{"report_id":"b5c5bb4c-3f3d-4fdf-81d2-cca7fdb1bd2e","version":6,"status":"done","tags":["suspicious"],"date":"2026-02-25T23:03:24Z","url":{"schema":"https","addr":"yieldscan.si","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"yieldscan.si/solana","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"title":"Solana Tokens | YieldScan | YieldScan","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:49:01.761015Z","times_seen":17739839,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"yieldscan.si","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-01T23:03:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":9,"urlquery":2,"analyzer":10}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T23:03:01Z","timestamp":1772060581,"ip_dst":{"addr":"104.16.249.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":57340,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare DNS over HTTPS Domain (cloudflare-dns .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-25T23:03:01.439296+0000\",\"flow_id\":33689717546880,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":57340,\"dest_ip\":\"104.16.249.249\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027695,\"rev\":5,\"signature\":\"ET INFO Observed Cloudflare DNS over HTTPS Domain (cloudflare-dns .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_07_09\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2024_04_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"DoH\"],\"updated_at\":[\"2023_10_05\"]}},\"tls\":{\"sni\":\"cloudflare-dns.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2887,\"start\":\"2026-02-25T23:03:01.434048+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T23:03:04Z","timestamp":1772060584,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T23:03:04.078931+0000\",\"flow_id\":67372998728760,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":60458,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.37\",\"port\":60458},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2599,\"start\":\"2026-02-25T23:03:04.072760+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T23:03:04Z","timestamp":1772060584,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60488,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T23:03:04.082676+0000\",\"flow_id\":697889230167646,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":60488,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.37\",\"port\":60488},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2598,\"start\":\"2026-02-25T23:03:04.073310+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T23:03:04Z","timestamp":1772060584,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T23:03:04.085692+0000\",\"flow_id\":1547259815140873,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":60484,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.37\",\"port\":60484},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2599,\"start\":\"2026-02-25T23:03:04.073225+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T23:03:04Z","timestamp":1772060584,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60476,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T23:03:04.088983+0000\",\"flow_id\":267385330736562,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":60476,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.37\",\"port\":60476},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2598,\"start\":\"2026-02-25T23:03:04.073138+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T23:03:04Z","timestamp":1772060584,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60464,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T23:03:04.090400+0000\",\"flow_id\":1467633268956503,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":60464,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.37\",\"port\":60464},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2674,\"start\":\"2026-02-25T23:03:04.073047+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T23:03:04Z","timestamp":1772060584,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60460,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T23:03:04.091703+0000\",\"flow_id\":1262559317990639,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":60460,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.37\",\"port\":60460},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2673,\"start\":\"2026-02-25T23:03:04.072943+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T23:03:04Z","timestamp":1772060584,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60494,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T23:03:04.271514+0000\",\"flow_id\":1359496729907931,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":60494,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.37\",\"port\":60494},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2674,\"start\":\"2026-02-25T23:03:04.250587+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-25T23:03:04Z","timestamp":1772060584,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60508,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-25T23:03:04.362873+0000\",\"flow_id\":1757642345703527,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.37\",\"src_port\":60508,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.37\",\"port\":60508},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-14c1504681d2427684ac1f489338d075.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":945,\"bytes_toclient\":2673,\"start\":\"2026-02-25T23:03:04.354407+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-25","alert":"Hunting_JS_WebAssembly","trigger":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"cloudflare-dns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"yieldscan.si","ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-23","domain_rank":0,"first_seen":"2026-02-25T22:00:08.564614Z","last_seen":"2026-02-25T22:00:08.564614Z","alert_count":0,"request_count":27,"received_data":534771,"sent_data":13954,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cloudflare-dns.com","ip":{"addr":"104.16.249.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-28","domain_rank":112,"first_seen":"2015-04-09T01:00:28Z","last_seen":"2026-02-23T01:11:34.85271Z","alert_count":1,"request_count":1,"received_data":517,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"uygft-a78s.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-25T18:10:52.490414Z","last_seen":"2026-02-25T18:10:52.490414Z","alert_count":0,"request_count":4,"received_data":2851654,"sent_data":2221,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2026-02-25T03:05:04.781981Z","last_seen":"2026-02-25T03:05:04.781981Z","alert_count":8,"request_count":8,"received_data":5646653,"sent_data":3848,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Anti-debugging code","verdict":"suspicious","severity":"low","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"yieldscan.si/noir.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cd1b9b8607dd45a581a9c12096d9d30","sha1":"78548296a7960b9f80af365eb0a9ed3444ae0b7f","sha256":"0f75d9b667a7e0a064019d334afdacf24a9e7f2f0fe247d49a8e69eba29b58e5","sha512":"c3c3fb508327f7512f2ec401a5d20b52cd764693e3a157aab7619bd7ea26bcdba12c97ebaa748bffd6bc1a19b51f92687afe531af2186bc7796aae833955ddbe","ssdeep":"768:Z7p4/JGg274TclQPP7GQ5kIP/smN8mZLNgY7BBIipaf0+48AUH:Z7p4BGg2ETcePjVkIPEChVNgY7BBIipQ","tlshash":"e8d22c9bce4f2e518b745e0923de2ccd092d1b8e68e244cd550aa7c9d68f56704ccaed","size":30191,"data":"","first_seen":"2026-02-25T22:00:14.496938Z","last_seen":"2026-02-25T23:03:30.598522Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f9305bfe231b46f46f6aa4f9601f2a2","sha1":"8d69cdd50045daa452152815e21bc2affd617503","sha256":"8bd4b9b1946d5eeeb34ec58e7a74084486a14275555be285f9f000a66be65dad","sha512":"09b1ca85d25a7310e780af028459e9a82c4f0e7724e51d2df745acbe0becfd442c2fd31a336fc36f8d3467a29d265db1c4cbbfef732ecdf67b0d980e0890901a","ssdeep":"","tlshash":"cd21d01be5a36471f866306e67cbf60531375847810eda047e0c9d017fa5116873e6da","size":1378,"data":"","first_seen":"2026-02-25T03:05:09.99146Z","last_seen":"2026-03-05T13:47:43.068318Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-06T08:33:47.749151Z","times_seen":100466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/fd9d1056-eb2731ee3896fb3a.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172834,"data":"","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-08-06T03:01:37.129946Z","times_seen":4570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/not-found-28b12234c0c95546.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"869c7238e07a6ce9bfbcdfebf7914c7c","sha1":"fdeab027390043f07f8bf23a1cb97e7fa3ff740f","sha256":"304b9ad1a12b4f2e82838e78a7281928866fe70c7717a0f73b8d6171fb724a1c","sha512":"65e12ebfc8e87f13adcf83ca8522839e2d7cdecdc3a807a73d1b52e5e93402b21dd897671c0961a26054d6b46991b68a07b34814cde893a9c24445b66a0dc707","ssdeep":"","tlshash":"1ad0a7893b807c1d791769f858a70c5525f6155a346544c165308c911c3223c4342c48","size":212,"data":"","first_seen":"2026-02-25T22:00:14.512243Z","last_seen":"2026-02-25T23:03:30.607532Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/layout-2613fa502550798b.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea754d71c4b116b3ea2dd89f9987e45d","sha1":"874cbe7e13b4fb4529276639ba80581e00b968f4","sha256":"adba96c5a9a0ea1e387d0ef5925cb023b151aaf269517564d1528a574f535870","sha512":"0984ccefacc63b5ebdd2687189e12b2ba0aaecb181c1e2648ecca036d2e4ccaaf0da3eeca9d844bc7c4de5085ada6f97a0547fb07bfe72ddd465a216d50de2a8","ssdeep":"384:me0S+z0F80qSSX4M/hM1M/FRHBOTXONp9cIRev0:Cz68ZSSX4MJM1M9RHgT+Np9cIRev0","tlshash":"f06230bbb39036bf6ac48f9205ea5689a7e4178e76670404d797993cfc14ef39438630","size":15882,"data":"","first_seen":"2026-02-25T22:00:14.518449Z","last_seen":"2026-02-25T23:03:30.557477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"270b83e24b14c0d635a016a1b5bdc48b","sha1":"224a7c2b3d35caf8029c014558347b17a92889ea","sha256":"57422eb81015e1473cd262d641178ebc85ea63d872b0f70820d0fc48a3fd4c37","sha512":"4137cc13eed53be15f0bfbe6a5f4fcf76a057eb8ef80167b708a713c6ee1904316261fb737390f262c8b0c30a4243264449cb2a9bb77fb3f07c296f634b68a0d","ssdeep":"","tlshash":"0fc08097591b055300208568ab1172453f73535d3d09c51cef3de1551e505e3f1bc74d","size":174,"data":"","first_seen":"2026-02-25T23:03:30.613742Z","last_seen":"2026-02-25T23:03:30.613742Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7700cead12ac49f71a3027b606dd3a12","sha1":"550abf250fa5c23dc7d427235ecd1bb9126cadbb","sha256":"7559347f2e9c5a65c0f4a7cd40f14d4636a828e79686fe59d5c808d1e87ffe78","sha512":"9eefc2142b0c6f2c14655f324316f77d74d01908d2d41fd86db994479dd01dee4449429ac11e50bfd3c7a64bdb2698f7c097eecdb87851ed28c94f148da93824","ssdeep":"49152:U4+xtaUFAYp8Su3ilTYDMsvpXrdVCiG/NdUgmS9UT9bCWCawOJGSH17129hBpWL2:OxuitgJCWCawOJq","tlshash":"dfd57cb073b1707907e792d454a71100f234a44a700984bcfbec95e7af9aaca957bf78","size":2843020,"data":"","first_seen":"2026-02-25T22:00:14.558811Z","last_seen":"2026-02-25T23:03:30.616565Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-25","alert":"Hunting_JS_WebAssembly","trigger":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a03b83d5b2b797082e85774315f57b4b","sha1":"25f016863745f59fab26d4aa1ddf3e99454401b3","sha256":"a3c454a96c907699c89da28b9018b83d115aca89f737224fe252488b1512533f","sha512":"ccfe57d2d274d50a0068de0ef0dbff39a725f13af08d9d23e5d40040c359172c62fb0c4630ee687ca330c9cd27a53b78f71622d033e3d3a33e97c931d8f4bb94","ssdeep":"","tlshash":"63e04f40f446e8e69c22b91a60354d354098ae7c55a55cc457cfc78245614b50746b8f","size":314,"data":"","first_seen":"2026-02-25T22:00:14.551106Z","last_seen":"2026-02-25T23:03:30.6177Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"42c021948ad13c58559b777fa22fbbad","sha1":"29baa5f62e9d61826e926e6fa19fe54d33b19230","sha256":"eae915143659436b65813237a9bf4689f6a2400eaecf5e7449be3b8c285dfddd","sha512":"d1c5bdba3d63f3148daf7aea3cf4363e28bb7119071579adc08ff4dfdbda52fa56c78af43e0876ad8df017a7398e1df50ba036103ab2118dbecd6365722cecbc","ssdeep":"","tlshash":"22e026a9f780dcd25c62df0a96672c7490cccc7a0470d898501ec07a0925c154294450","size":324,"data":"","first_seen":"2026-02-25T22:00:14.552601Z","last_seen":"2026-02-25T23:03:30.618675Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/main-app-75fafb3e997a8bf3.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da20220fd375a6efc059036860efc3c5","sha1":"f629b1c2c91c5e488c8a7035e10404aeaa4dd135","sha256":"049088cc15080db3240136d09533bf91d8cbae0f839350e3e8af874a3685e8ea","sha512":"49b7cf2e4bbdc4434fdad157185bad43add6cfee51147f24d44968aa6bb9c72f3a1d8cb70563b6dbb712027c7833ba22b6a85eec204f1a2d27fba8a7a0f11c53","ssdeep":"","tlshash":"8af0829a2b4c701f2913ad24fdd35c2e295e416428a718501a04ddb12c33aa893f1c39","size":461,"data":"","first_seen":"2026-02-25T22:00:14.54243Z","last_seen":"2026-02-25T23:03:30.594453Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"dfc9aa0be5fb09900cf7ce91737a355a","sha1":"e1765a883afbe000ec71f9aee172688ab3331e11","sha256":"5779f2b773451f12579ce3d3afb255bc857becab006dc630951d08cccc5dcf4a","sha512":"4906ec1c12eba772eb3c4f00f7a51b1788f3444160ffff96b4108c9258cfc0bca6440f81e9410d2ae055e4a76458956f92b295ebc3d0ce444d78edda74172a57","ssdeep":"192:EQ11Gh/u1IrpriQeXQIdCpqO4D4oMfoiY+0dhNPnsEsC32pf7kuqGZvkpSFVBbNV:X/IqDCpJmskwkEZxtN+NH6R+4n","tlshash":"29a2f98ebfa3123666a3712f2bafa15d717650031009cd24bdbd97002f90a75127afed","size":22562,"data":"","first_seen":"2026-02-25T22:00:14.561127Z","last_seen":"2026-02-25T23:03:30.620423Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae6da90c9f5bf3e532023e8c0cb99eda","sha1":"d4520bdb888c48c67b2da122d9e08ac8d3b1af4d","sha256":"3575686ec65e0a93ad0c0353fe92dea1a660c9814d7ff03a5e5c911fb68a96a3","sha512":"d7141bd4e839ce9e437c00fdeb41e1e9c245a8bfea1dff6244b2f3e99dec23d993f6e87d4f789d3b09dbcd5847a8d3491d7688c171c64e5bf81e470a7d4917a4","ssdeep":"","tlshash":"d851ee7d6102de8aec9e3d29157e9c3a648d856f8757cdb5c2d9ce11434603a2787ec0","size":2464,"data":"","first_seen":"2026-02-25T22:00:14.562044Z","last_seen":"2026-02-25T23:03:30.622248Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/117-7957cfc86edc1919.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124364,"data":"","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-08-05T03:19:16.163669Z","times_seen":2212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/972-c0d6482dc92141f6.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4b13ad7edddc9f56fea315f7e3f1ff8","sha1":"15d90ae6649cd117e17f200e42aa02fa9f5e5126","sha256":"ba8d97dba2235cf174abe4e9a93fe5e75da8bc4799381cff8c38104bceb15941","sha512":"2d4063787640316d76dad78e3c0a3fd5f849b9bb7453da2f9c53f9fed4781ecc79cec92b3aa0b6e005473969580af38698e1ab9bf653e843f606b2d6982aa462","ssdeep":"384:05k1IdRMx3IG1DnLGRwqdggPG1kyDfLxvZKVSUENLd3NU7tpU2J91wMVG4x:akgRMxhdnLqkKByLX4tpU2ZhVJ","tlshash":"f1c2e8be71d2f8a2479b11a0443b1006f2be4caa145e6244f7b4c8dbf57056da1b3fad","size":26066,"data":"","first_seen":"2025-04-19T17:30:47.724841Z","last_seen":"2026-08-05T21:34:02.818969Z","times_seen":1365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/298-bf2007cb3d8a0cda.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b61251fedd10830b27fbc2d3571af24","sha1":"21d0584374cb7e6a1530fc64a1cfec2ecefebcbe","sha256":"9514cd722381c955a3d491262048aa7903a731ef97e45dca430f685b9f641494","sha512":"ead1713a2e136dfbc9960386f880563e8c17ec9d27f054cc231433b94877dd8830b1b1cc771e4ddc0c622c3a808569e9982bc32ff84ff13ffa0078798c328755","ssdeep":"192:4QehBycBsvsDJSixFyWearv7DIQjb/dHA4sQCwka/U:Fehccq0lSmAYrDP3dHAfi7/U","tlshash":"fff1d6b572d27ee8e7aa002c18ef900c717f5f85dd0f8818f568b80765564d4f9a2f88","size":8185,"data":"","first_seen":"2026-02-25T22:00:14.533898Z","last_seen":"2026-02-25T23:03:30.596594Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/solana/page-1a5cb1fdb657d606.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15a003bfcbfd3968e8a862ea0fa5659e","sha1":"ee2f6efd13f9a9dcb90179a40839f112626ff81f","sha256":"2619137e1f0d6fe4004ea73a458fc741d347b5da84caa88373252cf3467e131f","sha512":"97e566a7b2a2707047e67fc335f5e3fb83ec45a0508b3aa4ae4709d4cf27cc06933e91cb32c3143989ee64a0b6f462ccba03c98e25a8925e921e97d00b1787f6","ssdeep":"96:xCQZzkrXs4ESekGuiljnDrPJaUEHcI7TiyZeWCTAUoSMxtLlLqDIDmnoYGTaj3Ff:kAzkrXs4ESeuiljn3PJaUOcmTNZeWCTZ","tlshash":"6cc1efb7a7a0758f0ac857bb00e91649e7ed2b6b3037481097938c7efc60a979539620","size":5799,"data":"","first_seen":"2026-02-25T22:00:14.507915Z","last_seen":"2026-02-25T23:03:30.578324Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fae0320b49cf1d215df10dec4270bb4","sha1":"84527da7c69e49a493abd1fbfd491312e5dda6e3","sha256":"abb2aecdd8286beba06468afb963f0edd0f6ce108f2ad51811e56d8ac759b003","sha512":"2d409d1cd54f232376c232f5794e9ae6964245d4425265fbe33629792dbf5f86ab20221802033f73a268ca0a0875fece9c55579b1442435fed4cc2a2435a07b7","ssdeep":"","tlshash":"6da0125050804eab813140a2383844b122d4400c0188028403e0208934521246236c50","size":82,"data":"","first_seen":"2026-02-25T22:00:14.56503Z","last_seen":"2026-02-25T23:03:30.624683Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b09b59231f65e5ffe8709ba0037c270","sha1":"0319cf04e2ecd3afb7c6d6578475784ef387b425","sha256":"50430a4994a7a6e322a8ba1b4cb8c3d229340bfc813cddea7b12a39246c2d0c1","sha512":"aa523331dfd1ef93f4a165fb654f6e38a3064ead508ef0ede2462b09a2fd336a0a21414c389c765323d815464f34e0cffc23b5c2b8eaff8ee441fa31ffcc982d","ssdeep":"","tlshash":"944148e2ed12ec05d7979e0d1cbe7d7524ccc2928249a41fea98cd2946c3d346fe1752","size":1929,"data":"","first_seen":"2026-02-25T22:00:14.566106Z","last_seen":"2026-02-25T23:03:30.626297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/webpack-046267dadd7b2845.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca0d1d30702f5eba37e3038119e4bd30","sha1":"acddd9069af3f2f21f35d865ec0c7ca38ec2cffd","sha256":"8700c05b663d64fdf6413ecf7b837f7346b846ac286403a31e9c18f0dd8946ef","sha512":"443c14425dafbd9311b3b1484750652712159109fefbb52e6cb2484cc629a3503370f0258b7895ce807c5323b7129774b7dc5e4b15f1dcb091bdeded001647f5","ssdeep":"","tlshash":"dc7186dd71a1f8ba1783a4a1043f9556f23f28b2281ee4e0cb29d8f5fc355498513fa9","size":3557,"data":"","first_seen":"2026-02-25T22:00:14.501018Z","last_seen":"2026-02-25T23:03:30.536854Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/webpack-046267dadd7b2845.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/webpack-046267dadd7b2845.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"de5-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GYbIkLolfZ2Bx5156xMTCYJLV%2BcaVNJdtaBISCW9nAs8F54NNCnMZ5TChefLS9JgvpKlOSSDzhK42QyC%2FEVAkdk8BjuBHTL4CTdFlA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad564cff91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3557,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3557), with no line terminators","md5":"ca0d1d30702f5eba37e3038119e4bd30","sha1":"acddd9069af3f2f21f35d865ec0c7ca38ec2cffd","sha256":"8700c05b663d64fdf6413ecf7b837f7346b846ac286403a31e9c18f0dd8946ef","sha512":"443c14425dafbd9311b3b1484750652712159109fefbb52e6cb2484cc629a3503370f0258b7895ce807c5323b7129774b7dc5e4b15f1dcb091bdeded001647f5","ssdeep":"","tlshash":"dc7186dd71a1f8ba1783a4a1043f9556f23f28b2281ee4e0cb29d8f5fc355498513fa9","first_seen":"2026-02-25T22:00:14.501018Z","last_seen":"2026-02-25T23:03:30.536854Z","times_seen":2,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana?_rsc=8kzk2","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana?_rsc=8kzk2 HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wrg8vuQzDp5EkBjbj5u%2BZ835CDZdv1ebNP5BfwwJV8UzRpAzPpYf30I%2FXFv%2FbXzopr3SPuik%2FGdmOqIjJPCivrgzn6vGa8UKTwbnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad56748741525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17110,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (14472)","md5":"d12a919aba7ef68f1fb9d578ec3d1f85","sha1":"a0ed0a9425b51ecda15b503b22c7e2bae706e298","sha256":"d269874c95e411c72a4f95e361405c914f8e5f463fcccab5f458d342058c2597","sha512":"2ac1a66f87a84a0d0ba09f030e1124a7b4fc7bcac784829494023843138ddf4a316dba6cc00a799ef648490176609d342d3220ac0d40432fa9150463820e1426","ssdeep":"384:I1b161GmZXMvrWv24ST9eCI1ANLtBdnCuL7h/bB7XJs:I1b161G+MvrWv24STM11mLtBdnRL7h/g","tlshash":"db72dc3da7425cbcbfab0655552fda2d622d437bd7968dbae2fe6d11038a0352d03380","first_seen":"2026-02-25T22:00:14.537859Z","last_seen":"2026-02-25T23:03:30.539176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/orca?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/orca?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1IeiOJ0kpY0%2Bb7%2Bx88lpmKZSZU%2BMfdPXu05AxuAP4cd6yjX%2BW282A6GSq83eUjerv8o8EWqjc2VPZToPcvzuOlmGTf5l6Ir68oIJow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad56928e91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"938efabc599d41a4ab08c6a754c1a41c","sha1":"84e1fab28db52ad1c71f5fab382ed35d7ee0ea66","sha256":"2ada488b4b86b07e120e7cc01cb9bea9470b31faec7bf17c2155e738dc4e1af8","sha512":"66e9a0d262e14c7aa9bc25ab72ec6f1099cfdaf1fd77875be0becc05083a2c7c7b1c579c8214e10362c21a81b6f1dd3db5646af7f43f232bdfbe45eb86db72fe","ssdeep":"","tlshash":"acc08c1202587ea2bc3d32d6003ee00a3ace86cb005c167080f05a162371333140b5e8","first_seen":"2026-02-25T22:00:14.516452Z","last_seen":"2026-02-25T23:03:30.540897Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/marinade?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/marinade?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtNz9TFCc9Ts7ef1I4u%2Bc%2FC0qUck0%2FejOy4nlfTdRUUaObC3aiLtzA4AUIM3Tg45jE%2FNSyDnysmPL2kZ0h%2BzaKqrsGSzYYuInH9Uqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad569a8f61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"68f3ca2d8ac5dd3c8074e61583bfee7e","sha1":"991253214d4b0caff82bf499da091f0a69d0aed9","sha256":"b5e2604a655c24fc825c0aeb1e9c2a02fa456b5e8b7717c4d32cb8fbf589e5ed","sha512":"9413d741726b1362243d5d75a58a3c90daeeee65e023eec09a0edd4010c6be019583ea60a2a87c0f3e6a2e7fb89d4d59249387e642a73d6f905ac5e9a8bab87c","ssdeep":"","tlshash":"f7c08c1302647ea2bc693a84043ee00a3ace02cb005c4c70c0f05a1613ba333146b5e9","first_seen":"2026-02-25T22:00:14.523842Z","last_seen":"2026-02-25T23:03:30.54288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/jito?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/jito?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8qtl%2FAU2mrOa7%2F%2BxAckNwWN0o%2FHfQ928mrV1dcwGB4ph%2Ba4eFqGdBqidx3sA0u9GqlnHW66nc0xkDgO9mBx%2BSOZE2qD%2BQnTdM2azQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad569a8f81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"7391973e46b47943586c4bd0e46a636b","sha1":"e90261640fb9398d24771bbc56b4c187467a520f","sha256":"18b84a6879831f636a33d1bb1eff8de6e8b48ce3a0b3fdae3cb470df593bcefe","sha512":"1b0de01ff0cfc7528dddcc85e98882e939fb5793e9ef610486c58c5048f3de5cdc29fa6cac309c6c9409f212096cd4b0c9a274419e7191e90bba2a0005d6f9ad","ssdeep":"","tlshash":"29c08c1202987ee2fc2d3384103cd10a3aee12cb00cc047080f09926137a333144b5e8","first_seen":"2026-02-25T22:00:14.545626Z","last_seen":"2026-02-25T23:03:30.546385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/css/f66bce4dec8e3651.css","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/css/f66bce4dec8e3651.css HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"83bb-19c8b12aa70\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABWzSkD4pOJTLycT1I1QVmWPNSHKLwRetf%2BQ%2BO%2FLyH%2BDbnWUvdbx%2FIhDRyyF7lgbsVw9YBGSX8iNk5lPEbENEjNn%2FCU%2BE%2BlR6z5Y2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad56668531525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33723,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (18583)","md5":"c59525ded64f16d266128bdbe4021ceb","sha1":"3d279486bcceb9777fded216d46ea886a4c59d18","sha256":"d0708446b357d1a8e8cf13c469617d5d5b0a7167eeecf57afd1fd9d355b1324f","sha512":"5ea886b52873bd412bae7a379f425fbd44f978cea067baae1f18dc058810d4fb0d9c50988b5ad0b8d14e065508246a4efb29ecb72443aab951114441a59437e0","ssdeep":"384:VZij2NG8OAbPx9RXKp4hBxA95swYJH0b9HRKYw70cqsx/hrXV2h6:VZijY1x9RXKp4TeIHk9Ha7/rXUh6","tlshash":"d6e2a818c525442fac33b8f7b1ccbf1a642a60c5ef654aabee194605cfe75b33692704","first_seen":"2026-02-25T22:00:14.529608Z","last_seen":"2026-02-25T23:03:30.548046Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/favicon.svg","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 22 Feb 2026 20:06:17 GMT\r\netag: W/\"101-19c86f5bc49\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0W9kzLbq2R4UTbShDTWh1sdBayFra8Z7hbwGrFM7mVUqfKVj4wIxBBIGNR29Qfrx1UrJrIYrJfdFUJudo3PLQwIcH8Xjgy2ss1%2F4ig%3D%3D\"}]}\r\ncf-ray: 9d3ad56ae9261525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059f787b603e0596f74489cc29133688","sha1":"7aa6b156c1ea0f7c7d7164a8bc1793d89d9f134d","sha256":"f25cb0609e5ca945254f6ec736059e6ec5e8eb5899914924602ffbf66898a42e","sha512":"64a2f80f12039a8031a9c25b8464812a20ae05c1bf165b054ddd2587bb084bc2b915946bd1625adac93a548b6cc27166000a4b01262c8057db2929411420e19e","ssdeep":"","tlshash":"5cd09529c0889705c70c4e02750d75e5708fd4cb5d45c914f6511539d4c7dd76ac635d","first_seen":"2026-02-25T22:00:14.513517Z","last_seen":"2026-02-25T23:03:30.550529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloudflare-dns.com/dns-query?name=_r.chrome-extension-da0e5-bc.com\u0026type=TXT","fqdn":"cloudflare-dns.com","domain":"cloudflare-dns.com","tld":"com"},"ip":{"addr":"104.16.249.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare-dns.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"SSL.com SSL Intermediate CA ECC R2","organization":"SSL Corp"},"validity":{"start":"Wed, 31 Dec 2025 19:20:01 GMT","end":"Mon, 21 Dec 2026 19:20:01 GMT"},"fingerprint":{"sha1":"F8:86:35:01:72:60:D4:0B:9E:B4:17:BE:E7:37:37:91:1B:63:0E:59","sha256":"E3:B0:28:26:78:9D:65:3D:22:4D:3E:DA:CB:E4:E8:77:CB:72:86:FC:4C:92:26:72:F6:22:67:41:CA:57:AD:65"}}},"request":{"raw":"GET /dns-query?name=_r.chrome-extension-da0e5-bc.com\u0026type=TXT HTTP/1.1\r\nHost: cloudflare-dns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/dns-json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nOrigin: https://yieldscan.si\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: application/dns-json\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-length: 241\r\ncf-ray: 9d3ad56bf98635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":0,"mime_type":"application/dns-json","magic":"JSON text data","md5":"0390515ebcee87d347060156d6595b1e","sha1":"e609fb944e0b6a7bf47ce61657500a743de8ed26","sha256":"037c383b3018bd0bc545a7ac67a2a44955043eb45d970091c660ca6fb44d5838","sha512":"84494356f276c0a1ac4c0929f23254ebe1e2940d066325b564dbf955f7009ea039d52d7dda10df64a0311bc18dcec0db5367c7c65bf0a608b4a5d7e9c60fe729","ssdeep":"","tlshash":"c0d0a789918881acb407a754c4c314579f7c22b273dcbe799a443e64e6cb341909726b","first_seen":"2026-02-25T18:10:56.196531Z","last_seen":"2026-02-25T23:03:30.552611Z","times_seen":6,"resource_available":false,"data":null}},"time_used":743,"timings":{"blocked":357,"dns":19,"connect":1,"send":0,"wait":28,"receive":0,"ssl":336},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-25","alert":"Sinkholed","trigger":"cloudflare-dns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/fd9d1056-eb2731ee3896fb3a.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-eb2731ee3896fb3a.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"2a322-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZcGS6nIhWA3FGMWcR%2FUisZAeApgZmyu1FaO4OIwuAGnDfMr6NILgBJOS5dknMkomsg2q2tqttcPTDcjnfyDFQ%2F26oYrPPWQLfLdoAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad564dffa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172834,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-08-06T03:01:37.129946Z","times_seen":4570,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/media/bb3ef058b751a6ad-s.p.woff2","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/media/bb3ef058b751a6ad-s.p.woff2 HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40480\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"9e20-19c8b12aa6c\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6H8wnFISfBUhjtxiG1ZCpvBLvH9YAk6Js6pDBS7GHffTMASgeY%2BNrt1QtfNmf44wkX4hffiWrJjUiSQQ%2FLFm5AZo3uQFLk9AFwumrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d3ad566584f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40480, version 1.0","md5":"782150e6836b9b074d1a798807adcb18","sha1":"c18da6cb430f645ecca85d567c76364f73ca2013","sha256":"1e06740a02a443fb7f3eeda8fcaa685a0f6c620e3f01e6666e847295469ce3ad","sha512":"2763562220673d56764f7c9bb248157afc7e96d0b69c51a095dc176cf37f95b003804c36f55878b304355e79186dbdedd67b81cda298a50d9efa77a471789fb6","ssdeep":"768:PzCE916JZPUvQSPYkJLjtw/WaCzpvZaFiPEEU4Q3iEYbUuwngyMy65c:PzCm6LPGQxkHw/63aq24Q3dYbQnHm5c","tlshash":"900302d25148f93bed32a96a6dd6721d9aadc433cea835df0dd814d28c1bc5cf5041a4","first_seen":"2024-10-19T19:30:03.443351Z","last_seen":"2026-08-06T08:21:58.308425Z","times_seen":7804,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/layout-2613fa502550798b.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-2613fa502550798b.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"3e0a-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5v1BTb7TSQeTDhLS3mkE5Z9qjoP%2BFvpNRnxCc%2Bx9qgdBvGSK%2FTqK3D2LVXOZkCTD1oMV91p7sjZxQKcZm0TPkZ4ZDqzRJd6qcL7fCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad56668541525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15882,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15882), with no line terminators","md5":"ea754d71c4b116b3ea2dd89f9987e45d","sha1":"874cbe7e13b4fb4529276639ba80581e00b968f4","sha256":"adba96c5a9a0ea1e387d0ef5925cb023b151aaf269517564d1528a574f535870","sha512":"0984ccefacc63b5ebdd2687189e12b2ba0aaecb181c1e2648ecca036d2e4ccaaf0da3eeca9d844bc7c4de5085ada6f97a0547fb07bfe72ddd465a216d50de2a8","ssdeep":"384:me0S+z0F80qSSX4M/hM1M/FRHBOTXONp9cIRev0:Cz68ZSSX4MJM1M9RHgT+Np9cIRev0","tlshash":"f06230bbb39036bf6ac48f9205ea5689a7e4178e76670404d797993cfc14ef39438630","first_seen":"2026-02-25T22:00:14.518449Z","last_seen":"2026-02-25T23:03:30.557477Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/972-c0d6482dc92141f6.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/972-c0d6482dc92141f6.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"65d2-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c9GNDWopMgWoqUQKzvb9YT%2BtqmMr922DIvSkTACcXsrdU8dw1H4B%2B%2FQxKF%2BbJeLnw7OO1Oe%2FZBZcSY9MPUc7RHE63ZfePtf0%2F6faxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad56678561525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26066,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26066), with no line terminators","md5":"f4b13ad7edddc9f56fea315f7e3f1ff8","sha1":"15d90ae6649cd117e17f200e42aa02fa9f5e5126","sha256":"ba8d97dba2235cf174abe4e9a93fe5e75da8bc4799381cff8c38104bceb15941","sha512":"2d4063787640316d76dad78e3c0a3fd5f849b9bb7453da2f9c53f9fed4781ecc79cec92b3aa0b6e005473969580af38698e1ab9bf653e843f606b2d6982aa462","ssdeep":"384:05k1IdRMx3IG1DnLGRwqdggPG1kyDfLxvZKVSUENLd3NU7tpU2J91wMVG4x:akgRMxhdnLqkKByLX4tpU2ZhVJ","tlshash":"f1c2e8be71d2f8a2479b11a0443b1006f2be4caa145e6244f7b4c8dbf57056da1b3fad","first_seen":"2025-04-19T17:30:47.724841Z","last_seen":"2026-08-05T21:34:02.818969Z","times_seen":1365,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/api/price?chain=solana","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /api/price?chain=solana HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: application/json\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7PBGOnT3lBhN%2FsxkQuvVSBAc1%2B9oOhos1emXXyx0bw9%2B8SmMBHNZzHEAEt7KlTUGLynK1e5YGGQgIAsUOo0Zr83J7Tuy3XPUP9SdQ%3D%3D\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d3ad568b8c71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2c5a983ec60d684f56280f9b9c55054f","sha1":"4e533b686c672609a5e372f47fc3624224c8c3a6","sha256":"3bd2651b663644163bd6cd1c40088ac566730cd093ffd5724779381a8e527970","sha512":"70121eda163e3bdf413d90fcc75d69159a6402367c48e4752d170a21317a90b62c9faef2d87aa5cc8ca75d85d18c6a32b7bf90337834af3d3fc9727e17c53b1e","ssdeep":"","tlshash":"35900202a65004699810714142251b21a5e417725630117d908c51ac956706e6842416","first_seen":"2026-02-25T23:03:30.560168Z","last_seen":"2026-02-25T23:03:30.560168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/jupiter?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/jupiter?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZMsZrfv1sut9UXzyG5BBke9d%2ByEncfusytDTgf5SJniXNqXilLuciHgFFQAhY28iZ%2Fvb7%2FZCS8GjEVIaxiPu0e5XZWUJoHQQv4qOAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad56938eb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"88566f59994ae85d870aed835fd4afa3","sha1":"9764986519e5699612737bfbeeea4395addfcd2f","sha256":"35a47885d583fc3bc4dec301c41a44a38a50acb1774fb77d85c2a456393d34ef","sha512":"fbd1b7922cff20d2391b481df2f52160eb3e67200d51cc56a60b2eafc3e5e7e567fb0049288efccd6f53c9934540600bac0ec0f88512ba868113178107148cbd","ssdeep":"","tlshash":"fec08c1202547ebabc2a3284003cd10a3acf02cb108c067080f09d269372b33a42b5f8","first_seen":"2026-02-25T22:00:14.519788Z","last_seen":"2026-02-25T23:03:30.574313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-25T23:03:00.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\ncache-control: s-maxage=31536000, stale-while-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MtxqXSSTbti87Attww6G2qJG9jd7uv8LRr2%2BJ5mzP%2FrRxr8nfLJtXwlC%2FDI1AnRRgVcNMiOcMGY7%2Fna9tqhQl7Cps04MltzwedZHuA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9d3ad562f8ada0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T08:49:01.761015Z","times_seen":17739839,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":57,"dns":45,"connect":1,"send":0,"wait":100,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/solana/page-1a5cb1fdb657d606.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/app/solana/page-1a5cb1fdb657d606.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"16a7-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwJj%2FtdkYXCyw5vLSzva32jTJBlnI2FAoJ92bHQ8Xc%2Bt8It5lvC9Ot8541otOONDLsbpBQgjHtkos1KwOgocOKGFNi%2FIwT%2Fv3XPGcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad567a8811525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5799,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5799), with no line terminators","md5":"15a003bfcbfd3968e8a862ea0fa5659e","sha1":"ee2f6efd13f9a9dcb90179a40839f112626ff81f","sha256":"2619137e1f0d6fe4004ea73a458fc741d347b5da84caa88373252cf3467e131f","sha512":"97e566a7b2a2707047e67fc335f5e3fb83ec45a0508b3aa4ae4709d4cf27cc06933e91cb32c3143989ee64a0b6f462ccba03c98e25a8925e921e97d00b1787f6","ssdeep":"96:xCQZzkrXs4ESekGuiljnDrPJaUEHcI7TiyZeWCTAUoSMxtLlLqDIDmnoYGTaj3Ff:kAzkrXs4ESeuiljn3PJaUOcmTNZeWCTZ","tlshash":"6cc1efb7a7a0758f0ac857bb00e91649e7ed2b6b3037481097938c7efc60a979539620","first_seen":"2026-02-25T22:00:14.507915Z","last_seen":"2026-02-25T23:03:30.578324Z","times_seen":2,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 09:22:01 GMT","end":"Tue, 26 May 2026 09:22:00 GMT"},"fingerprint":{"sha1":"43:A7:0E:2A:17:34:DC:42:83:88:AE:D6:95:95:09:58:26:71:E6:C5","sha256":"ED:6F:3E:CA:2F:60:5F:3F:0D:72:55:8C:78:B7:4E:0A:E1:37:CD:EE:4D:72:9D:FC:CE:FE:66:8B:2E:C3:13:95"}}},"request":{"raw":"GET /demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana HTTP/1.1\r\nHost: uygft-a78s.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 25 Feb 2026 23:03:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SXHkTd615%2FtRLe8UxWuL7grLn4KsGW7pc2qDxkLa8sdxCPGPAS0vZlVv0CKJjJI0iL1q8TNzzVsbIlqa3qp4C6vXiVW8XE6TGrexUnVTQPGJuq2Tk4ZNmmUPDaoMcvoiF7A6e%2FHU\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin,Accept-Encoding\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 49\r\nx-ratelimit-reset: 600\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::hpxdd-1772060581902-8fe0e7c566a4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2846964,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (33714)","md5":"cef57871b42fc717829aa21acd3fbb78","sha1":"3678af8fff22d1777d9b9f4a314665902ecb766f","sha256":"e5c8bc04a10821db1bc8a3aec5017c5e6645dbf8da41ea0ce007e8092653808e","sha512":"a86479915712eddfbf382d3f7e325bf9a41ac74aa448233c0438cc2cd8dcb4de88961cec2e0182b9a7e932d3ed833351cf823c7232d32fce16013f1b92e73dde","ssdeep":"12288:044LZxNuaZYNUIFPfLUlKY4Ue+jFy1rq6c5249AZQmYN8Ge5CK3i/R0u4gpJl:04cZxtaUFBE1r5c52aAZSu3iZ0uTJl","tlshash":"2d256cb073a1b07a03eb92d594661100f334941a700d84acfbaca9eb6f959cf957bf35","first_seen":"2026-02-25T23:03:30.580421Z","last_seen":"2026-02-25T23:03:30.580421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":48,"dns":20,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/api/v2/binary","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:03.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 09:22:01 GMT","end":"Tue, 26 May 2026 09:22:00 GMT"},"fingerprint":{"sha1":"43:A7:0E:2A:17:34:DC:42:83:88:AE:D6:95:95:09:58:26:71:E6:C5","sha256":"ED:6F:3E:CA:2F:60:5F:3F:0D:72:55:8C:78:B7:4E:0A:E1:37:CD:EE:4D:72:9D:FC:CE:FE:66:8B:2E:C3:13:95"}}},"request":{"raw":"POST /api/v2/binary HTTP/1.1\r\nHost: uygft-a78s.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/octet-stream\r\nX-Session-Id: ce25063f9da5b3d37dcc60225ad7136b\r\nX-Config-Id: 699b6bdb44e2554e27be7387\r\nContent-Length: 99\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Wed, 25 Feb 2026 23:03:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zxurqDWz6S8SKBQcnJTabY6LeM46EPM3piPj4wkXJUAqb2CVCl7DxHu0bw1rYyoAdXtgxlfMvtwCqKzO9OvsIruZir38zynrZrkh2yGr3XculC2Rq4b9PBtYvPwzKLioQZLf5rDk\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin,Accept-Encoding\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::tzlv2-1772060583889-36765178a986\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"ec7d65a70c467a651f5937c4cb793249","sha1":"80ee8ded1bfb44ef974174678654eb4a09195030","sha256":"a1f40f9e879b0bcff798c16399df6e3e1fb1f1bd59a3b7c109ea2d25ac8a3c60","sha512":"96545bc76206f5a6bdb370a101e153e64d75704809e948802341bacc1cb24a12c53677a77b5b89e4a7aa37a5bd85ef2b7f52e95866e87c35854e8fee5d1e4446","ssdeep":"","tlshash":"6811751076c9077ce4d37b3eafbd3a5d55430a12903b6bd194f9dd2b836a4936a1103b","first_seen":"2026-02-25T23:03:30.584116Z","last_seen":"2026-02-25T23:03:30.584116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:04.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /phantom-bypass1-desktop.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 23:03:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 2031700\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"a22dc9face81ff1665651f1052a0a99f\"\r\nLast-Modified: Fri, 23 Jan 2026 22:55:18 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3ad57a9ad5120a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"eeebcd74061a9dcd7dfad338ebe1d46a","sha1":"23148fe8cd0cfe6b4379103d03dabde517e9bfd9","sha256":"631978ce1c77fdc8360949130dc08a761d8a5cbf0b87875b7b1556706cabc068","sha512":"e151fd7805ccbf649173ed454739604bbb31cbd0daa1dbf057454363c74532c9a5c2310e516f087f21ef09e5cd7de46e91d67e01815274b82573caae494eff45","ssdeep":"12288:/2TA4vVLmF/WbRkFOppRWsWNbGSQHJAUOUsLOsWZssG5bxVWhseThDII57tSKnXb:/2TAaRkFipRWRSlpAzUWOsWWvbLqhDVr","tlshash":"41f4233ac26c0681a9a500112e6526604c337cbc54feea3383eddf3adb5b92d6da5295","first_seen":"2026-02-25T03:05:09.955526Z","last_seen":"2026-03-07T02:01:37.494267Z","times_seen":63,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":61,"dns":21,"connect":1,"send":0,"wait":123,"receive":167,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:04.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /phantom-bypass2-mobile.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 23:03:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 3967947\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"5a6a3867cbfe36845cfc495e5ca7f0ea\"\r\nLast-Modified: Fri, 23 Jan 2026 15:28:10 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3ad57a992923eb-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"77c8cf44927733853063e12a9c919838","sha1":"e753f4fab619a4ad9c7e362f7dbca7d28c6af569","sha256":"0a412e42c896359759d6f578d9439fdfa66c8387c55de84440861ea71f463e59","sha512":"23e51c246c2f5f89fb1e53fad2bbba306a23f2a5d708b1b58dd8b8a60a382c9e38d475a7b57e90d617d2f87524659ca3c63da65c0248367925c1f5ab8bb570c6","ssdeep":"12288:VEznytgluvfiMoSnqYsA4Xp8fvndMMr95Hl42YSbZQxiVUSmj3+SSB9WV:avufiMHLszpYKMLHl4XSjC3h+s","tlshash":"8ff423e9846d4c8222510261295a753c2053b03eddf7bc39b1acdf9dc69ee3e8ce91e5","first_seen":"2026-02-25T03:05:09.958112Z","last_seen":"2026-03-07T02:01:37.50279Z","times_seen":62,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":54,"dns":15,"connect":3,"send":0,"wait":100,"receive":28,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:04.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /solflare-bypass1-desktop.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 23:03:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 6028322\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"cf5ac8fca45e5d0409fef8923c179975\"\r\nLast-Modified: Fri, 23 Jan 2026 22:54:30 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3ad57a9c02b1b8-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"13ec753f0f7ac3f2e09cd8fb3d159fd6","sha1":"fb7c640e5ea1b3eb5af719aec31fe04a971c27db","sha256":"69c12f796a581c42a4dfedd57a615fdc0407867c0ab2577507c6afe5320d5b26","sha512":"79c55e8cc4ba19d93751be035f34ffea46704d06b08da0ee65a013c3bb40a7f3295156bc659db38df831457a65d53ed01bb79812b5903f66de13108d99c85e9a","ssdeep":"12288:WKLOlpdbVhOBbi61VlVP30w5qYO8DgLhC9bxl0zY6+wqzta5YpqXl5M0k+3uJH:WKS1/OBbi61/Vvx5qYONFC9VGM60S15M","tlshash":"b4f433f9941e38c2eb42b5617c2f12219dffb09b487f5fe24b40ba6a23dad4443d9458","first_seen":"2026-02-25T03:05:09.960469Z","last_seen":"2026-03-07T02:01:37.469286Z","times_seen":59,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":53,"dns":13,"connect":3,"send":0,"wait":117,"receive":160,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/main-app-75fafb3e997a8bf3.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/main-app-75fafb3e997a8bf3.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"1cd-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PtWPLnZB0LQQfQsUpu2ixIl5%2B%2FwhVTmt02%2FF40NWzvQyxe%2B7HIDSPTnHggY8g2zlzYg%2B2rjM%2BR4JEWRZtjqWCEI8kk%2BTqg4NZkYcew%3D%3D\"}]}\r\ncf-ray: 9d3ad564dffd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (461), with no line terminators","md5":"da20220fd375a6efc059036860efc3c5","sha1":"f629b1c2c91c5e488c8a7035e10404aeaa4dd135","sha256":"049088cc15080db3240136d09533bf91d8cbae0f839350e3e8af874a3685e8ea","sha512":"49b7cf2e4bbdc4434fdad157185bad43add6cfee51147f24d44968aa6bb9c72f3a1d8cb70563b6dbb712027c7833ba22b6a85eec204f1a2d27fba8a7a0f11c53","ssdeep":"","tlshash":"8af0829a2b4c701f2913ad24fdd35c2e295e416428a718501a04ddb12c33aa893f1c39","first_seen":"2026-02-25T22:00:14.54243Z","last_seen":"2026-02-25T23:03:30.594453Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/298-bf2007cb3d8a0cda.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/298-bf2007cb3d8a0cda.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"1ff9-19c8b12aa70\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qtvOmr5tQqHp3CrvykQ4%2B%2BHvogUpgwnaEFb5QPi5JEJIbvG7maiFaMRNb2n%2BP0kZE11r0ZSWg7TTUOTI1Kxv2JmgXF4DLUsnKfr%2F0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad567a8801525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8185,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8183), with no line terminators","md5":"8b61251fedd10830b27fbc2d3571af24","sha1":"21d0584374cb7e6a1530fc64a1cfec2ecefebcbe","sha256":"9514cd722381c955a3d491262048aa7903a731ef97e45dca430f685b9f641494","sha512":"ead1713a2e136dfbc9960386f880563e8c17ec9d27f054cc231433b94877dd8830b1b1cc771e4ddc0c622c3a808569e9982bc32ff84ff13ffa0078798c328755","ssdeep":"192:4QehBycBsvsDJSixFyWearv7DIQjb/dHA4sQCwka/U:Fehccq0lSmAYrDP3dHAfi7/U","tlshash":"fff1d6b572d27ee8e7aa002c18ef900c717f5f85dd0f8818f568b80765564d4f9a2f88","first_seen":"2026-02-25T22:00:14.533898Z","last_seen":"2026-02-25T23:03:30.596594Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/noir.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /noir.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 24 Feb 2026 17:39:44 GMT\r\netag: W/\"75ef-19c90bc4798\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cgDGE8a5asIK6CWcPJZfF1tAO9ligeJ9KqeP80rt1gAv5K779Q81LZ8pV6d8KOpon%2FN2euRjzwJWhHobk1%2BfLaJtx%2F4rRkmzIVqOQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad568b8c61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30191,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (30191), with no line terminators","md5":"3cd1b9b8607dd45a581a9c12096d9d30","sha1":"78548296a7960b9f80af365eb0a9ed3444ae0b7f","sha256":"0f75d9b667a7e0a064019d334afdacf24a9e7f2f0fe247d49a8e69eba29b58e5","sha512":"c3c3fb508327f7512f2ec401a5d20b52cd764693e3a157aab7619bd7ea26bcdba12c97ebaa748bffd6bc1a19b51f92687afe531af2186bc7796aae833955ddbe","ssdeep":"768:Z7p4/JGg274TclQPP7GQ5kIP/smN8mZLNgY7BBIipaf0+48AUH:Z7p4BGg2ETcePjVkIPEChVNgY7BBIipQ","tlshash":"e8d22c9bce4f2e518b745e0923de2ccd092d1b8e68e244cd550aa7c9d68f56704ccaed","first_seen":"2026-02-25T22:00:14.496938Z","last_seen":"2026-02-25T23:03:30.598522Z","times_seen":2,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/meteora?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/meteora?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfSvqoKanJ1UWnd4%2F8CGZV3uByfuTduUEJz2Xt5nWx8%2FA5IfBkV7EIduOa7wdyZkEMuenQi7ejUYD9BlTeHl%2F5%2Fc3DqyXEEz7YYCAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad56938ea1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"a9927fc85782318cc28e5506e5ecc4cf","sha1":"7b1aabcf17acba3b3523eeff4f4c34f9da945f5e","sha256":"9ce2d651d238b8cfdaadc6d4286e1ee16aa4db042b3fca6ad85c614e5ae1c4f2","sha512":"908e7f870c0196f69f2043c5c516c6d21530877fd540b2bd283abddc78204d158e85fd2436de17ed7e58de1038ac1ee671eede252078b9f61ef0d5d8b2a111e2","ssdeep":"","tlshash":"4cc08c1212547eb2bf293f96043ee00a3ace06cb004f5470c0f0a916137a333980b5e8","first_seen":"2026-02-25T22:00:14.510864Z","last_seen":"2026-02-25T23:03:30.599901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/kamino?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/kamino?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bbr%2BR3smKwxgF9eYfZuFtVJUpz2RIg%2B2FxmVkM9xSoNWHGzCZW6ASZwcI%2BX7b5XRLL0IaZCA6ZZpcGvFglfExWfLVoBQrHieh%2Bl7oA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad569b8fa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"6bcb8e830e759627fca26f242ab263f6","sha1":"da6ed9edf06c68eef08a152a01822dba62284985","sha256":"e7260289007566c40a1b08e4e2bfef41ae3a1e37243bfe0dca9a7ad530f10627","sha512":"4dbd8d2ec9001f02ead8773cae61270eae15496b916c543a3d239be5bb5a3373519253f1016cbc0b19e6589344396f2cb995aad3f9668cdc440978e4f004f23e","ssdeep":"","tlshash":"65c08c5302987fa2bc2d3294d0bcd00a3ecf02cb108c047081f099161371333146b9f8","first_seen":"2026-02-25T22:00:14.521319Z","last_seen":"2026-02-25T23:03:30.601535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:04.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /solflare-bypass1-mobile.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 23:03:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 6028322\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"cf5ac8fca45e5d0409fef8923c179975\"\r\nLast-Modified: Fri, 23 Jan 2026 22:54:15 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3ad57a98aa783d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"13ec753f0f7ac3f2e09cd8fb3d159fd6","sha1":"fb7c640e5ea1b3eb5af719aec31fe04a971c27db","sha256":"69c12f796a581c42a4dfedd57a615fdc0407867c0ab2577507c6afe5320d5b26","sha512":"79c55e8cc4ba19d93751be035f34ffea46704d06b08da0ee65a013c3bb40a7f3295156bc659db38df831457a65d53ed01bb79812b5903f66de13108d99c85e9a","ssdeep":"12288:WKLOlpdbVhOBbi61VlVP30w5qYO8DgLhC9bxl0zY6+wqzta5YpqXl5M0k+3uJH:WKS1/OBbi61/Vvx5qYONFC9VGM60S15M","tlshash":"b4f433f9941e38c2eb42b5617c2f12219dffb09b487f5fe24b40ba6a23dad4443d9458","first_seen":"2026-02-25T03:05:09.960469Z","last_seen":"2026-03-07T02:01:37.469286Z","times_seen":59,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":55,"dns":12,"connect":3,"send":0,"wait":109,"receive":150,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass1-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:04.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /solflare-bypass2-desktop.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 23:03:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 8319275\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"ffdbd9550fb16af66a8cf7717da03833\"\r\nLast-Modified: Fri, 23 Jan 2026 22:06:40 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3ad57bb9b0dfec-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"589dfc1cda320239b5ffa144fbc72c39","sha1":"bc905d626cc383b1c3e161d585df3a667164c927","sha256":"3ed7ae1939c55ffa191a3d546b810f7d83dae59763af66f696ea8c793aa64128","sha512":"c802caae51ba658070a7a46765e5a6bf8d6d4d7a3d264cfe5b7d13794f087536e4fb417240cb646133ab4d8a83d6823d19e88a2ed0e6ae4510d2aa1bdedf936c","ssdeep":"12288:bw+YEyoNI/qVAQPiktG7xzVnTRZQ7UarysToF0O4aNwT5+8YI7r8CUBJGszdI:bDYQNB1s7x5nT9wysI0jlfn8CUBJRzdI","tlshash":"2bf423b8e03c5657d6a62025391d27c0bde7e0299cfe7d3233c898218bdb5bd1d58a1e","first_seen":"2026-02-25T03:05:09.974212Z","last_seen":"2026-03-07T02:01:37.473104Z","times_seen":25,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":179,"dns":4,"connect":13,"send":0,"wait":96,"receive":56,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/117-7957cfc86edc1919.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/117-7957cfc86edc1919.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"1e5cc-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcfTITAdXb%2FGQsXfIuV0sQEUjNhreVfnAVc3CYqXQKllTW1QVtMdhhzA0Ig1pRpYR1Dcd9NHPw1L6wyDpawUYgfojZ3iLTsKNflwNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad564dffb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124364,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-08-05T03:19:16.163669Z","times_seen":2212,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/media/4c9affa5bc8f420e-s.p.woff2","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/media/4c9affa5bc8f420e-s.p.woff2 HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24576\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"6000-19c8b12aa6c\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezZf4iAR2ELB4i73EcNjZtBPDKwmYUQOEmkdP2Wb46QSa2UhQE618geaZGmNLRTckf6Jh2lauAFQVvYadxTeSgAB4ekfB27gjomG%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d3ad566584b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-08-06T08:21:25.853855Z","times_seen":10830,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/favicon.svg","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 22 Feb 2026 20:06:17 GMT\r\netag: W/\"101-19c86f5bc49\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5C3kbiamh82yd0647cUS0z%2F4Wsa3BNhRd%2FqbaCJVZ7r2B97SrGJN2v1Ae1DpAuL4MirkmWijJFS9QPmkfeyesC6tGB3OjRcxLXW%2Fw%3D%3D\"}]}\r\ncf-ray: 9d3ad567987d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059f787b603e0596f74489cc29133688","sha1":"7aa6b156c1ea0f7c7d7164a8bc1793d89d9f134d","sha256":"f25cb0609e5ca945254f6ec736059e6ec5e8eb5899914924602ffbf66898a42e","sha512":"64a2f80f12039a8031a9c25b8464812a20ae05c1bf165b054ddd2587bb084bc2b915946bd1625adac93a548b6cc27166000a4b01262c8057db2929411420e19e","ssdeep":"","tlshash":"5cd09529c0889705c70c4e02750d75e5708fd4cb5d45c914f6511539d4c7dd76ac635d","first_seen":"2026-02-25T22:00:14.513517Z","last_seen":"2026-02-25T23:03:30.550529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/raydium?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/raydium?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVq5nkNqS2rekZRqh3wisnbS8bBFopl0H50PEn9sO0DY1fuYx6%2B5TVpLeWoYTtZ1b60M%2Bj1GVT4QBwNR7CWaI6FJHel3saZPxMpHnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad56928e81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"94dc5a72ed736c4e0e77a875970e5358","sha1":"777ce68326f6a937ba1caa149265b2c24bf99c12","sha256":"eb276c43b52cddc358efb80e5008c9dca989aa0de3bdab5ed14bee57f8f94e9e","sha512":"d06d6d7a18da037ddb8a8bda85bf0f4ffe0a806c0ed2c26f0da3cd33bcfafbd63889c257f6a81e56717637c9901607a892925c91ab7504f9083836d96cce2360","ssdeep":"","tlshash":"49c08c5202a47eaabc2d328694bcd00abace02cb004e0cf081f05a2627713b3148b6ec","first_seen":"2026-02-25T22:00:14.54414Z","last_seen":"2026-02-25T23:03:30.604962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/api/v2/handshake","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:03.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 09:22:01 GMT","end":"Tue, 26 May 2026 09:22:00 GMT"},"fingerprint":{"sha1":"43:A7:0E:2A:17:34:DC:42:83:88:AE:D6:95:95:09:58:26:71:E6:C5","sha256":"ED:6F:3E:CA:2F:60:5F:3F:0D:72:55:8C:78:B7:4E:0A:E1:37:CD:EE:4D:72:9D:FC:CE:FE:66:8B:2E:C3:13:95"}}},"request":{"raw":"POST /api/v2/handshake HTTP/1.1\r\nHost: uygft-a78s.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/octet-stream\r\nContent-Length: 71\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Wed, 25 Feb 2026 23:03:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tR2bjoXCiqoBz6%2FsJtSTK3UW1kFcXk1EIgSMDdh424btRJA9GGXkdbNW695qC1NOL0669N1WIhFZ6txRhSksOsfbjiWPnpEZHMjG3z%2F1YH48cAOABxQ0QZHMxRd88LDKV%2FN1j0GR\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-session-id: ce25063f9da5b3d37dcc60225ad7136b\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::tzlv2-1772060583708-bb30837fe198\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"6f65277863b784cf73e45f3e699e7901","sha1":"aa24801038eea0a80b5dee796f7c3d364d1b272f","sha256":"bc2e6f95638eb48884dfa3d95be1dfcb84f50f6d4c908a4ce36cb6f26e4479df","sha512":"932c91d5b361445a2c9f2667ef0c5ddf8b0cd0284ddfb7d6e51ddafad92f5b5304cf116059aa62e9c2a21572a00f9f380acc6e993cc941fbaf48e809fc6dcd96","ssdeep":"","tlshash":"d5a011880230bab280aa80b02c003b88083aa20ae0333c08c882b230e8c22223823028","first_seen":"2026-02-25T23:03:30.605693Z","last_seen":"2026-02-25T23:03:30.605693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:04.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /phantom-bypass1-mobile.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 23:03:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 2031700\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"a22dc9face81ff1665651f1052a0a99f\"\r\nLast-Modified: Fri, 23 Jan 2026 22:55:26 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3ad57a99fe3181-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"eeebcd74061a9dcd7dfad338ebe1d46a","sha1":"23148fe8cd0cfe6b4379103d03dabde517e9bfd9","sha256":"631978ce1c77fdc8360949130dc08a761d8a5cbf0b87875b7b1556706cabc068","sha512":"e151fd7805ccbf649173ed454739604bbb31cbd0daa1dbf057454363c74532c9a5c2310e516f087f21ef09e5cd7de46e91d67e01815274b82573caae494eff45","ssdeep":"12288:/2TA4vVLmF/WbRkFOppRWsWNbGSQHJAUOUsLOsWZssG5bxVWhseThDII57tSKnXb:/2TAaRkFipRWRSlpAzUWOsWWvbLqhDVr","tlshash":"41f4233ac26c0681a9a500112e6526604c337cbc54feea3383eddf3adb5b92d6da5295","first_seen":"2026-02-25T03:05:09.955526Z","last_seen":"2026-03-07T02:01:37.494267Z","times_seen":63,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":56,"dns":20,"connect":3,"send":0,"wait":114,"receive":124,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass1-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/favicon.svg","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 22 Feb 2026 20:06:17 GMT\r\netag: W/\"101-19c86f5bc49\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1UG7D%2BTraILPzpuBKk4oPQYcabHVvcCXeXQtM3D4xImhxBHk4Wa%2B0FFvRJJ24qcISbS%2Bi7JEZYpsuswZAF4KH5pifj5OOkypVXScg%3D%3D\"}]}\r\ncf-ray: 9d3ad56618421525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"059f787b603e0596f74489cc29133688","sha1":"7aa6b156c1ea0f7c7d7164a8bc1793d89d9f134d","sha256":"f25cb0609e5ca945254f6ec736059e6ec5e8eb5899914924602ffbf66898a42e","sha512":"64a2f80f12039a8031a9c25b8464812a20ae05c1bf165b054ddd2587bb084bc2b915946bd1625adac93a548b6cc27166000a4b01262c8057db2929411420e19e","ssdeep":"","tlshash":"5cd09529c0889705c70c4e02750d75e5708fd4cb5d45c914f6511539d4c7dd76ac635d","first_seen":"2026-02-25T22:00:14.513517Z","last_seen":"2026-02-25T23:03:30.550529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/_next/static/chunks/app/not-found-28b12234c0c95546.js","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:00.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-28b12234c0c95546.js HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 23 Feb 2026 15:16:22 GMT\r\netag: W/\"d4-19c8b12aa6c\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5zmp3o9PHLu2gQNFolhYj6%2Fzs0ZU3McKPnFX5IOHLIIGAqYs1wslXOoaMxJkgzUe29%2BYSJP%2FXNk1EkuqoNki8Dzb8eAMbuZ21ckwbg%3D%3D\"}]}\r\ncf-ray: 9d3ad56678581525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"869c7238e07a6ce9bfbcdfebf7914c7c","sha1":"fdeab027390043f07f8bf23a1cb97e7fa3ff740f","sha256":"304b9ad1a12b4f2e82838e78a7281928866fe70c7717a0f73b8d6171fb724a1c","sha512":"65e12ebfc8e87f13adcf83ca8522839e2d7cdecdc3a807a73d1b52e5e93402b21dd897671c0961a26054d6b46991b68a07b34814cde893a9c24445b66a0dc707","ssdeep":"","tlshash":"1ad0a7893b807c1d791769f858a70c5525f6155a346544c165308c911c3223c4342c48","first_seen":"2026-02-25T22:00:14.512243Z","last_seen":"2026-02-25T23:03:30.607532Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yieldscan.si/solana/pump?_rsc=eutqf","fqdn":"yieldscan.si","domain":"yieldscan.si","tld":"si"},"ip":{"addr":"172.67.185.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://yieldscan.si/","date":"2026-02-25T23:03:01.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yieldscan.si","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 08:07:24 GMT","end":"Sun, 24 May 2026 08:07:23 GMT"},"fingerprint":{"sha1":"D8:D4:A8:C7:19:EF:11:62:4E:8E:36:47:67:AC:B8:81:EA:78:B8:5C","sha256":"FD:D4:A9:F2:93:3B:64:46:8F:3F:2C:67:EB:C1:7F:30:3B:AE:49:04:0A:68:0B:EF:D8:1F:8B:9B:81:B8:8F:48"}}},"request":{"raw":"GET /solana/pump?_rsc=eutqf HTTP/1.1\r\nHost: yieldscan.si\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://yieldscan.si/solana\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22solana%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /solana\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 25 Feb 2026 23:03:01 GMT\r\ncontent-type: text/x-component\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4yJWkqreXFgWg7UhXTXb2042t%2FvanrjIxuB3mKL60kYGK2uYLI2CAg9sgSOnlaNR%2BVh8vgt2drVQ9m15czYweZb7y8Q5LyDAZ2zP%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d3ad56928e71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"0c9a96428bc44e9151a854c75cbf368c","sha1":"9cb13c19c2f701036b022d45adcf8e5a066c4611","sha256":"d4bf03a7a76ee976c7000f9e4044f08427f33e3d3b92fd184de38efe538dcab7","sha512":"d8ff03b7a641b079ff31b3a283996c4d301a92169e51926493afc92838da39967b1a933e5d61aa6aa93ecdadd03e1b1ea89d9aa7c54fdbdd230b5cc7f407f9d0","ssdeep":"","tlshash":"b3c08c1302647ea3fc2932c4043ce00e3acf82eb004c087080fc591613b1333940f5e8","first_seen":"2026-02-25T22:00:14.509343Z","last_seen":"2026-02-25T23:03:30.608809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uygft-a78s.vercel.app/api/v2/binary","fqdn":"uygft-a78s.vercel.app","domain":"uygft-a78s.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:04.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Feb 2026 09:22:01 GMT","end":"Tue, 26 May 2026 09:22:00 GMT"},"fingerprint":{"sha1":"43:A7:0E:2A:17:34:DC:42:83:88:AE:D6:95:95:09:58:26:71:E6:C5","sha256":"ED:6F:3E:CA:2F:60:5F:3F:0D:72:55:8C:78:B7:4E:0A:E1:37:CD:EE:4D:72:9D:FC:CE:FE:66:8B:2E:C3:13:95"}}},"request":{"raw":"POST /api/v2/binary HTTP/1.1\r\nHost: uygft-a78s.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/octet-stream\r\nX-Session-Id: ce25063f9da5b3d37dcc60225ad7136b\r\nX-Config-Id: 699b6bdb44e2554e27be7387\r\nContent-Length: 99\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Wed, 25 Feb 2026 23:03:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhECCFbLwyIBkdjMBhW4%2B44QHFeBTOyK9430ds1xLApK5S2RcTy0IamhHdatYfGT2Swz%2Bfa3eCYivqlCIAOqQGUkoJ94raews9q4QXd48jE%2BAXNVTFpBq5Jh7ukYko%2BoKsSoeBAj\"}]}\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::tzlv2-1772060584014-127070649dce\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":99,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"4add83dc0c7df3f5c368e6b5136ed9b9","sha1":"1881fa98058aadcba8e1084f2eb3b38466014625","sha256":"90854aacad18e1a9c11cafbe83c9ed0a342caf112428e641551822d3c1544f8a","sha512":"37b294a0a0397c67464187f15564752c2ec761a61bbf359b6a438561a2efcba7d255c946b7770d002ab51a18e51d55e3a5a4b4cfc4c31ba260b3a3b62da9d4a9","ssdeep":"","tlshash":"edb012814ae8098dc05c643073155d803442413d97ec2203112015117c15a655b48911","first_seen":"2026-02-25T23:03:30.61019Z","last_seen":"2026-02-25T23:03:30.61019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:04.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /phantom-bypass2-desktop.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 23:03:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 3967947\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"5a6a3867cbfe36845cfc495e5ca7f0ea\"\r\nLast-Modified: Fri, 23 Jan 2026 15:05:42 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3ad57a99e875ab-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786432,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"77c8cf44927733853063e12a9c919838","sha1":"e753f4fab619a4ad9c7e362f7dbca7d28c6af569","sha256":"0a412e42c896359759d6f578d9439fdfa66c8387c55de84440861ea71f463e59","sha512":"23e51c246c2f5f89fb1e53fad2bbba306a23f2a5d708b1b58dd8b8a60a382c9e38d475a7b57e90d617d2f87524659ca3c63da65c0248367925c1f5ab8bb570c6","ssdeep":"12288:VEznytgluvfiMoSnqYsA4Xp8fvndMMr95Hl42YSbZQxiVUSmj3+SSB9WV:avufiMHLszpYKMLHl4XSjC3h+s","tlshash":"8ff423e9846d4c8222510261295a753c2053b03eddf7bc39b1acdf9dc69ee3e8ce91e5","first_seen":"2026-02-25T03:05:09.958112Z","last_seen":"2026-03-07T02:01:37.50279Z","times_seen":62,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":54,"dns":19,"connect":3,"send":0,"wait":145,"receive":156,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/phantom-bypass2-desktop.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif","fqdn":"pub-14c1504681d2427684ac1f489338d075.r2.dev","domain":"pub-14c1504681d2427684ac1f489338d075.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://uygft-a78s.vercel.app/demo.php?id=699b6bdb44e2554e27be7387\u0026parent_url=yieldscan.si%2Fsolana","date":"2026-02-25T23:03:04.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 08:27:13 GMT","end":"Tue, 14 Apr 2026 08:27:12 GMT"},"fingerprint":{"sha1":"8E:B1:C6:1C:4F:29:20:20:9B:A5:D6:9D:E1:36:5C:9E:97:FB:1D:39","sha256":"37:AE:3E:49:CD:79:B6:64:E2:E2:D7:10:C5:42:B8:60:97:C4:95:B7:D1:0F:FE:B7:2D:84:F2:DC:70:4E:53:C2"}}},"request":{"raw":"GET /solflare-bypass2-mobile.gif HTTP/1.1\r\nHost: pub-14c1504681d2427684ac1f489338d075.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://uygft-a78s.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 25 Feb 2026 23:03:04 GMT\r\nContent-Type: image/gif\r\nContent-Length: 8319275\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"ffdbd9550fb16af66a8cf7717da03833\"\r\nLast-Modified: Fri, 23 Jan 2026 22:07:07 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9d3ad57c3cb0b28a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139125,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 480 x 807","md5":"5d7c22f8d057f541e52e9c47d6c6b1f6","sha1":"eb0394442d4734f747e11100a3f1f7dbc048c757","sha256":"0e7c492a4ffa425ec4ef8f5297e46b25e1f652ec09f1e8fce6c001b3e980b555","sha512":"90aa81382bb60b81775e4edf486a7912946f47bbacfe22f6eb014ee4bf36b966ad3771422a93e16bc2db233c9043d0b8b48b13d8c00a71b63a1829a719480df2","ssdeep":"3072:bf5Iz++emEBeefEU69n8DMeI7bRooWIWGSICgjYnsAaf2Ol/3:bfw++FELEn9n81uoNI/ssN2Olf","tlshash":"78d312d6f47e9b18eea41574275e56c92de3017aacbc3c3217809d2c5f8387a2f8c859","first_seen":"2026-02-25T23:03:30.611452Z","last_seen":"2026-02-25T23:03:30.611452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":286,"dns":0,"connect":1,"send":0,"wait":127,"receive":6,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-25","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"pub-14c1504681d2427684ac1f489338d075.r2.dev/solflare-bypass2-mobile.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}}],"urlquery":null}}]}