{"report_id":"b5a50f09-eff0-4153-84a8-f03b9c6e4076","version":6,"status":"done","tags":[],"date":"2026-02-08T15:20:16Z","url":{"schema":"http","addr":"financesocks.xyz","fqdn":"financesocks.xyz","domain":"financesocks.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"unifinance.pages.dev/checker/","fqdn":"unifinance.pages.dev","domain":"unifinance.pages.dev","tld":"pages.dev"},"title":"Unisocks Exchange","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T04:54:03.678858Z","times_seen":17866208,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"financesocks.xyz","fqdn":"financesocks.xyz","domain":"financesocks.xyz","tld":"xyz"},"ip":{"addr":"172.67.170.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-15T15:20:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-08T15:19:50Z","timestamp":1770563990,"ip_dst":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":50370,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-02-08T15:19:50.967499+0000\",\"flow_id\":1913260451734791,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.16\",\"src_port\":50370,\"dest_ip\":\"172.66.44.230\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"unifinance.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3468,\"start\":\"2026-02-08T15:19:50.959751+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"financesocks.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"socks.uniswap.org","ip":{"addr":"162.159.140.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-11-26","domain_rank":0,"first_seen":"2020-09-24T20:15:41Z","last_seen":"2026-02-08T14:59:02.043497Z","alert_count":0,"request_count":1,"received_data":153671,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cloud.umami.is","ip":{"addr":"104.26.0.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-07-18","domain_rank":524054,"first_seen":"2022-11-15T19:45:49Z","last_seen":"2026-02-07T21:14:09.014196Z","alert_count":0,"request_count":1,"received_data":4094,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"mainnet-chain.xyz","ip":{"addr":"172.67.208.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-11","domain_rank":0,"first_seen":"2026-01-30T11:40:36.168307Z","last_seen":"2026-02-08T14:59:02.285902Z","alert_count":4,"request_count":2,"received_data":3562073,"sent_data":876,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"financesocks.xyz","ip":{"addr":"104.21.95.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-08","domain_rank":0,"first_seen":"2026-02-08T14:59:01.427055Z","last_seen":"2026-02-08T14:59:01.427055Z","alert_count":1,"request_count":1,"received_data":17137,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api-gateway.umami.dev","ip":{"addr":"172.67.171.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-11","domain_rank":261649,"first_seen":"2024-04-27T09:44:52Z","last_seen":"2026-02-05T16:15:06.800039Z","alert_count":0,"request_count":2,"received_data":2452,"sent_data":1055,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unifinance.pages.dev","ip":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-02-03T22:24:40.554409Z","last_seen":"2026-02-03T22:24:40.554409Z","alert_count":0,"request_count":2,"received_data":47133,"sent_data":960,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cloud.umami.is/script.js","fqdn":"cloud.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"104.26.0.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97b0370b3ca09c7cee1d9812c9c11fc1","sha1":"24edf69a5ac397ed0fe72cea720f005a055c2b70","sha256":"95f8c65a2c5486ea5c21603e26f41ab2545ff9cd05e0406a4cad8469888637a8","sha512":"bd44fc5b5a55ba9dff6ec19515ae03786a3ee9a0facf9708570364f6848846c7aadbd9760a11c5696cadb10bf859ffc4a59977a4f19c4e26c4eb83906afc07ff","ssdeep":"","tlshash":"4e51b6f53185f0f17f692890d17aa620b93a2e72b81a48d0a6ff4c572a3e50e9431d29","size":2700,"data":"","first_seen":"2026-02-05T07:38:21.809415Z","last_seen":"2026-04-30T23:57:40.384571Z","times_seen":380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet-chain.xyz/1.php","fqdn":"mainnet-chain.xyz","domain":"mainnet-chain.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27d0cdb3ee1d4406a03bf3f48dfb9641","sha1":"d5b40e7620e91e6e937f2d0711eb90eda8f4aa6b","sha256":"30dc202f18ebde98a3995e75738a472814fc139010a495e1c68448bbdcc9afad","sha512":"0809cd08305e2c93784dcceb46eaa27007d359208d5133c16563b29383abc39a3e3851fcfcfc393e88ce46b545ea5fa52a86ec184b428b2ca4950ac06fa3ffae","ssdeep":"768:ODU0cAcwcNctczcLcvwBnmcFk4VLVi3qRg/OEodIxVdKA507ss/7gzuinyjUcScx:J45Sfdrzuzgjqpu/YITZzmHQfzMP","tlshash":"4ae3a6d82907e4d48e6a10eed4b3e415e0288e63cd6df1a7e62dddc0386df62948717b","size":144763,"data":"","first_seen":"2026-02-08T14:59:04.06495Z","last_seen":"2026-02-08T15:20:17.932605Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cloud.umami.is/script.js","fqdn":"cloud.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"104.26.0.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unifinance.pages.dev/checker/","date":"2026-02-08T15:19:51.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:45:05 GMT","end":"Tue, 24 Mar 2026 08:44:52 GMT"},"fingerprint":{"sha1":"83:8D:08:60:A1:62:9B:52:5B:D9:73:64:FE:B8:C3:57:C9:CD:49:7D","sha256":"A6:63:DA:E1:52:5F:EF:4E:CA:15:B5:6F:1D:11:D1:5A:8F:9E:4E:C5:57:A6:BD:F7:8B:91:35:6E:39:CB:F4:70"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: cloud.umami.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinance.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 15:19:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1537\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34187\r\ncache-control: public, max-age=86400, must-revalidate\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors *;\r\netag: \"a1e75470e626003713b18b1f1e721148\"\r\nlast-modified: Thu, 05 Feb 2026 19:17:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-dns-prefetch-control: on\r\nx-frame-options: SAMEORIGIN\r\nx-matched-path: /script.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::fmpw7-1770356982781-27c1722ff167\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d40skzTB4LK7Z2EzatP4qNq7Z8Yi8sjIq2Gz1IcEKW8IzRIabWZMvJ4M06dQjPTFEegcmkFMYFqmbwj8J62IV%2BwCDyu2INNObB6YJ78%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9cac1b91699f723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2700,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2699)","md5":"97b0370b3ca09c7cee1d9812c9c11fc1","sha1":"24edf69a5ac397ed0fe72cea720f005a055c2b70","sha256":"95f8c65a2c5486ea5c21603e26f41ab2545ff9cd05e0406a4cad8469888637a8","sha512":"bd44fc5b5a55ba9dff6ec19515ae03786a3ee9a0facf9708570364f6848846c7aadbd9760a11c5696cadb10bf859ffc4a59977a4f19c4e26c4eb83906afc07ff","ssdeep":"","tlshash":"4e51b6f53185f0f17f692890d17aa620b93a2e72b81a48d0a6ff4c572a3e50e9431d29","first_seen":"2026-02-05T07:38:21.809415Z","last_seen":"2026-04-30T23:57:40.384571Z","times_seen":380,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":23,"dns":5,"connect":1,"send":0,"wait":7,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet-chain.xyz/1.php","fqdn":"mainnet-chain.xyz","domain":"mainnet-chain.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unifinance.pages.dev/checker/","date":"2026-02-08T15:19:51.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mainnet-chain.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:41:54 GMT","end":"Sat, 11 Apr 2026 21:40:37 GMT"},"fingerprint":{"sha1":"34:4D:51:82:19:C1:58:48:59:F9:C2:F0:C4:EE:1D:21:8A:C8:45:D5","sha256":"D1:1C:5D:A4:22:F7:11:8C:83:0C:3D:F6:CF:2E:C4:89:24:E8:98:E3:1C:FA:37:FA:61:91:CF:2E:18:F3:93:C6"}}},"request":{"raw":"GET /1.php HTTP/1.1\r\nHost: mainnet-chain.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinance.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 15:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 33949\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XFo98qoI6nBMA5cC5EZx0QQJCC0R8T%2F%2BoctUlIn%2BykC1n14%2B6Ln9qpRJ8A3FFO98%2FRWP8cDdSOTOpLxeJp5lcHWjLKReZS28avYsQ9AYSON3\"}]}\r\ncf-ray: 9cac1b91c90bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144763,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"27d0cdb3ee1d4406a03bf3f48dfb9641","sha1":"d5b40e7620e91e6e937f2d0711eb90eda8f4aa6b","sha256":"30dc202f18ebde98a3995e75738a472814fc139010a495e1c68448bbdcc9afad","sha512":"0809cd08305e2c93784dcceb46eaa27007d359208d5133c16563b29383abc39a3e3851fcfcfc393e88ce46b545ea5fa52a86ec184b428b2ca4950ac06fa3ffae","ssdeep":"768:ODU0cAcwcNctczcLcvwBnmcFk4VLVi3qRg/OEodIxVdKA507ss/7gzuinyjUcScx:J45Sfdrzuzgjqpu/YITZzmHQfzMP","tlshash":"4ae3a6d82907e4d48e6a10eed4b3e415e0288e63cd6df1a7e62dddc0386df62948717b","first_seen":"2026-02-08T14:59:04.06495Z","last_seen":"2026-02-08T15:20:17.932605Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1280,"timings":{"blocked":82,"dns":56,"connect":1,"send":0,"wait":1111,"receive":2,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"financesocks.xyz/","fqdn":"financesocks.xyz","domain":"financesocks.xyz","tld":"xyz"},"ip":{"addr":"104.21.95.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-08T15:19:50.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"financesocks.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 11:21:56 GMT","end":"Wed, 08 Apr 2026 12:19:25 GMT"},"fingerprint":{"sha1":"4A:03:C6:6C:78:37:E1:E4:7D:01:BC:23:D4:E0:37:81:54:CB:43:BE","sha256":"24:BF:D6:5A:04:B2:72:8B:DD:5E:DF:9E:8E:2F:A1:D3:D8:EA:85:A9:7F:35:00:9E:DA:04:11:65:0E:A0:39:54"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: financesocks.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 08 Feb 2026 15:19:50 GMT\r\ncontent-length: 0\r\nlocation: https://unifinance.pages.dev/checker/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xyUcwzkOKMIaUEnT4syIlsJiRel1i3slcsXb%2BnzHaetCBNJyI66%2FwF3zRu7hjXPIRM8Y6fYrpy%2F9dPi3Oor1L3s811tvasFDr39oUh9E8sk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9cac1b8f6ee72efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16631,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T04:54:03.678858Z","times_seen":17866208,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":49,"dns":29,"connect":1,"send":0,"wait":5,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"financesocks.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet-chain.xyz/1.php?m=2950939","fqdn":"mainnet-chain.xyz","domain":"mainnet-chain.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unifinance.pages.dev/checker/","date":"2026-02-08T15:19:52.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mainnet-chain.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:41:54 GMT","end":"Sat, 11 Apr 2026 21:40:37 GMT"},"fingerprint":{"sha1":"34:4D:51:82:19:C1:58:48:59:F9:C2:F0:C4:EE:1D:21:8A:C8:45:D5","sha256":"D1:1C:5D:A4:22:F7:11:8C:83:0C:3D:F6:CF:2E:C4:89:24:E8:98:E3:1C:FA:37:FA:61:91:CF:2E:18:F3:93:C6"}}},"request":{"raw":"GET /1.php?m=2950939 HTTP/1.1\r\nHost: mainnet-chain.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinance.pages.dev/\r\nOrigin: https://unifinance.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Feb 2026 15:19:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qli0sb%2FHzsYIU9%2Bi%2BAP7md8P5BFytldgCDEyDr70D65WW89ZMbpaRYkzl7Vk0UTvtP33Dn0Xlmy%2BhXMjiagMie98zvhTkwbJ1GK1TLVbe8UJ\"}]}\r\ncf-ray: 9cac1b9b1fe7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3415773,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8b7b7346df69de58a7a731c8ef6c51dc","sha1":"55557d0e9109c50e1b8fc57c818f4fb7747d883e","sha256":"d4d51e3b9022c67a32dc72c01ddde11c0864d9b0b0d0c3bbdccb2df1433d0a14","sha512":"80922ed9ff8d786781ddbd7bc86aa085ddc7df8891926e287f7e90fca1471a7c099dbff1ebc89ef54dd6a8c37d9c502f499b58016d61a2d998ba2f1a50983069","ssdeep":"24576:rV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdsBl:r7OwPEZJsOBl","tlshash":"692533516e7bfe9a4e8cee35747b2f0369910f82c48d64db6b75e6c0019823502cde5e","first_seen":"2026-02-08T14:59:04.080286Z","last_seen":"2026-02-08T15:20:17.934709Z","times_seen":2,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":94,"dns":51,"connect":0,"send":0,"wait":104,"receive":420,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-08","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.umami.dev/api/send","fqdn":"api-gateway.umami.dev","domain":"umami.dev","tld":"dev"},"ip":{"addr":"172.67.171.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unifinance.pages.dev/checker/","date":"2026-02-08T15:19:52.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:13:29 GMT","end":"Wed, 06 May 2026 12:13:18 GMT"},"fingerprint":{"sha1":"FA:87:3C:DF:4C:D0:B6:8B:A0:C0:B6:84:77:CC:66:8C:8A:31:94:D3","sha256":"17:AE:89:5C:EB:BF:EB:42:BE:0B:FB:17:88:9E:98:75:B7:11:9C:3E:7E:FC:04:CE:F6:88:F9:0F:AE:BC:F8:94"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: api-gateway.umami.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://unifinance.pages.dev/\r\nOrigin: https://unifinance.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 15:19:52 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\ncf-placement: local-OSL\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rX7iCIjmmbnaQPWani%2B%2FT40PDxbUg%2FHLNVHyQaZhJAMK6qDNWIL21IueUqMfzqv1gjsk9GsVWO0myFqhMeoxLphi0MeqKPGHzJZhhqID%2FK%2Bbnp6Zsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9cac1b9b1d724c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T04:54:03.678858Z","times_seen":17866208,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":90,"dns":57,"connect":1,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.umami.dev/api/send","fqdn":"api-gateway.umami.dev","domain":"umami.dev","tld":"dev"},"ip":{"addr":"172.67.171.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unifinance.pages.dev/checker/","date":"2026-02-08T15:19:52.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:13:29 GMT","end":"Wed, 06 May 2026 12:13:18 GMT"},"fingerprint":{"sha1":"FA:87:3C:DF:4C:D0:B6:8B:A0:C0:B6:84:77:CC:66:8C:8A:31:94:D3","sha256":"17:AE:89:5C:EB:BF:EB:42:BE:0B:FB:17:88:9E:98:75:B7:11:9C:3E:7E:FC:04:CE:F6:88:F9:0F:AE:BC:F8:94"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: api-gateway.umami.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinance.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 239\r\nOrigin: https://unifinance.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":239,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"d9cb6fb8-3903-495a-84d8-0fc05dd3d97f\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Unisocks Exchange\",\"hostname\":\"unifinance.pages.dev\",\"url\":\"https://unifinance.pages.dev/checker/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 15:19:53 GMT\r\ncontent-type: application/json\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XoLA%2FRY%2FBsX5G18L%2FSevZrr%2BdX1TlW0puyeojpHy%2BK06jU6nnHCB0FNtVEHhzIh341%2BHeqwItdY43s7B1UvwBr0E2syzuHB00sw6cL1OcDKnWUykXX9z\"}]}\r\nx-dns-prefetch-control: on\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncf-ray: 9cac1b9b2da94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"928cf2ad5b5000f121ea6a219ad8b575","sha1":"d8736702fdd9f36c68088c97363cc5fadc22e54a","sha256":"d70a4c9532eee4c1f973825a5af257b929ee7b87a44730e3bbec96eff49fdfff","sha512":"13d8c839d3f06d95bbaaa940f0cb8aee2732a4d3161a852e471fae1e4ce7d15c463584d88dbc5d2f8361710c13839e5bab37f7cd2d2338cb928d7976c7c87c1b","ssdeep":"","tlshash":"7ee0ab6b9055efac2662bfc85d8499ab43851cf18e54117850e436226fb8dd7580b218","first_seen":"2026-02-08T15:20:17.935645Z","last_seen":"2026-02-08T15:20:17.935645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unifinance.pages.dev/checker/favicon.ico","fqdn":"unifinance.pages.dev","domain":"unifinance.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unifinance.pages.dev/checker/","date":"2026-02-08T15:19:52.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unifinance.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:35:20 GMT","end":"Sun, 03 May 2026 22:32:39 GMT"},"fingerprint":{"sha1":"DC:3E:5F:EA:82:4C:30:8A:EF:69:74:A0:E3:A1:32:E0:CD:7B:95:CC","sha256":"3B:DF:66:01:57:A3:4C:1E:05:2C:5D:D1:BD:1A:4B:85:1A:E7:CA:3C:99:B1:69:76:58:39:D9:13:BD:E2:F7:F1"}}},"request":{"raw":"GET /checker/favicon.ico HTTP/1.1\r\nHost: unifinance.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinance.pages.dev/checker/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 08 Feb 2026 15:19:52 GMT\r\ncontent-type: image/x-icon\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wnklj1RjCIok4JrtKMk2kJ9kI5xhwVJwQ24ykkDsYXXZWEbKzarLr5DcK%2FaAvuxBML7QcYw9lxBmHch3aKIdE3IDMyIPtuYCybzSyGQJm4H48w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fe26595548cb269e1113e5c26adacb3a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cac1b9bbfe056ca-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29033,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"43a45b405d8bcdba10d7029c47240001","sha1":"857d9c720188eaa1f67b7c38bd318a322dbd0053","sha256":"32a8d1bf26848369ca352a756462bf48920339f852158e5b279731fe26e5d943","sha512":"36c894d50b4da19a2439c63769ce79ec52c80a589ca5a9c92b0f41f6a059cf736384b5beefad64b387606627f05327d1a0ece6ba0aa068d0afa85d0acc506ecb","ssdeep":"384:R9l8BTamtPICnH61v1Rqj7NZt/dc4WHIjPGP5ButP78Qww5HgLSYNZw3FPGf+pH:R07tAMHu1R8FS1KPGBw7I6EKBG2pH","tlshash":"f5d2f156ea764d6b078ba8f324e46da33e33d522d4cfb3ad1ac14a2a4e957f10d04438","first_seen":"2024-08-19T13:05:22.106213Z","last_seen":"2026-04-12T17:23:40.633903Z","times_seen":45,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unifinance.pages.dev/checker/","fqdn":"unifinance.pages.dev","domain":"unifinance.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-08T15:19:50.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unifinance.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 21:35:20 GMT","end":"Sun, 03 May 2026 22:32:39 GMT"},"fingerprint":{"sha1":"DC:3E:5F:EA:82:4C:30:8A:EF:69:74:A0:E3:A1:32:E0:CD:7B:95:CC","sha256":"3B:DF:66:01:57:A3:4C:1E:05:2C:5D:D1:BD:1A:4B:85:1A:E7:CA:3C:99:B1:69:76:58:39:D9:13:BD:E2:F7:F1"}}},"request":{"raw":"GET /checker/ HTTP/1.1\r\nHost: unifinance.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 15:19:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LIuYcd042r%2FE7RWHVLgXInAb908gc39q24fAtrW1YoZbl%2FIXLI8Ez24a56rfs88aWhYEgaYwjF77xOfiBmbk1CfujqTjgzXEaPcT6RFIlTb0pQ%3D%3D\"}]}\r\netag: W/\"1bd87176c626f17bb4222d1d1658bfac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cac1b8f985a56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16631,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"cdf8514a1b2400068f875d7c25142dd4","sha1":"7171ca78d91e34dac2484f5325fccd1573d87636","sha256":"4ef9cffe78aa0f73d51f7c9415a56428f78647ec8c028688d5362cfb2667a253","sha512":"d6339f5b4310f93fda97dc6d8d5e3a449cc6a0b522ecd70a5c2fda149ac0f936ed739f3c85441370ff1d5abb64a540943410d81b26a61120fa304b69177e3217","ssdeep":"192:OH1zvokhoHiOoo1voPZkL0k7D0DaVdLX/AI3iZTorA4eqmoKEokbxT2Fd1c/1PaC:OH1zvoJdDE3vJFLc/1PpHs9xzY","tlshash":"7b72459708a300057953e8582be31b4e33a5d513d54bc96a3fdd6688cfcbae969d338c","first_seen":"2026-01-30T11:40:40.898665Z","last_seen":"2026-04-12T17:23:40.630322Z","times_seen":38,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":23,"dns":5,"connect":1,"send":0,"wait":36,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socks.uniswap.org/static/media/test.a2def363.png","fqdn":"socks.uniswap.org","domain":"uniswap.org","tld":"org"},"ip":{"addr":"162.159.140.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unifinance.pages.dev/checker/","date":"2026-02-08T15:19:51.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socks.uniswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 06:21:43 GMT","end":"Sat, 21 Mar 2026 07:21:38 GMT"},"fingerprint":{"sha1":"51:42:17:D6:65:94:D1:F8:C6:42:43:9F:88:C9:FD:C3:02:A3:88:55","sha256":"28:FA:53:A3:BF:7A:F3:43:93:10:96:23:5F:05:F8:3E:4A:1B:BA:76:F6:F1:19:A2:11:B9:D1:A8:F7:22:22:52"}}},"request":{"raw":"GET /static/media/test.a2def363.png HTTP/1.1\r\nHost: socks.uniswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinance.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Feb 2026 15:19:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 152244\r\ncf-ray: 9cac1b917b6456c4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\netag: \"a4a7999e94518fd2ba786bb8faea5bbc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=Pa5frGlbeHhsmIhP0P.NgSFM6nor_z_2qhSGIFdxUfQ-1770563991-1.0.1.1-uYZPTSfB07118ZU910DcV3i.9LpL1NY2WmKRkLAXlxoPtQgA7p5HPdkk0HkJT21rAFvVQefSu1S5VTtxjCwogkQsRBgMo3k5VKcHW5uRK5E; path=/; expires=Sun, 08-Feb-26 15:49:51 GMT; domain=.uniswap.org; HttpOnly; Secure; SameSite=None\n__cf_bm=17DhI6CeJohOglQoZfV3qNeZpaLWjtd46_xi2UOyBho-1770563991-1.0.1.1-4tT1f5D1MmrzTcUHQ.gapzElAFX5WZUehSCbMN6nFM.Id2pbwFIQzYDGD21ErzmcRvOlk_HuVqEOx5CuR2Zpa21MeEnp5UuJdpr1z_r.UAQ; path=/; expires=Sun, 08-Feb-26 15:49:51 GMT; domain=.uniswap.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cMKqb%2BcOlxqVj91rFTC9pkj1JBcA2N6iuyCMvKcMNwNe5%2FPx9MskmSg5oYU5jovIuolrBQ6MOU1ZmcRhKa1TxKMpSFj7jKjXW6Ahb53A68NMJsLxfh5qENqVIwz9aISG%2F1YPIw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nexpires: Sun, 08 Feb 2026 19:19:51 GMT\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":152244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 736, 8-bit colormap, non-interlaced","md5":"a2def36354de47526570226444bd954f","sha1":"fbce6a6e4ed441da06008294ce6e294e9830f3b2","sha256":"cc3819b5afa5d84c9a72d6e743798557e3fbeb908532b40dd577161b7d22297c","sha512":"6304ac7cf891f1a587d25459edbaeceb8106bf6b31a64262b605ff4c56d98c2ff2fd5ab37f5ab4d47ed2ef73d736d9be59ebba41fa7cf47deb0970a8949fe489","ssdeep":"3072:f0nO95AdRrGPmcKR6fdK06sABTYwk2YGo2PPLO0VL8P5bL:fx95AdVEmcfdVbwCGzPLFVLc5H","tlshash":"88e31241f5bea018d16a117ef6b9564cff4afa368d8221eae1b7f7494280e050c153bf","first_seen":"2024-08-19T16:05:03.870357Z","last_seen":"2026-04-12T17:23:40.626432Z","times_seen":46,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":21,"dns":7,"connect":1,"send":0,"wait":42,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}