0e2ec771748f366f8d11c343c5b2de381670","sha512":"ac97a933a69f46264d141e1728eda9ee7ead6e9125999fa2e27170c2d834dc14e8e59d5362cd845bc2b8d59404598912abcb04a207f11558e9c987ac3668f9d6","ssdeep":"3072:ahD5MVgQJ2zBvh+A6v/6F+em09Fz1ww43EAg:ahD5MVgdBvz9FSw40N","tlshash":"ade3fa5622f6017f1d53c2f8e7a66a1a7615a183d90bc86cbbec01905fc3dd6dca3398","dom_hash":"domhashd3a3d5c1aa5c4680b6f85ecb7dfbb888","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ecos.login-app-secure.com","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":0,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T17:06:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"ecos.login-app-secure.com/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.login-app-secure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.am","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.am","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-02-09T04:02:06.96467Z","alert_count":0,"request_count":2,"received_data":815943,"sent_data":842,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"app.uniswap.org","ip":{"addr":"172.66.0.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-11-26","domain_rank":119835,"first_seen":"2020-07-01T14:05:55Z","last_seen":"2026-02-08T17:32:45.847356Z","alert_count":0,"request_count":1,"received_data":29711,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ecos.login-app-secure.com","ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-02-06","domain_rank":0,"first_seen":"2026-02-14T16:55:21.138307Z","last_seen":"2026-02-14T16:55:21.138307Z","alert_count":8,"request_count":6,"received_data":123211,"sent_data":2716,"comment":"","tags":null,"fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":4,"received_data":197468,"sent_data":2260,"comment":"","tags":null,"fingerprints":null},{"fqdn":"walletconnect.network","ip":{"addr":"172.66.175.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-06-20","domain_rank":575071,"first_seen":"2024-09-17T08:10:22Z","last_seen":"2026-02-14T16:55:21.60184Z","alert_count":0,"request_count":1,"received_data":12084,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"play-lh.googleusercontent.com","ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":3758,"first_seen":"2019-09-30T06:57:53Z","last_seen":"2026-02-11T18:38:00.245336Z","alert_count":0,"request_count":10,"received_data":374465,"sent_data":5112,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-08T23:22:23.903795Z","alert_count":0,"request_count":2,"received_data":778326,"sent_data":866,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"files.carrotquest.app","ip":{"addr":"5.101.37.37","port":443,"asn":201589,"as":"edgeam LLC","country":"Armenia","country_code":"AM"},"domain_registered":"2020-02-11","domain_rank":3302419,"first_seen":"2020-06-06T14:25:03Z","last_seen":"2026-02-11T05:31:15.092805Z","alert_count":0,"request_count":4,"received_data":24448,"sent_data":1904,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-02-11T17:36:47.560103Z","alert_count":0,"request_count":1,"received_data":607,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ecos.am","ip":{"addr":"104.26.9.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-09","domain_rank":499499,"first_seen":"2019-01-13T15:43:20Z","last_seen":"2025-08-21T20:40:23.569569Z","alert_count":2,"request_count":1,"received_data":7353,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cryptologos.cc","ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-04-13","domain_rank":572515,"first_seen":"2019-08-22T11:22:00Z","last_seen":"2026-02-08T17:32:46.192317Z","alert_count":0,"request_count":10,"received_data":1209630,"sent_data":4663,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"ecos.login-app-secure.com/","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"md5":"fecbf39882e33f4755354c10d1b483b9","sha1":"16db7fb761f593b9fc176400ebe2fee5758d0de7","sha256":"c3dfb843c02f282d14a15e4798d8df88f25089c11134965d33a12862257e7d4b","sha512":"2ed80a894708108d82ce53cf25e8f840d19203150c0db4d6db4920dea551faf395b2d13afabd88e921b75e133de4913e5e7713fe18c260a889a68d142038a602","size":16855,"token":"7847099945:AAEGU-1wpdpmjECLqdU0F7TQergP2S60ccQ","is_revoked":false,"bot":{"token":"7847099945:AAEGU-1wpdpmjECLqdU0F7TQergP2S60ccQ","user_id":"7847099945","username":"klimara009_bot","first_name":"klimara009","last_name":"","chat":{"chat_id":"8176886401","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37176fa64ae940866fd1d4d98094c52d","sha1":"3eb53e0dd939cadffe73978e94a442f3e3b642da","sha256":"8dbd1199140ebb4d00b634f0facb0c18bc38bd6bce0afc7c17344ec20f20929b","sha512":"b922134767b970769075626398be0b6d696c5fbc326fd9796b92c286226a83be8b5bc2dd7bcaa1a7682f11fdc29055f1d0f1d3a87c136ff1ff63740b9c70a23b","ssdeep":"3072:KNmzLJQS4EpBOHWulxsuo4KzKjE/Cs8tMpAPO4LG6h3cjrIJwX6K6kd6eVAHyP26:p3P6hcKMIJr2d6eCSP26","tlshash":"298462af8fcd269f4c56e7881a4bb0501fed93bd331a8c12768e963bc252416dcb3651","size":388475,"data":"","first_seen":"2026-02-13T11:38:40.284311Z","last_seen":"2026-05-10T12:56:13.719527Z","times_seen":861,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ecos.login-app-secure.com/","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"fecbf39882e33f4755354c10d1b483b9","sha1":"16db7fb761f593b9fc176400ebe2fee5758d0de7","sha256":"c3dfb843c02f282d14a15e4798d8df88f25089c11134965d33a12862257e7d4b","sha512":"2ed80a894708108d82ce53cf25e8f840d19203150c0db4d6db4920dea551faf395b2d13afabd88e921b75e133de4913e5e7713fe18c260a889a68d142038a602","ssdeep":"192:iNInzl2veFLmOUVDWGFFCdASCIiveBnnahWnGPgR3tJtuqG/f9JaGL835W35INZE:t2mFLsDXJmBna8Rux/Zw5a5I9QJ","tlshash":"a572749b35b718350ef795bb2397978878110043a802c969be6cc6515fe2fd0e9ba7cc","size":16855,"data":"","first_seen":"2026-02-14T16:55:34.169929Z","last_seen":"2026-02-14T17:06:11.069231Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"ecos.login-app-secure.com/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"ecos.login-app-secure.com/kaliox.js?v=6","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfc447e633b58d8bd3334fbd662275f1","sha1":"e0733bf4679c3be8b639557e2aee08555613ed4e","sha256":"940c77f736ed27e039f5a69673cd70fd9f501738eb9ab8bf31929ebf39fbc9e4","sha512":"19870935075f611a7fa0d63de4920327e3c58ffc011ca2fd6317541765b0028465adf352fd362a6b6151de25b2147fc11b45d51cecd0734e1f3abed8d6e3aa3b","ssdeep":"384:1mkg2bcR2gfTBVYA/qbqYr9gQ7jigP615VhD/rX6dPEgP61ICn6SnX:skg2bcR2gfTBVYA/AQPH/r6657X","tlshash":"5b43539b23f31369691792786f971a576234a013d606cc2c7fec12cc4f869da9ca17dc","size":58887,"data":"","first_seen":"2026-02-14T16:55:34.144235Z","last_seen":"2026-02-14T17:06:11.043281Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-06-08T19:30:16.835599Z","times_seen":39843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ecos.login-app-secure.com/","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T17:05:45.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ecos.login-app-secure.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 19:24:26 GMT","end":"Thu, 14 May 2026 19:24:25 GMT"},"fingerprint":{"sha1":"25:E8:E8:2C:74:3A:F5:A1:1A:DD:04:80:2F:A9:81:3D:09:03:AC:66","sha256":"9A:44:9A:42:C5:D0:CE:28:E6:19:D9:1B:51:F9:AA:DB:03:D1:CE:48:09:67:57:40:9E:9E:B3:1C:5A:CB:57:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ecos.login-app-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 13 Feb 2026 11:55:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11658\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58807,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (472)","md5":"620b7ac8b67079f3bf955a2551a8e854","sha1":"5d3b9ac8d2f3e04f8f18350240cec0ab1ee0983f","sha256":"23562d43a39356ad433618597d7265a73a8c02a731c51f3d76b9dee005bd617a","sha512":"b07c24f94a5803a0e814a5ed837e980f39e5d7d161a262f4aa986171738ab26c24cb7d60f000f55be6b717a7b98fcbc8c3d89c8c0167f7a7fea213eecf8b97f6","ssdeep":"768:hAeeQyvTRSiiV04QqJRDOBU/9p1KSdvHUWrBDzHfcH3FtfV9zPOuLsDUT8Rw4m9T:meTK0Hf6fLzvww4CUa","tlshash":"5c43d8a131f2147b05d3c2f5b6a29f1abd959643d90bc928b2bc46811fc3cd1cdab398","first_seen":"2026-02-14T16:55:34.140925Z","last_seen":"2026-02-14T17:06:11.01555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":44,"dns":1,"connect":18,"send":0,"wait":18,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"ecos.login-app-secure.com/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.login-app-secure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"ecos.login-app-secure.com/index.css","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ecos.login-app-secure.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 19:24:26 GMT","end":"Thu, 14 May 2026 19:24:25 GMT"},"fingerprint":{"sha1":"25:E8:E8:2C:74:3A:F5:A1:1A:DD:04:80:2F:A9:81:3D:09:03:AC:66","sha256":"9A:44:9A:42:C5:D0:CE:28:E6:19:D9:1B:51:F9:AA:DB:03:D1:CE:48:09:67:57:40:9E:9E:B3:1C:5A:CB:57:E4"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: ecos.login-app-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T19:10:27.789861Z","times_seen":40777,"resource_available":true,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.login-app-secure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ecos.login-app-secure.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 144835\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T19:38:09.432053Z","times_seen":206372,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":192,"dns":1,"connect":20,"send":0,"wait":34,"receive":10,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/usd-coin-usdc-logo.png?v=026","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/usd-coin-usdc-logo.png?v=026 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 120909\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Feb 2026 13:36:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Nov 2020 22:18:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 358170\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OQ9npxq5F4YjsTyKBrn0mu3Xlk5%2BP8y5t40H60ViaoKNw7elF58DdigmXEeglOx1iow9lVMEW%2BsFrHRDWXMy%2BWGsvCB3G0PT%2B4OurLxN\"}]}\r\ncf-ray: 9cde26ff8d7d0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":120909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"c76b33ca42c5730ab77f3341ce9764a7","sha1":"2654d0ea7067f6da4d09a20d5d807a46ea193b8e","sha256":"95f156694ec62160f020803c8e8194f9e0b260d638b8674943360458fe318a2d","sha512":"96cca3b422cfe04a989f50dfac47dfb4fb0f2deb55e7bd347c1279f98666dbfb8b19b08bfc5edde0f6adb09a1620108edc82eac2693035d44a85342653e4f73a","ssdeep":"3072:eEuEaDh9wTUHMXRoUmkJ31EswRVuFcor61a+wwGopS49Q:eWE9w4sXjJ3WswHu2or6Qop+","tlshash":"07c302268735e246dda410fccb7749904dfd63bec22c7dc30a89d02ea566085b74e6ee","first_seen":"2023-05-31T01:01:47Z","last_seen":"2026-06-01T09:57:58.499873Z","times_seen":106,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"walletconnect.network/icon.png?14b0dfc4ce526451","fqdn":"walletconnect.network","domain":"walletconnect.network","tld":"network"},"ip":{"addr":"172.66.175.193","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.network","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 13:04:02 GMT","end":"Sun, 12 Apr 2026 14:03:52 GMT"},"fingerprint":{"sha1":"F1:7F:73:F0:38:F4:FF:76:13:11:B2:4C:47:48:29:C6:9C:83:2F:C8","sha256":"52:DF:AE:76:9D:1C:C1:2F:F2:05:BE:AF:84:23:3F:D9:56:A9:4F:76:F0:7A:31:F0:9E:01:B9:F4:00:90:32:BF"}}},"request":{"raw":"GET /icon.png?14b0dfc4ce526451 HTTP/1.1\r\nHost: walletconnect.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 17:05:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 11122\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, no-transform\r\netag: \"fd4dd127d1783049ea7387592f80687a\"\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-matched-path: /icon.png\r\nx-next-cache-tags: _N_T_/layout,_N_T_/icon.png/layout,_N_T_/icon.png/route,_N_T_/icon.png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s2YlpfGYxJwwBkc6XtSRweBt1hrc68jUSowArp0YSazWCATeBKbETDlbsx4P4KUfb1eyOX28PNYQxeNE7oXxwWhaUXLnGz6098v3Wx%2BI6JEb8IHIow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\nage: 889874\r\ncf-ray: 9cde27023858aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11122,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 768, 8-bit/color RGBA, non-interlaced","md5":"17b39e41e53f8a7085bef34f0af5b79d","sha1":"735873a728c297622042d7148b69adf29d3b5718","sha256":"75c6bceb56dcd1c604093b51613f950cf25db882afede49367864f883d838371","sha512":"da25f0f38837496d0f94381d3cb1fd23d45f10ad1dfad4a2f6ffd5b00f86d3cc069ab6a912526a0b9b07a9c30ff25e4c2edb6bb0929f176152df0010986447fc","ssdeep":"192:HSo4tqS/p5Jv9trVCZNoTn1qkKs83cxwitD82141k2YRKywd2jvfQo0NzrW5:yo4tqS/xYZk98WNy2S1ko7YbQoMzrW5","tlshash":"3b329ec4fde28190ebdae6bb46dbde89a7967d332b119d84913b66120e0603470c4963","first_seen":"2024-11-12T08:29:18.060288Z","last_seen":"2026-04-18T22:50:29.524029Z","times_seen":54,"resource_available":false,"data":null}},"time_used":1659,"timings":{"blocked":88,"dns":17,"connect":23,"send":0,"wait":1476,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/lm6Rk4Qc3eXUIxC8qkFCj46Bho6fbi6Lu3TwWuS3JNU2bBEcNU61arw_wG5wA0c-4IE","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /lm6Rk4Qc3eXUIxC8qkFCj46Bho6fbi6Lu3TwWuS3JNU2bBEcNU61arw_wG5wA0c-4IE HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 42196\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 13:15:11 GMT\r\nexpires: Sun, 15 Feb 2026 13:15:11 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 13837\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42196,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0d23664b0b8b6714f73e98975f8a780e","sha1":"c2d9bb50deec2f459e3e4c5931930a600bbc32aa","sha256":"0c07c3cd39a5cbd0af594d3c0a901d2546025be92779f742003f2cfab77399c2","sha512":"d6ac355f0c0c33aebfb434da334a8ddf5ee59727c032cb605dfe0eab893b957055dfe9efc3854d55b446c45ff77d94742da9246abae72b2287b478897ae55ccd","ssdeep":"768:jHvgtMbhjLhYy5CaKrFuYiCLYVC+1zU0nJglAIoa+AvEQuP/SrTMS8:oMNVYfgYNcV96Wg9oDj/k4S8","tlshash":"9513e127928032b96aefa3271dd419e1dc1c5945f80b761cbd6f3eb60b813e7435925c","first_seen":"2026-02-14T16:55:34.127399Z","last_seen":"2026-02-14T17:06:11.021159Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":95,"dns":22,"connect":8,"send":0,"wait":10,"receive":11,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/PjoJoG27miSglVBXoXrxBSLveV6e3EeBPpNY55aiUUBM9Q1RCETKCOqdOkX2ZydqVf0","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /PjoJoG27miSglVBXoXrxBSLveV6e3EeBPpNY55aiUUBM9Q1RCETKCOqdOkX2ZydqVf0 HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 43441\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 17:05:48 GMT\r\nexpires: Sun, 15 Feb 2026 17:05:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\netag: \"v1\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43441,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 512x512, components 3","md5":"b73c79387e77706b235f0c8c5ddc8ab6","sha1":"a93b4948f3175a62af22e66a71e7c4c944e001ee","sha256":"39d78fc2e8f26aca8d00da924af93d30133d1f871bfa03a1b8a1dd9fc6a94ccd","sha512":"54c9ea11364991293f01d48a0975e05ee6064e5b678773520ef17024abb185bb6da3e1c8911d78d2e0f193505ef35fc3681475829c766427558d12e1bec4d3f2","ssdeep":"768:ZMe5iuFNOamgYcVPKupbSBiYF62CZwjMWgSk3uSbEjf8e8rSiZW:ZMe5P3hPnSBiYs2CZ+M7ESbEjEnrrW","tlshash":"8113ce34fbd7e726239399ae28bc7d77170846d538d16243440bcd15ea8afb50a1b1bc","first_seen":"2023-10-14T13:24:38Z","last_seen":"2026-04-11T03:34:06.995097Z","times_seen":30,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":72,"dns":20,"connect":26,"send":0,"wait":37,"receive":5,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/TjM3iJJHQBi8yvElMbbP3AJieBK0jAjGKO5oQKUVg09qYPZiADjtjQEBAhMCIB09Ky0","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /TjM3iJJHQBi8yvElMbbP3AJieBK0jAjGKO5oQKUVg09qYPZiADjtjQEBAhMCIB09Ky0 HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 4514\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 17:05:48 GMT\r\nexpires: Sun, 15 Feb 2026 17:05:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"07e5c25521e6804299aaf5d147bc219e","sha1":"006bcaa610f606f32aa8b13b51b3159d1ba35457","sha256":"144d8b5b02663f9a7c884af8e420d28e2d88df02e7a7c5b6149eb60bebc7231d","sha512":"61b57d391f6a9ea613c1568dad81681426c0abec7909dcefe4339bdb71b974f6682a26ec462646812cc820d6022e20787f5434f658dec179c4cd22368e6c287e","ssdeep":"96:skGDkUt7ZIoiVm5XXWVTEHKQ/YM259rGjN:0DkUVZSq0T6KQ6DrMN","tlshash":"d9919301774a028a6bf9d6e9818309cb6de1c882f7aad33a314c165947d148e2f67fe5","first_seen":"2025-12-24T21:42:35.412842Z","last_seen":"2026-06-06T16:45:30.799353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":158,"dns":17,"connect":26,"send":0,"wait":21,"receive":1,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /lucide@latest HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 53\r\ncf-ray: 9cde26f83c96723c-OSL\r\nlocation: /lucide@0.564.0/dist/umd/lucide.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388475,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":41,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ecos.login-app-secure.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::gv5lr-1767495562922-401ec0c56245\r\nlast-modified: Sun, 04 Jan 2026 02:59:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 3593183\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4q9ffGpBX%2BGftjbfqmTjLmnLq6VQ6KI4r5z6zyJ1lHQIQvCM%2Fg1XgiP5dzoL3HzSSlL6%2BTVtERuRkMN9Wus6MJVc3yHj72wqbsnYpYLowW00Q%3D%3D\"}]}\r\ncf-ray: 9cde26f96b0648d0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-06-08T19:30:16.835599Z","times_seen":39843,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/bnb-bnb-logo.png?v=026","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/bnb-bnb-logo.png?v=026 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 104712\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 20 Feb 2026 10:11:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 25 Feb 2022 07:07:33 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 111246\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dVC%2B9RGB8v6psoFFZ1qDhzC7rR2ibdSQSeRtjalkKPzsVg%2BbS0YZmFH0o5Qv0Zu6iaNwuBFLmt2vF3oFC1sESF54xBZkULjC1p23mPnK\"}]}\r\ncf-ray: 9cde26ff8d7f0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":104712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"9faf561e1bbd427d5d739b539249357f","sha1":"fbfac48e3c8c1caa9d17b8a38281eeef0d996d43","sha256":"86d65436ed9470ff4447f0ffd6426fe2622577421866e49933d2615bdb2a1a18","sha512":"aff23cde575e2cc346d303da8f1b432981bbbdeacbc02cd64f8808add90933033b8f0121cdb48b406e24fbc47234cccbcea1ba8b90b83ebfb0165f76087e04ba","ssdeep":"1536:FdYeBHIGj69qzWK89JQJV+04SoKLSc/viVXad7CL2gKpjc4f5XdG6YJhonwT/sv:zYnW64z03Q2pKrd7CKlac0JGwDsv","tlshash":"3ca302b6a3a5ec45e9939e3cec3e2ee2d774837fca4c5dd07ad09201121463aba154dc","first_seen":"2023-05-31T01:01:46Z","last_seen":"2026-06-08T12:29:11.819459Z","times_seen":285,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/T1_WHAGs5WZePQejNSqqrxZah4uhBvYr698nTCFhXMjMZo5oSCoko5yW2wtmeO1ClRU","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /T1_WHAGs5WZePQejNSqqrxZah4uhBvYr698nTCFhXMjMZo5oSCoko5yW2wtmeO1ClRU HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 32637\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 15:44:29 GMT\r\nexpires: Sun, 15 Feb 2026 15:44:29 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 4879\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"d7d868897b199163a409ebb9598b7214","sha1":"53be6cb5ace3fb6423b02b7dc38ea36867422aa1","sha256":"1c2835cfa0029e95e1edbd67588d943b724bb7b7b9fed0deda834b7be8816370","sha512":"63694495df3f72b863bcfdbde48cc2b27e63ad44232add15d9dfc8be999e32eb05207d92a1c3fda675314a3731bce679624c7ac9b24a8ff2285620442902542d","ssdeep":"768:5WUyPkt4HA341X2iBHBZ59qzq/Mrs7vHh:5d9wA341m0hZjqzqErmB","tlshash":"dfe2e019a595d48c077fce036ea6c5fa31b776313f0b74650622c20c9e72b3074aa67a","first_seen":"2025-02-18T16:11:25.195788Z","last_seen":"2026-05-02T10:58:29.083173Z","times_seen":12,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":70,"dns":15,"connect":40,"send":0,"wait":34,"receive":2,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/xs4ZUIOATV_bGfdl2yd0mWev9bcK2_a4ofnUEIIQe2_BecUqOVQ7YmtXu41Ereg0Kg","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /xs4ZUIOATV_bGfdl2yd0mWev9bcK2_a4ofnUEIIQe2_BecUqOVQ7YmtXu41Ereg0Kg HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 11326\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 16:57:23 GMT\r\nexpires: Sun, 15 Feb 2026 16:57:23 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 505\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"4567f0454949d137aed8f346c36562f5","sha1":"ea5496a8cf027a75b11ec7a6ad5ccd98cf9119bb","sha256":"f6079694aa28fe73b848c263569265e7cf523b8d95b89c27904f5935f90db971","sha512":"68da3ef63e951a6f8789062090d78c228bd8562abd58179b24ac14a8e0f2b095e5f9ffd3748168f1e4726a1db7929dd96397669a222ccbb28aaa5511d541a7c0","ssdeep":"192:vZ5uQECCakIU7AJyytkJtkvlnx/7SSjZZZZZZZZZZZZZZZZZZcQPhukNuODCaWgK:vPVosJ3WInxjSSjZZZZZZZZZZZZZZZZ4","tlshash":"ba32e647180a9bfbda085531209f2d9bb1ac144b5bd643ddbfa9f36c34099fa13436b2","first_seen":"2026-02-14T16:55:34.14964Z","last_seen":"2026-02-14T17:06:11.03275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/vI_5JEK5-V4vDgxdjQYkfZ1Dr-kcRJ8_5FywydARsm8ZXd9rB2iUB9Jk4gl_lg3udZ7k","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /vI_5JEK5-V4vDgxdjQYkfZ1Dr-kcRJ8_5FywydARsm8ZXd9rB2iUB9Jk4gl_lg3udZ7k HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 50023\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 17:05:48 GMT\r\nexpires: Sun, 15 Feb 2026 17:05:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"62132ee8be5d6d36dad81bcb0da5e014","sha1":"db3aa6354059d7d018ad53c8b5b95c4041d9af2b","sha256":"1e23d6adf2da0452ee20dcf0df55c75a09c3f6131af0530309e0a0386b7eb083","sha512":"ec1e81ba5da39a26838956cdbebf0da9676d38e7f98fec474a671b49f171f5825626dcc2ca4f2bcba78cf7c64cb4a35e4ace928774def20d53e7ad04d774dc84","ssdeep":"1536:vFLYm3PujSNt6RGHCcSQU/G/Co+c0hXiXFzE89g5Zfq//:vFLYcP2SNt6ECcj/z0hXIB99GZCX","tlshash":"2823e1aa82d28635dd5f0578d29f022b38b113f5bdf8158aa9971008284f6dcd7fdca7","first_seen":"2026-02-14T16:55:34.156768Z","last_seen":"2026-02-14T17:06:11.033498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":39,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::c4hw2-1771088540315-ed62084680e5\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 205\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oBqPnJ1BOmNQxKaoqVjC%2FwwHagUMOEBCspShDWPcTQrZs2r3vPdqZ7mPAf3oH9GzeraMeLxk4EUm02mjRbOiH1PJ7Ah7CKoqBVfPwTwDK%2BS%2BA%3D%3D\"}]}\r\ncf-ray: 9cde26f8884948d0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":55,"dns":13,"connect":8,"send":0,"wait":16,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.carrotquest.app/avatars/1717142559958-chjvqgpm.jpeg","fqdn":"files.carrotquest.app","domain":"carrotquest.app","tld":"app"},"ip":{"addr":"5.101.37.37","port":443,"asn":201589,"as":"edgeam LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.carrotquest.app","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:C7:64:48:C5:9C:EA:97:35:0D:D4:DD:E8:6A:2A:CD:6B:A7:47:56","sha256":"E1:65:44:A1:2E:D7:6C:6A:5F:33:46:3D:1F:EE:F0:76:01:E0:53:4E:9B:03:34:DD:2F:2A:66:E4:0B:CB:07:7F"}}},"request":{"raw":"GET /avatars/1717142559958-chjvqgpm.jpeg HTTP/1.1\r\nHost: files.carrotquest.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4129\r\netag: \"fe547e3a26c5a4441ff93ab167003eb7\"\r\nlast-modified: Fri, 31 May 2024 08:02:40 GMT\r\nx-amz-request-id: 21ade8201ad80e4d\r\ncontent-security-policy: script-src 'none'\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-12T05:33:29+00:00\r\nx-node: fr5-up-gc15\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4129,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x120, components 3","md5":"fe547e3a26c5a4441ff93ab167003eb7","sha1":"b625a0427ada529c6820f815bdac5413890dae5d","sha256":"4efbfeae2f753d61bcb64ec71fd333b828f05122d679303542c920ee809d7a00","sha512":"65ec03b633ccfc13e78598a4f2ac8214bf2c2f78c6d3cf9acaa7fd3ba208d0d5a27996701c5b455bdc78cd88ee84bde132dd2bdd5d010fcd415ec22f6902ce57","ssdeep":"96:RhE9IIHyB9Y5UqhEGE5yPC3UeWgyz+IpvJHh6nNnXY8y:RhCIISvY5U/yCUefytiNnk","tlshash":"72814a5fce4bc5e8ac41937bfaa077f9ee599a82f69534664db14ce187080c52c08f2c","first_seen":"2025-03-05T16:43:52.591721Z","last_seen":"2026-05-23T13:08:21.28944Z","times_seen":4,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":211,"dns":0,"connect":19,"send":0,"wait":21,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ecos.login-app-secure.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 144835\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T19:38:09.432053Z","times_seen":206372,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":180,"dns":0,"connect":21,"send":0,"wait":21,"receive":21,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/voFLXuFxLsIFBHQKmFxUhgAo23RXmO6_esdEb6ebfHQewdMlAfNKq3vAaDh6clJ7Pw","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /voFLXuFxLsIFBHQKmFxUhgAo23RXmO6_esdEb6ebfHQewdMlAfNKq3vAaDh6clJ7Pw HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 135676\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 15:23:51 GMT\r\nexpires: Sun, 15 Feb 2026 15:23:51 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 6117\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":135676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"dcb731898126b4a57c76291a7dc908a1","sha1":"aca32cedbed461d6c302aaa36f29460071eedea0","sha256":"6f61f30f858c70883e6cb154cd40a65a5bacfb0b111165b964271dae4afecc9e","sha512":"60520eb6e46fdc8a55e5781d0e503775114a0548b3e79ca42c82e90cd1da9bf06680ade517027e0fe5915ae6480b996e026f98860bc7d68a95dde87f99784be6","ssdeep":"3072:6fkfTYmUKMMVIefPS7ONKcIq33WV/ST0BfwzEop1vYoupDSURr:rYmUIGefaONlIq33edhop1rupDSUx","tlshash":"67d312e980952ea2775f733b5fa45b50ebda31dd82067f2106fe11edcd4932d0aa1c82","first_seen":"2024-08-19T13:46:23.488858Z","last_seen":"2026-05-25T20:57:09.303248Z","times_seen":11,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":22,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@0.564.0/dist/umd/lucide.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /lucide@0.564.0/dist/umd/lucide.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ecos.login-app-secure.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9cde26f88eb5723c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 36915\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 14 Feb 2027 17:05:46 GMT\r\nlast-modified: Fri, 13 Feb 2026 11:30:30 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:jb0RmRQOu00AtjTw+ssMGLw4vWvOCvx8FzROwg8gkps=:\r\nfly-request-id: 01KHBC8J60736R2P8S4WARNZ2Z-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":388475,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65368)","md5":"37176fa64ae940866fd1d4d98094c52d","sha1":"3eb53e0dd939cadffe73978e94a442f3e3b642da","sha256":"8dbd1199140ebb4d00b634f0facb0c18bc38bd6bce0afc7c17344ec20f20929b","sha512":"b922134767b970769075626398be0b6d696c5fbc326fd9796b92c286226a83be8b5bc2dd7bcaa1a7682f11fdc29055f1d0f1d3a87c136ff1ff63740b9c70a23b","ssdeep":"3072:KNmzLJQS4EpBOHWulxsuo4KzKjE/Cs8tMpAPO4LG6h3cjrIJwX6K6kd6eVAHyP26:p3P6hcKMIJr2d6eCSP26","tlshash":"298462af8fcd269f4c56e7881a4bb0501fed93bd331a8c12768e963bc252416dcb3651","first_seen":"2026-02-13T11:38:40.284311Z","last_seen":"2026-05-10T12:56:13.719527Z","times_seen":861,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ecos.login-app-secure.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 144835\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T19:38:09.432053Z","times_seen":206372,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":198,"dns":3,"connect":21,"send":0,"wait":28,"receive":11,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/bitcoin-cash-bch-logo.png?v=026","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/bitcoin-cash-bch-logo.png?v=026 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 93444\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:19:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 30 Jun 2021 12:37:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 27989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yuKN8XkteDnDdvnOvDt5zurhP8k8%2BbseofrIP8y2eCU8mFKfLfd80OFWkm%2BLyUlcnRWd0OPmik2ESOlfXE15ATdwxVeAHKkCGQot7YIi\"}]}\r\ncf-ray: 9cde26ff8d830d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"86ef8464a0829ab6c38c0ba5acafaf95","sha1":"1b8d4e2be77ef4b68ff021497ab20626de35c02f","sha256":"edb3c89bf41872066f3b1313dbb710bbadd1793e1e5d6a7d6b3f21b54903b141","sha512":"b2c2f60ac6c25b30c6556d36133689beb0096e4f2db0c814560a80b4bf28b2bba2f15cfbaf95d43daa652b8e8211411a0586c366888561ec232075f007aeac36","ssdeep":"1536:x+d7PCTifxZYTaj15wIgnapVd3Ru0HFBwGHDvVCWbe+iB1NS/7ww67YsdjXSeUM6:x+d7Ii5CqIIgOR/DvrK+iB1w/kL7vShR","tlshash":"8093f2972da2dbb0c96c8bbc6e7adfd467541278c11d7dc54228f10479022626c7adcf","first_seen":"2025-02-26T18:18:23.123117Z","last_seen":"2026-05-16T17:12:27.230562Z","times_seen":78,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/litecoin-ltc-logo.png?v=026","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/litecoin-ltc-logo.png?v=026 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 77610\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:19:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Nov 2020 22:18:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 27989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhPwuOM0vj4BGPY9fgrN9EhT8ui%2FmU2nOz74mpzaQk9xGsjAoQuIdwcq7QHAn8PUuS2bXX4sWXYi%2BYFrVg0NVUO2BVCO4E5UdqgBs8Sr\"}]}\r\ncf-ray: 9cde26ff8d820d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"afde79b0f20237956b68b08bd09ed5b9","sha1":"f502a66a332077006fb2804073902c8d1a77c72b","sha256":"5dec0cd842ad44d11f9082a9af3348c40b853dc42103075f5e42fcc10d75e40d","sha512":"95b6d882cbac4b8ef9ec2f06f53dc477b19f48b791efecc1f8f139821ea7ec6c96d519d447f4b7a1ee190cb3192896ae1afe57480afd9d1481759d6dbb10b4f2","ssdeep":"1536:Sc6OHsJJpySC29Z/p3lx29Y2ecp+UML5IqrMXgKajkOtq6PVN27l:S2KJp1pJczp+UMV3mgKEAl","tlshash":"0373f16b1f6acdd0d0b316be98792dc1bbd43670da28dccd26639d183b1a0f8641d8c9","first_seen":"2023-06-29T01:58:48Z","last_seen":"2026-06-04T19:51:42.803885Z","times_seen":275,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/CcboHyK1Id9XQWa8HXb_81Rvgqy7J816OHiTcGlezcwC-tx4cnrrXPx1x6cR0PowqA","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /CcboHyK1Id9XQWa8HXb_81Rvgqy7J816OHiTcGlezcwC-tx4cnrrXPx1x6cR0PowqA HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 5840\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 17:05:48 GMT\r\nexpires: Sun, 15 Feb 2026 17:05:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"62b89a0cdd10136e021c11484c00d7de","sha1":"043a8201d154608ac19dd0b250bac7500ca111a0","sha256":"1f83201c4c70b56580697616c757ead1757a8d1b3f6e6f7fc5e792f057a031d5","sha512":"0c43fa727f1b0a80d28f3d5a17b99bc863941265cec494ece6f4011f4f75c4088590e8f78c788539d5013f38c6e26ac68df45e681636157fbfaa8b6fda91cbf8","ssdeep":"96:nSnC8xOxdIMtJUzc2P09tElcJY2unmNVISHxC6Of9oHvZsdEHb1HL5DN79FtxWEm:nSnC8UdBJgc9t61n4VBNW9oHvZPZr5Dq","tlshash":"8cc1d6e34e3c5269667cc0fad69386c89cf5c48791eb91b4e40e8f8828db5446f25b94","first_seen":"2023-11-22T14:10:38Z","last_seen":"2026-05-03T10:03:53.603653Z","times_seen":39,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ecos.login-app-secure.com/kaliox.js?v=6","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ecos.login-app-secure.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 19:24:26 GMT","end":"Thu, 14 May 2026 19:24:25 GMT"},"fingerprint":{"sha1":"25:E8:E8:2C:74:3A:F5:A1:1A:DD:04:80:2F:A9:81:3D:09:03:AC:66","sha256":"9A:44:9A:42:C5:D0:CE:28:E6:19:D9:1B:51:F9:AA:DB:03:D1:CE:48:09:67:57:40:9E:9E:B3:1C:5A:CB:57:E4"}}},"request":{"raw":"GET /kaliox.js?v=6 HTTP/1.1\r\nHost: ecos.login-app-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 17:05:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 13 Feb 2026 11:58:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9414\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":58887,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (487)","md5":"cfc447e633b58d8bd3334fbd662275f1","sha1":"e0733bf4679c3be8b639557e2aee08555613ed4e","sha256":"940c77f736ed27e039f5a69673cd70fd9f501738eb9ab8bf31929ebf39fbc9e4","sha512":"19870935075f611a7fa0d63de4920327e3c58ffc011ca2fd6317541765b0028465adf352fd362a6b6151de25b2147fc11b45d51cecd0734e1f3abed8d6e3aa3b","ssdeep":"384:1mkg2bcR2gfTBVYA/qbqYr9gQ7jigP615VhD/rX6dPEgP61ICn6SnX:skg2bcR2gfTBVYA/AQPH/r6657X","tlshash":"5b43539b23f31369691792786f971a576234a013d606cc2c7fec12cc4f869da9ca17dc","first_seen":"2026-02-14T16:55:34.144235Z","last_seen":"2026-02-14T17:06:11.043281Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.login-app-secure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 17:05:46 GMT\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f04de8ad1ef740d940ec0f534a8f6474","sha1":"3b31756e84c8887867417c7d6cc64501c9d9193c","sha256":"2f1ac0c31bc3ede8317cf72e9d28051ec727c9a0014aa69cff495abd6256bb4e","sha512":"69afede137c125294044274e463f30c02594f379ec879285e0b3ee41097f503dfb8272487759870f547e4dc4cf8828a2c1efaa806deb2f3124b7f6d67c638783","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:8KYXuM0p2+4","tlshash":"28427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:44:19.218006Z","last_seen":"2026-06-08T19:45:21.699888Z","times_seen":24121,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":198,"dns":1,"connect":11,"send":0,"wait":19,"receive":0,"ssl":197},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.carrotquest.app/avatars/1700480024381-a7oof857.jpeg","fqdn":"files.carrotquest.app","domain":"carrotquest.app","tld":"app"},"ip":{"addr":"5.101.37.37","port":443,"asn":201589,"as":"edgeam LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.carrotquest.app","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:C7:64:48:C5:9C:EA:97:35:0D:D4:DD:E8:6A:2A:CD:6B:A7:47:56","sha256":"E1:65:44:A1:2E:D7:6C:6A:5F:33:46:3D:1F:EE:F0:76:01:E0:53:4E:9B:03:34:DD:2F:2A:66:E4:0B:CB:07:7F"}}},"request":{"raw":"GET /avatars/1700480024381-a7oof857.jpeg HTTP/1.1\r\nHost: files.carrotquest.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1848\r\netag: \"a1df71b9c377dbc0bd4609127cd2409b\"\r\nlast-modified: Mon, 20 Nov 2023 11:33:44 GMT\r\nx-amz-request-id: 5080c9ab44ce5629\r\ncontent-security-policy: script-src 'none'\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-12T08:41:37+00:00\r\nx-node: fr5-up-gc15\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 48x48, components 3","md5":"a1df71b9c377dbc0bd4609127cd2409b","sha1":"bca8d85d424f63609aff36ec1f93a4d9f2ab17af","sha256":"085ab285580cdb5f2a46d4896f24275bba513acb35f47035c7a891f083896e49","sha512":"1a8c86308422e9c27240372a92aae5c3f0ba7145823aa2fcb6ffc3576887859e0a61fb1449b54e5cfa97fef803940e3b210440b53b18a975f20eba00ff98e6bc","ssdeep":"","tlshash":"ad310b76ee11814cc50704bf81484999e1455cc6f9083b0a3dfa1280ec004e98a69ade","first_seen":"2026-02-14T16:55:34.135319Z","last_seen":"2026-02-14T17:06:11.04517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":209,"dns":0,"connect":19,"send":0,"wait":20,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ecos.login-app-secure.com/index.tsx","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ecos.login-app-secure.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 19:24:26 GMT","end":"Thu, 14 May 2026 19:24:25 GMT"},"fingerprint":{"sha1":"25:E8:E8:2C:74:3A:F5:A1:1A:DD:04:80:2F:A9:81:3D:09:03:AC:66","sha256":"9A:44:9A:42:C5:D0:CE:28:E6:19:D9:1B:51:F9:AA:DB:03:D1:CE:48:09:67:57:40:9E:9E:B3:1C:5A:CB:57:E4"}}},"request":{"raw":"GET /index.tsx HTTP/1.1\r\nHost: ecos.login-app-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T19:34:27.179619Z","times_seen":16247994,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.login-app-secure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/ethereum-eth-logo.png?v=026","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/ethereum-eth-logo.png?v=026 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 160579\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 12:57:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Nov 2020 22:18:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 187697\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyyQV4v9hFbkuBfRTSTpbkKoxUim0C4eVxZqjCcgpD55nEqO9ygM0gx%2FM8i1gmBjCLNb58tBNgm2BrDN6diykfG5JxJybVABazsvO76S\"}]}\r\ncf-ray: 9cde26ff7d7a0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-06-08T12:23:57.887125Z","times_seen":571,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":32,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/khteka","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 10:30:43 GMT","end":"Sun, 05 Apr 2026 11:28:02 GMT"},"fingerprint":{"sha1":"19:1C:B1:F3:D2:08:65:B6:9A:C1:B4:79:D3:ED:56:0D:86:BE:C1:C5","sha256":"D5:42:A7:E8:38:8B:14:DE:00:B4:7F:DE:0D:40:F9:71:1D:5A:5E:5F:69:37:DF:9D:89:C2:31:AD:C5:EA:46:22"}}},"request":{"raw":"GET /css/khteka HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gy9EsYx4OHsqnVx1%2BqsolyHLkz07GBUy%2BqAjDEfEiBEVKTg67VqGDWnrrU2SXkN73fFNCoaOdg2BcstO2uq3ivDAuhNgxWeuCH%2BE6z5Aq2rahw%3D%3D\"}]}\r\ncf-ray: 9cde2701fad096b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"9ed7b4d61c20c923d2f8e59b52c37140","sha1":"7e07b6d042245040fd46327f928c22f028f71750","sha256":"c50223240ab6ab6a404d9d3eb04b551ba4bbcba61050de8b38a7034dc6918ee2","sha512":"6feaedc06b92f7fe2b9169d8954a7f6bb17f07856cf36d9fbf7b11c109d50d175065f6b1b99550c8240ec5e5dcb9913db887b4ea0e099ed0bdefaa3c62f2a33c","ssdeep":"","tlshash":"4f80002300020eaf80200022280b00883b283223c0e38080a2208a333ccb8cef808208","first_seen":"2023-04-10T20:50:58Z","last_seen":"2026-06-08T18:41:46.676263Z","times_seen":297,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":56,"dns":0,"connect":8,"send":0,"wait":100,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ecos.login-app-secure.com/index.css","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ecos.login-app-secure.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 19:24:26 GMT","end":"Thu, 14 May 2026 19:24:25 GMT"},"fingerprint":{"sha1":"25:E8:E8:2C:74:3A:F5:A1:1A:DD:04:80:2F:A9:81:3D:09:03:AC:66","sha256":"9A:44:9A:42:C5:D0:CE:28:E6:19:D9:1B:51:F9:AA:DB:03:D1:CE:48:09:67:57:40:9E:9E:B3:1C:5A:CB:57:E4"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: ecos.login-app-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T19:10:27.789861Z","times_seen":40777,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.login-app-secure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.carrotquest.app/avatars/1742377712246-zmkjhdju.jpeg","fqdn":"files.carrotquest.app","domain":"carrotquest.app","tld":"app"},"ip":{"addr":"5.101.37.37","port":443,"asn":201589,"as":"edgeam LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.carrotquest.app","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:C7:64:48:C5:9C:EA:97:35:0D:D4:DD:E8:6A:2A:CD:6B:A7:47:56","sha256":"E1:65:44:A1:2E:D7:6C:6A:5F:33:46:3D:1F:EE:F0:76:01:E0:53:4E:9B:03:34:DD:2F:2A:66:E4:0B:CB:07:7F"}}},"request":{"raw":"GET /avatars/1742377712246-zmkjhdju.jpeg HTTP/1.1\r\nHost: files.carrotquest.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9623\r\netag: \"4da4244ca1d51b03ae563510efb56570\"\r\nlast-modified: Wed, 19 Mar 2025 09:48:33 GMT\r\nx-amz-request-id: 9baa69eb7cf396fc\r\ncontent-security-policy: script-src 'none'\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-11T02:45:39+00:00\r\nx-node: fr5-up-gc15\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9623,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x118, components 3","md5":"4da4244ca1d51b03ae563510efb56570","sha1":"c7260691dc8721e7d614a78cdec583e8345f141c","sha256":"d7d14aca97649a42bee7c749198d1dd483dc2d69b47fe5372e1396a4a8f52cd7","sha512":"ecf64d580edb15a49af2275353303a6da9f3574eba49e03d1c80c64a205f200d99a35386173f1114dcf78f43a6a8dbd8ddc857f908147d4e5da8e00a87937e3d","ssdeep":"192:R/eDTtNxJIu4sRuHzxdoiMV+Bst5FzDO1ct3hwrUjtwZ94CGHYcyJ:R/eDTV2ugHzxdK/zDOKtxYZ94bE","tlshash":"7712b017fed880c18ed745f3856f20574ae61a2fe0a33d487e984967bddd4e202461e1","first_seen":"2026-02-14T16:55:34.161537Z","last_seen":"2026-02-14T17:06:11.054816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":315,"dns":43,"connect":19,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/cardano-ada-logo.png?v=026","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/cardano-ada-logo.png?v=026 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 91295\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 09:19:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 Jan 2021 10:51:56 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 27989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfhTHZh7itKM7mWAHwbUvOQiJuGVC1sPqH8lSsjP91CSglNQ7ZdlqOlaQd0ePuFb0V9%2F%2FJ8T%2Bo%2FVoZYUy4ggJpCZcivzVrBtfZgvoPSN\"}]}\r\ncf-ray: 9cde26ff8d800d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":91295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"540aa59d91a4787dfd0e4d6fd6611948","sha1":"5a061f71ea9d5e6d75d7ea8ede158429dc6989e2","sha256":"6fc4ef25984bb160f798548364667ec38afa7d13e8ab19837cafca94085b79f8","sha512":"7245aea5b3783b3d133ff1e14f934f504bd760a9965f1cbae8bca3c46192d062adbceba625996e442865a070c79193df3baf9da1ef8bad2dc005716ee4b90796","ssdeep":"1536:NfUUUUUUUU76kTV88mbpnorSOqDHtditBv/JMUEm26d/aDIJnL9I3oYVuIyANBkE:NdmLOS8JMUEmzdCInhIXASBkNgd9fVrL","tlshash":"b393e0eb1816dae6c4a040bcd9b7abc633745a7dc248cedf4379b4719dc698c38169c8","first_seen":"2023-11-11T03:35:51Z","last_seen":"2026-06-04T19:51:42.825966Z","times_seen":357,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ecos.login-app-secure.com/favicon.ico","fqdn":"ecos.login-app-secure.com","domain":"login-app-secure.com","tld":"com"},"ip":{"addr":"194.36.191.196","port":443,"asn":60117,"as":"Host Sailor Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ecos.login-app-secure.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 19:24:26 GMT","end":"Thu, 14 May 2026 19:24:25 GMT"},"fingerprint":{"sha1":"25:E8:E8:2C:74:3A:F5:A1:1A:DD:04:80:2F:A9:81:3D:09:03:AC:66","sha256":"9A:44:9A:42:C5:D0:CE:28:E6:19:D9:1B:51:F9:AA:DB:03:D1:CE:48:09:67:57:40:9E:9E:B3:1C:5A:CB:57:E4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ecos.login-app-secure.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ndate: Sat, 14 Feb 2026 17:05:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-06-08T19:10:27.789861Z","times_seen":40777,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.login-app-secure.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/cd5BevWohRqLwsI2_i3k4YIVtcO57cIZCs6l20H1Hcdj0P2rFEcX_7QtgKbTM3Sn_A","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /cd5BevWohRqLwsI2_i3k4YIVtcO57cIZCs6l20H1Hcdj0P2rFEcX_7QtgKbTM3Sn_A HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 40971\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 13:58:57 GMT\r\nexpires: Sun, 15 Feb 2026 13:58:57 GMT\r\ncache-control: public, max-age=86400, no-transform\r\nage: 11211\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"9145516d94fb3746d0d7af38092740f5","sha1":"e4b7991ec8345d3e134e923d44ddad89b241935b","sha256":"4ca01eecd8badc7255c5aebafd7514931bfeef093874c7f6b5164d3e2918d97d","sha512":"02985ca11afd2cae65de8bb4135d205e9dcda5ad6a230dc2efa6d4482926ecf919fec082d5efa25b16f7e597d471956e13a04639363ee5f48c9580eb177da45d","ssdeep":"768:iGjT9kL5P3BIxNAzzLnlRgAsdvQYZ3n0OOYnrwjhW+r9g/6:H2lDKACvV50HYrch7m/6","tlshash":"9003e1aa44b424d1ad7824b2c12b11eb8b2fbdefd8cc7517252707947c1c0ba5de4d67","first_seen":"2025-05-06T13:42:30.570947Z","last_seen":"2026-02-19T14:38:28.862172Z","times_seen":6,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":104,"dns":21,"connect":8,"send":0,"wait":26,"receive":8,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ecos.am/Logo.svg","fqdn":"ecos.am","domain":"ecos.am","tld":"am"},"ip":{"addr":"104.26.9.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ecos.am","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 12:20:15 GMT","end":"Sat, 02 May 2026 13:20:06 GMT"},"fingerprint":{"sha1":"AF:46:12:C7:60:81:B1:C8:AF:A0:CE:26:11:00:6E:65:A1:05:FC:20","sha256":"35:42:DE:1D:81:72:0D:E9:23:6B:93:63:E4:C3:74:B8:12:5F:B5:D3:88:0F:F4:55:E9:5F:48:E2:C9:0D:2B:A6"}}},"request":{"raw":"GET /Logo.svg HTTP/1.1\r\nHost: ecos.am\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2197\r\nlast-modified: Mon, 12 Jan 2026 11:43:26 GMT\r\ncache-control: public, max-age=31536000, must-revalidate\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nx-dns-prefetch-control: on\r\nx-powered-by: \r\nserver: cloudflare\r\nvary: Accept-Encoding\r\netag: \"895-79tmZXPTEJbtiYdDdC0ComECG0Y\"\r\ncontent-encoding: br\r\nx-envoy-upstream-service-time: 3\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 8459\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IP8S3fExfpBKYNue2ZT7c2pFOcu%2FLKnGOV0dEMo40DW9TWqOOOxgXu5dK8G7CHVJwHZ9vvY%2BbDqLSfwDpqqQf9ULgG3xIQ%3D%3D\"}]}\r\ncf-ray: 9cde26f889a14435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6331,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ba419d14e4acd297c008b4f13ff6f40","sha1":"ae9145714f69008c77875bf0a8ee9eed5a17992d","sha256":"7a9b43b51987fbf93ee58409b722f674e7556868744dbfff722cccfeba93f769","sha512":"a6da326818481d1e14efde6ca065f696ef380cd1f1c547e5e1efa0bd1573fc7d4091f801d4bb5564f44d070aff352efe458764f6f8362f4ce5ed532809cbeb8d","ssdeep":"192:ySRjCOW1B+o+8XaPSM5jx48RUJuQNqIWGt:yShC+PpjxeNqIWi","tlshash":"05d1a79bb7e5d6a1f149d3b8c415c474356b20faa6c4d2e4c391bf0f691208f6c4d6e0","first_seen":"2026-02-14T16:55:34.167561Z","last_seen":"2026-02-14T17:06:11.057032Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":52,"dns":12,"connect":10,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.am","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"ecos.am","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/bitcoin-btc-logo.png?v=026","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/bitcoin-btc-logo.png?v=026 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 87786\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Feb 2026 05:22:55 GMT\r\nlast-modified: Fri, 20 Nov 2020 22:18:12 GMT\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 301370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QSu0k5YYf9KfBNsDgv9JrZaRRt5ruBC6xBFxskFGdcOVYdiXqYYe%2FNZrPVJTZytyLzUlW3tNVCRRaVSEnGweJsAMc3m%2FUtaAb4HoGWGu\"}]}\r\ncf-ray: 9cde26f88c1951e0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"d6a21bc3c9efb83425341d0e319f8110","sha1":"f2e3c72421dba14abc3d3e5f47527a8871845a85","sha256":"fc600df9cffdbed77b88c6f4efdb491310f0f84d1b2d58387958c3c41e950476","sha512":"d2f6ca081bb1101677532559318db1f55a345c2137a8b8a326cd0941341dbebae13a4227552619b3618f1321805d7e992e923db3a87deb87de06341d625935a4","ssdeep":"1536:L+ktmrYWswbPcfmsyLnWvN4yKuATOz/ccPPfIXsMSKCo1weydaPAgZbdL:ntmrnbxHWVCgcQwXsKtAsZL","tlshash":"f083f1138c1ece75d8554afcfabb8fc1f70026bdc131add5a8385d68b499980125b8ee","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-06-08T12:23:57.983036Z","times_seen":640,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":50,"dns":12,"connect":10,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/xrp-xrp-logo.png?v=026","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/xrp-xrp-logo.png?v=026 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 63648\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 17 Feb 2026 10:34:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Nov 2020 22:18:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 369053\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q057Rqsbk8X6B5uRfz46%2BbuM7GPItenI6N3cF1MK%2FDxOlilxHVAtYCRtEP43%2BL0b18G1xuEqfNErJ2JQX2OEK1X9UfeWTycHhAZJUDiz\"}]}\r\ncf-ray: 9cde26ff7d7b0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"b848ca58f9c34bf2044c327122ec7477","sha1":"e15a8c9536cfc7cc626f80d1371f5816762245a5","sha256":"7c28041a6e6d6e4d9b34dc87281dfd23ebb297af0c7f1bde79262122e5e8304d","sha512":"848eb79b0617d9c5608ee7244ec79f2b65644fe4a5edadd30d267f18a5ae5e0412abd04d3a8ffadcf6d6def2a602d4eba4ad9311f979c346cda1cea22d820b09","ssdeep":"768:uEOusl3kJU9WOST3hXcNVTt75EciSUastuLbA9Op3VL/khToXX/jduRTNqcZVNLY:ufF3lO+VTtdUasUp3qTUvMRTNqcBWUY","tlshash":"1953cf970612ef85ea4147be407b4f406b209234d95deece0793f1663a937a5bc8bec4","first_seen":"2025-03-09T08:16:02.404644Z","last_seen":"2026-06-04T19:51:42.802372Z","times_seen":163,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":33,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/dogecoin-doge-logo.png?v=026","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/dogecoin-doge-logo.png?v=026 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 332322\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 16:21:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Nov 2020 22:18:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 175451\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVWt%2F3PLJfA4H4i%2Fo6zLeq%2FDnwvi3QnvYVCpxLIt2kHcXisDAr5dyaXE0tOLYFpLg%2Fkb6WctPjU53clH64pAEm%2BodV%2Fx5YwLTTAtmcNQ\"}]}\r\ncf-ray: 9cde26ff8d810d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":332322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"e596c8c071005a2579b3b602e6af5d5c","sha1":"bb4b571c915b293a3f0fb9ed77f0f591d79a5309","sha256":"5b07ee1cd60b3309b66e5d5bba4e39016684ae1ba78a943899f7dff5a9fb5f0d","sha512":"24ad7cf36cefc3e89a704966111ee413c7c559f1be4a66fb8265950bb835e924e9c66296cd34f765e6bbee7b31b472154ca58204307ec8e8e4fb29839c2e70bf","ssdeep":"6144:WwPjVx2nabbHd73hT1N5eHbdizIEgSR/QFQbDTzJ1DrfLHP2zCo5BOZSpWxmxC8:NPZ0nqTd73h1veHbdizIaF/XrvHuzzHb","tlshash":"ce64230c455489b5d83b8a3365f88f9d47f2a2e60b772b25853011cb4f29befc98d639","first_seen":"2023-10-26T11:09:32Z","last_seen":"2026-06-04T19:14:13.993868Z","times_seen":423,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.carrotquest.app/avatars/1764074980146-aphwuyvs.jpeg","fqdn":"files.carrotquest.app","domain":"carrotquest.app","tld":"app"},"ip":{"addr":"5.101.37.37","port":443,"asn":201589,"as":"edgeam LLC","country":"Armenia","country_code":"AM"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:46.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.carrotquest.app","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Tue, 06 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:C7:64:48:C5:9C:EA:97:35:0D:D4:DD:E8:6A:2A:CD:6B:A7:47:56","sha256":"E1:65:44:A1:2E:D7:6C:6A:5F:33:46:3D:1F:EE:F0:76:01:E0:53:4E:9B:03:34:DD:2F:2A:66:E4:0B:CB:07:7F"}}},"request":{"raw":"GET /avatars/1764074980146-aphwuyvs.jpeg HTTP/1.1\r\nHost: files.carrotquest.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 17:05:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7108\r\netag: \"6c8f8417615788b9b70755e2dbd94198\"\r\nlast-modified: Tue, 25 Nov 2025 12:49:40 GMT\r\nx-amz-request-id: 875dd63c12e86746\r\ncontent-security-policy: script-src 'none'\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-13T20:28:53+00:00\r\nx-node: fr5-up-gc15\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7108,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x120, components 3","md5":"6c8f8417615788b9b70755e2dbd94198","sha1":"e86cbeaedfc9a879e4b54b4cbe0ed4b781b47365","sha256":"35bc99083ff147916013fdaf01e2c9967723144713ee8f819232df0f4a27a675","sha512":"a8fd43127e5f635de2b54aa3d2a7f88fcc706856603397520e54dab2a2fd066fe776852c1d5c87d3091951b27965f71e0f5b82feb7e9ff9e97308abfa0885340","ssdeep":"96:RhEVIoR32RF2DDaaf58htFm/Wib1nH+Jgqh+kKQKpAZkdWaPiYT9kqq0+RDdm3we:RhyiF6aUmM/W4OhH+tiYT9bqHDhAUng","tlshash":"51e1afa3d25a11d0bd27ba7752ea9a92354c6343f8d7932cf93082e44534b732646ac7","first_seen":"2026-02-14T16:55:34.158408Z","last_seen":"2026-02-14T17:06:11.062818Z","times_seen":2,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":315,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ecos.login-app-secure.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:51:52 GMT\r\nexpires: Sat, 13 Feb 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 144835\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T19:38:09.432053Z","times_seen":206372,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":148,"dns":1,"connect":21,"send":0,"wait":25,"receive":33,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptologos.cc/logos/tether-usdt-logo.png?v=026","fqdn":"cryptologos.cc","domain":"cryptologos.cc","tld":"cc"},"ip":{"addr":"104.21.92.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptologos.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Feb 2026 11:19:19 GMT","end":"Wed, 13 May 2026 12:17:42 GMT"},"fingerprint":{"sha1":"0A:19:3B:1A:59:5D:70:32:FA:27:97:BE:96:A4:5C:10:C1:AA:2C:D3","sha256":"FC:29:2A:D7:F8:A5:2D:9B:E9:13:EF:94:FC:C0:93:D2:4D:36:C0:E6:B8:C2:01:12:0D:3E:9D:0C:81:4E:5E:35"}}},"request":{"raw":"GET /logos/tether-usdt-logo.png?v=026 HTTP/1.1\r\nHost: cryptologos.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 69679\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 09:27:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 20 Nov 2020 22:18:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-turbo-charged-by: LiteSpeed\r\nage: 200267\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w2%2BPhLRCuTgN43ZgrEvE%2FD0NGH2xT42mBJ33q5G%2F5bw0l4bw9b4Zo0FXdgXfOB62HxseIOSiIx0%2BNmSj3vobQbcMeSm9NR0UGV%2B%2FgIP6\"}]}\r\ncf-ray: 9cde26ff8d7e0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":69679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"a440d4b512f4d2b9b63d3ab8818fc9e3","sha1":"90dac8c11ffff8e0b345d11a55049c088eff2165","sha256":"2de63cb5ac9431e6febcd4dfd7527d98654452bddd468fe45b93e22cef67ae15","sha512":"90debb4d79ff0b1136fabe5809b8e6b88259a5668240f25ebdcb6b5e844a9b84415a7b37cf87fccdd68e1cd4a686a2ba8265d603cfa513a83cb87f7b41adff0c","ssdeep":"1536:3XWmI8g4DLn+3MeMpH3NGLxHDzRcS7qN0iN1EkVU0nr8rTO:y4DLGMzpdGdHDzSOO0iN1uNC","tlshash":"5f63bea34a3ad985caa1847cb9bb1fc07668a135e5099dcf537ef71cf2421e36d920d0","first_seen":"2023-05-02T11:54:15Z","last_seen":"2026-06-08T13:06:40.771302Z","times_seen":369,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":36,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.uniswap.org/favicon.png","fqdn":"app.uniswap.org","domain":"uniswap.org","tld":"org"},"ip":{"addr":"172.66.0.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:47.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"uniswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 20:53:37 GMT","end":"Wed, 01 Apr 2026 21:53:34 GMT"},"fingerprint":{"sha1":"B0:F8:9F:EF:57:09:E1:7D:CE:0E:CB:A7:82:E1:BF:E0:26:52:8D:0F","sha256":"6E:D8:1C:07:CA:03:42:96:B4:E3:61:4E:E8:C1:9B:23:F5:9A:C6:34:96:6F:9E:BD:70:98:BE:96:D6:00:65:18"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: app.uniswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 17:05:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 28170\r\nset-cookie: __cfseq-019dtPw0m=-jZ5KN25lHb0Mblz_fMMAOxHlIyyRb_SxEPf2a_o5qQuDqT7P1eealSSiboKJl0Ssf0; path=/; expires=Sat, 14 Feb 2026 18:05:47 GMT; domain=.uniswap.org; HttpOnly; Secure; SameSite=None\n__cf_bm=P7g8erhBt46R7_kBKNB7rK9fYWWhz2jgdBE6vZMszUQ-1771088747-1.0.1.1-QHryN0l8OejePvD0Zsg9SC23cMsWrr4PIDSvrlilgsPflC_o6s0Cv_5gjt8IE2vx29jnyfhup3oQ457LoQNnaoTGBe26jlsvY8gCuf1VES8; path=/; expires=Sat, 14-Feb-26 17:35:47 GMT; domain=.uniswap.org; HttpOnly; Secure; SameSite=None\r\ncf-ray: 9cde270219fd5a0f-OSL\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"fd66ba49d51a2fb779b58ef60589cb1d\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ickTnSExbqpPS9IU2Cwv2zUwnYphatjdP64W3ufMrjWU%2BrrnDBHiP1ATuuLAMcPLdxn%2Fp9JXYLAePKzBLmc29nGWVCJ%2Fxi%2B9XfFOsL9QCxYtAR0E4PqTCRc4sLUaEYuOxw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https://vercel.com https://vercel.live/; style-src 'self' 'unsafe-inline'; img-src * data: blob:; connect-src * data: blob:; worker-src 'self' blob:; frame-src 'self' *; report-to https://uniswaplabs.report-uri.com/r/t/csp/reportOnly; form-action none;\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d887735262e1941853fc29ae03487bdc","sha1":"329cef5701394b000e8fce0c26300e6df2bf50b0","sha256":"e1501668d96ded5bfc98fc0f573b2feb6cadf57b932e47c960f65aea6fdc4827","sha512":"a6913e28ef2e866b870b842f0143075e88fa3e110f20a8dfc1d4d061fa185199b4f9b990faa6df8cf5592f9722e51aaf2edb924ed2965cfd30a230ddd0b13acd","ssdeep":"768:6pN6iAyTlrEkznFJM6Pabn23na47cxhobU+dK:6pN6lIlICn1PS2q9xhWK","tlshash":"09c2f144632f0c03074a9ea2b51175008672ea3be2e62d7dac7e85323868b79b773f44","first_seen":"2024-05-27T20:46:31Z","last_seen":"2026-06-08T17:28:23.797001Z","times_seen":649,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":76,"dns":18,"connect":4,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play-lh.googleusercontent.com/mHjR3KaAMw3RGA15-t8gXNAy_Onr4ZYUQ07Z9fG2vd51IXO5rd7wtdqEWbNMPTgdqrk","fqdn":"play-lh.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.251.143.150","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ecos.login-app-secure.com/","date":"2026-02-14T17:05:48.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:19 GMT","end":"Mon, 20 Apr 2026 08:39:18 GMT"},"fingerprint":{"sha1":"59:5C:60:11:36:0A:A9:83:A0:53:01:B3:C6:38:B5:0B:D6:C6:E6:2A","sha256":"1F:02:CD:3C:E9:A6:5F:9C:36:E4:4F:54:18:0E:F8:43:41:58:51:47:FE:38:FC:48:90:C3:91:CC:F2:03:4B:F0"}}},"request":{"raw":"GET /mHjR3KaAMw3RGA15-t8gXNAy_Onr4ZYUQ07Z9fG2vd51IXO5rd7wtdqEWbNMPTgdqrk HTTP/1.1\r\nHost: play-lh.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ecos.login-app-secure.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 2546\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 17:05:48 GMT\r\nexpires: Sun, 15 Feb 2026 17:05:48 GMT\r\ncache-control: public, max-age=86400, no-transform\r\netag: \"v1\"\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8f19ac835c875b1905f90e7c6b92d386","sha1":"1f0f0e5d3833e60caf7eda01d0a801bcec7be01d","sha256":"05a44974d76ee555042a144fa29a445cfa6573c132e03fca75b578668bfe8f09","sha512":"98d03a73525657d0310328f5c1f7a2a33f380d58b143c9af2ef87c2c6e051e31e282dd42b9c225004df6662b25b19a667cba788bc95e8fc04bcb2520e9e6529c","ssdeep":"","tlshash":"30511959030513c3403ccc59cf171ca09cf68bd70bbf92a9284ca3585499b34fa4df86","first_seen":"2023-04-30T19:28:18Z","last_seen":"2026-06-04T15:09:12.876752Z","times_seen":266,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":106,"dns":18,"connect":26,"send":0,"wait":19,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}