{"report_id":"b8af83c6-31e3-4ccc-a178-64acfde35d5b","version":6,"status":"done","tags":[],"date":"2025-09-08T14:29:00Z","url":{"schema":"https","addr":"dydxvault.com","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"172.67.73.78","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"title":"Vault"},"submit":{"url":{"schema":"https","addr":"dydxvault.com","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"172.67.73.78","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-13T14:29:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.iconify.design","ip":{"addr":"104.26.12.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2025-09-02T06:32:44.588002Z","alert_count":0,"request_count":2,"received_data":6299,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-09-03T15:53:48.840838Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dydxvault.com","ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":27,"request_count":27,"received_data":4572672,"sent_data":11190,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"api.dydxvault.com","ip":{"addr":"172.67.73.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":41,"request_count":41,"received_data":183825,"sent_data":21761,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"image.anovia.org","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-05","domain_rank":0,"first_seen":"2025-09-08T14:29:03.09907Z","last_seen":"2025-09-08T14:29:03.09907Z","alert_count":0,"request_count":40,"received_data":876952,"sent_data":17848,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"trading-order-roseccc.s3.amazonaws.com","ip":{"addr":"3.5.30.36","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-06-03T12:45:54.189968Z","last_seen":"2025-06-03T12:45:54.189968Z","alert_count":0,"request_count":1,"received_data":4650,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dydxvault.com/assets/currencyItem-cad3c5bd.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d57083ab5ea7f246dce427fc09ee051d","sha1":"ab70cee5fd5caa7e731f140c81f8c46ee497aeab","sha256":"a190bdef401a9f6eed914d8e2b0b2e830612a23f3b02cb1080ac45ce2364a48e","sha512":"a15a20bab6199fe6ca724b13b53a67ac307e8d0d90f73d40726b8b718cc04191fd3bdc5484d882299664f94264b9d05b1bf16d39aeb344c5be9376cc67e00460","ssdeep":"6144:lEpG/7jgUhkGpeOB21A4YQbisXeeah20QAw00v9BQMh3Z/PJq:lYAjgUhkGpeOB21pYQb5eeah20QAw00y","tlshash":"ed24e6953342b12282e256d6583a0506e3357a483547899cf6bc4ddf3c6a98bb1fff38","size":210940,"data":"","first_seen":"2025-09-08T14:29:09.876681Z","last_seen":"2025-09-08T14:29:09.876681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-07-28T19:32:04.771856Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9c5d85c82d132954746fe3a15f1ac3f4","sha1":"2d4c487d112bf5af108d30cac1c7d1d0f569fc36","sha256":"52cc3e291ddfc92c2d5de02652365b8e1733ddb2723aba9c17f9c8f0c9334573","sha512":"d28abdfeaca61ccaa8cc0beba79a6a756d3e0f28502e64caca98e33f6e8f406cc7b25a19e43b1c09024641b28a076a2bc6924d653dce27d727dca1689506aa33","ssdeep":"","tlshash":"3dc08cc8f0c36e246642646611af39e4d0248026744c1b038ea4e8493ea30f08233eac","size":151,"data":"","first_seen":"2025-03-08T01:47:03.579511Z","last_seen":"2026-07-25T09:20:52.834791Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-30T19:44:59.576739Z","times_seen":2152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/charting_library/charting_library.min.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-02T16:01:39.462111Z","times_seen":1325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"694fa5cb0c711136b8ac1d07e766d5d0","sha1":"969b7cd96c6a3ddc452425c9759ea0350c098396","sha256":"d28fdac4a8851979106fc8362730e00c7cc003fd4c98a512568aa7de468f84ff","sha512":"d3f76923dfba730c96e77133114d1b0c9800012853b23ef091d1a1c1fb12dbcf08529454063dfbe1954389446d76b4a7fe8845791354fca0f64de30f414733f9","ssdeep":"","tlshash":"2f41221e21b3a455a3232069870b7142f40290075c2efc407bcc8bedef20e9ad8d2a9d","size":2023,"data":"","first_seen":"2025-09-08T14:29:09.919113Z","last_seen":"2025-09-08T14:29:09.919113Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/vendor-f04b2417.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f5da32f27167f74e877cb298e82f2ddf","sha1":"3ff26b7bf086b0853f3110e4fa4dc1199ae9933d","sha256":"80cfced8eca19dbb9442f79322c2e16c1e7f694fa9079c85f1acbc3365b56214","sha512":"417e9c99b0ddc2d5366d86e9852a6cef99a0acb4a87e055346758e3cebed61308b88f8a7f629b46ba5d12927411733a0fbf9982859ab7cc9fd9a8714da9275bc","ssdeep":"12288:F4GDlC1cW0F8C1YLY5ClKQKMe+hYUmCrfFhp0Wy7WfRPoxRMhgpDr:F4GDlCEv+muKQJ3mCL/p0Wy7Wf6Mix","tlshash":"663529c57692f06147ab54e240bb0002f3396e59740ec4a4f1ad98eb7d79d89a2b7f3c","size":1105634,"data":"","first_seen":"2025-09-08T14:29:09.920853Z","last_seen":"2025-09-08T14:29:09.920853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1797b90369a99ff22f1c40b0d94ec9a1","sha1":"aec8ba7bbf7bb80c7a4669d074c61aefb319ecfc","sha256":"e7129c3c36ef7b4a55f09622f14d1a60dd64551f16fd0f7a070edf2c75a13680","sha512":"a578a2dae3c0843433b3aca46d828da3db506e6c048302d6e857b77767968b4cac8e71e6d56dbd81aca28909b96a5f23447544a7a24ac9e3486478aa64b977bd","ssdeep":"","tlshash":"70c08cc4a0c72e001646641018af26e49034402ab0482f568df4d8492e620b08233ed8","size":146,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-28T18:19:13.997531Z","times_seen":363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cdbe448eb8484f686676c437ca06d82c","sha1":"3d40b4e39bc968ea6a41b3c5c84e644d098f0651","sha256":"06b15f5c7882509082158a5dc043a4ba503d69bc53ecaaaaaba4e23bce600581","sha512":"bd484d5e171a917b17e9c9d62bdc33b317ad0e08774c6ed822f6ef10f4b9a954a0bbf279deffe540389f30bbb71a632c3fec6c0495b5a7df9ba5d74f459a2a22","ssdeep":"","tlshash":"7fc08cc4a0d62d201692681418bf38e4a0288026b44c6b06ade8d88c2ee64fc8233e9c","size":157,"data":"","first_seen":"2025-09-08T14:29:09.923665Z","last_seen":"2026-06-13T00:12:42.255069Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6761399667e159382795670307c56d4a","sha1":"0a7d1e2ee37ca2a7ad94d37a8cf3195e0454ee6a","sha256":"3eb331e48962f88c94b472a1734ca51229e4233d4759f0574e6224791cc1a8a1","sha512":"85151f1ac3d7cfc6a12be0a617c2f6cea16ef6a5c692ad096577c4f82702ca3ae18b9561bafcf019076702ae2ed9157707a756555edbcce8f91945705ea00b91","ssdeep":"","tlshash":"1ac08cc5a0e22e001a02b41018bf28e89028402678485b138cd4d8682e220b48233e98","size":144,"data":"","first_seen":"2024-11-12T08:48:04.754569Z","last_seen":"2026-08-01T04:37:24.937971Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"38a965b9ad255090097f93e0275888a2","sha1":"4e8a9cf1017c96e96c1a9de3acd3b44c0b939db0","sha256":"dc754692dd6d24095aad7c130f458c0c9cfb853829d196d92adab5e635682da3","sha512":"69b283f29361b80ad2fd6886baeadbc621d6ad0a665688971ff319923431582bd4094ad7c944b7dd42d7122bdf33c7d320a6208171cab44a6db0fccc48c47e9e","ssdeep":"","tlshash":"1ac02bc5b0c33d001602642020bf35e4a0384027708c1b13ccd4ec883e230f08233edc","size":137,"data":"","first_seen":"2025-09-08T14:29:09.926016Z","last_seen":"2026-04-03T04:37:59.087409Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88f0d05c02e6e32beb98f014b1c00990","sha1":"4bcd8349646f162a14eed76d94728c924c1facc3","sha256":"74fe6e0c602410fe37d94ad3af626f448c1ce834ae31e6ac3d917841dac5020b","sha512":"776306254a18fd148b64cf895d2a24997ebb9873e85cb03dae595c19e7ad1fcf57e46351903807e3c366cbf213b1cd84c7e44f63ae89945d6c7c284b12579483","ssdeep":"","tlshash":"ab31e23f35e7513148b721b86b03f124363528137015ef15fa4d5b284fd4e6b4092bc6","size":1466,"data":"","first_seen":"2025-09-08T14:29:09.927665Z","last_seen":"2026-04-03T04:37:59.066791Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-04T22:07:16.98112Z","times_seen":4427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-07-30T19:44:59.570838Z","times_seen":658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"54ad4f75ad8f4df06144cdaca98e6ef7","sha1":"ca53ef393057f70513310ac714ed536ede6b488d","sha256":"f7dcc960b83bb7a60b524ff50795dbe2df058c253f08be3a95a5edfb57221ad5","sha512":"0a122b6de722416fdcba8327e46979bc781452dcb36ea42cedbb185ef17d8ac84145cb0fa8f248d463cabdc6ae98fa697d1fa99e1930813bb4a6dac1de803239","ssdeep":"","tlshash":"e3c08cc9b0c36e102617a85050af38e490244027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-08-29T17:49:52.026594Z","last_seen":"2026-07-28T19:41:49.884491Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:32:04.785689Z","times_seen":667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/en-cf2a4a5b.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f3be15f94edcc01fc0d7d721d7595e2","sha1":"ec69eda0392aa45a7850191922f977e791484051","sha256":"627b7dbbabdb9b11caa6bf838a46b980663cbb19cf528058cc95dafcfcc795a8","sha512":"d03ab36c2e95ac43d6ee093225f8fb152f97761b1ce333664cde9b61c4914d09be01a311b12ffb0887ccd3c6c38e84b4b3a3eaec4d1449d4b1139c45eea71073","ssdeep":"768:LHWrMKbrWm6fpaOh47OQdqOQECVPx6R+n35SfkNOpZcEw/oPrPrfWMT5voJzMAMV:LH6zbIulCR3cfwpoTPLVeJzeVz3MVi","tlshash":"b523198d7e16889e09f35366b4ce6e2124f50ac1c255881f4fecc5fd53d2b6663a3b28","size":49184,"data":"","first_seen":"2025-09-08T14:29:09.799135Z","last_seen":"2025-09-08T14:29:09.799135Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-05T01:14:14.512152Z","times_seen":337635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-be9f7d28.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e3a7306224398bea43dbde790c8bcad","sha1":"f55013a97357023a283661e320f3fc75de4aefb7","sha256":"d7ce7ebc662cec0c1693c16a3a42f31833c8e6b5b6fd38a770eddc67d1a48dc8","sha512":"aa61f11fb0828d0ae426bcbd083b61a89225b632703309a44bc43f1447bd78356e50b6ac39f1945132cc8fd336f5849d4d81372b4f5db18285c4da837f3c05ba","ssdeep":"1536:xR8IHGdTuFf+vP+q6EGxghqStsSxdBAkwrb6wJX0rePpiWpqVG8qhHk5pRL:QItf+vP+MIkwrb6wJDBiWpRMHL","tlshash":"2ad38d4ab9055dff3ebe0c48a9461500205a1f93a84cc8a3b7ae9e5537fdce1734b726","size":138807,"data":"","first_seen":"2025-09-08T14:29:09.896659Z","last_seen":"2025-09-08T14:29:09.896659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"16bb4e6ce7efb6bec852f3cd4e5285d7","sha1":"d5110f5d65f4d5e28382c970ae740b7600541920","sha256":"abb04d6b3894749284bb93e2c42b0356b6ebd695a27f38bb13fec1ddcb8877a9","sha512":"475be00661ce025baee50da15b7700f2ba447b6889589756f56bc01365da28db531f7e1a3e6d559f36f5ead714c06f4041d219b44197bcb6f76a7adf2e87faec","ssdeep":"","tlshash":"d0c080c8b0d32d101512541414ff38d49034441b70481b038c94dc492d121f44233d98","size":150,"data":"","first_seen":"2025-09-08T14:29:09.934071Z","last_seen":"2026-04-03T04:37:59.064418Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-05T02:24:06.6636Z","times_seen":7162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"52bc8202fe86118bf1b9becc9a3ca748","sha1":"f1b62e8f131b4dde3550d8bbcc303bed116d4199","sha256":"d426b86fc6e8571db32e916674fa55986559f5f5f109fb6046f4564fe9b6d1b4","sha512":"2d9af4edad4eb31e87fda84fc46878717abfe8a201a4123aa522f7d052385399607ed44b8b49e16ace21e4dd84bc7f87a3deb86cfac62bfa799c94782df76fe1","ssdeep":"","tlshash":"33f0edaf01c1b004a5a7605e4f6e3840952722bd1080a9023bce07826fa96af80893e3","size":471,"data":"","first_seen":"2025-09-08T14:29:09.951068Z","last_seen":"2026-04-03T04:37:59.077952Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-cf74fd56.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc0ca25582ba315ff6b7d96ea1194f02","sha1":"59254e832d6191917c77956bdbb240f29d86e9ac","sha256":"626505ad143a457c3f5b873b9b7ad2d05fa445ecd8bad5c2dbf429822597f2c2","sha512":"7c208ff5d92f7b1496d138b25214a8cfd323b64dd7d15efe52626939b47a2d114d519c4a54684bb2b477d909c3d740d03b839ed8500bc31a5ef2213e0971bb77","ssdeep":"768:BP601PWztyFaSYADxnL2UK06DNff2G7e0g69tvUs4nU30ZybjuC65/zCyd3n+:BLk6pLFKPddHQEgsjuC65/zfV+","tlshash":"c0c2e985fa015139c3f6949390990040762e2feb6909c8e174fdaed63bd3eb4679473e","size":26643,"data":"","first_seen":"2025-09-08T14:29:09.82843Z","last_seen":"2025-09-08T14:29:09.82843Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-28T19:32:04.784298Z","times_seen":1389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-30T19:44:59.582021Z","times_seen":1652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-07-28T19:41:49.889778Z","times_seen":1138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e29cc4b739166fb0de3dd3960891cf94","sha1":"32bf92595a210346b3fa579ce87df4987f109d95","sha256":"d3b8857aaf83eedf7762ae5079cebc09d4924e13766d06fd68dbb746634f95e3","sha512":"854eba232753dfc9183d3029c72a8ec545156e6a966cbf69fbad7acd252632ee09b17f9666f3edfb4541f58d3d3bbfc9841f999c37cac48586997700b245e0af","ssdeep":"","tlshash":"7bc08cc4a0c26d102602651021bf38e490248027b0481b038c94d8482e630b08237ea8","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-08-04T23:54:28.498217Z","times_seen":3414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-03T14:06:42.938886Z","times_seen":1719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-30T19:44:59.572483Z","times_seen":477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-05T02:17:15.278083Z","times_seen":41065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-30T21:34:04.97172Z","times_seen":1805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-f1e37a03.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9c5c051eca728f72968aeef1b500acda","sha1":"fe9c0fa04da3e94b603344b606fcd56bec27184d","sha256":"efd45e3e1a9abd232ca3112551b06494263669311dcc73dedb5ba124f3b84e88","sha512":"be342ad63c8c646b07cb49f295a9f1a7e9fc8b14d333e07c7792da04b2a022366ffcea758a19da295ecd3fcf9e04124221d0bbda9352b0ac127d6a774d0497d5","ssdeep":"96:HONzU6BR9xvYfGgqCw8NuE0ctqje0esqWKLzn3hHZP3fUB27Jx678j6:HONzU6BR9pYfZqCw8PtUwbX3hHFfUHAu","tlshash":"04c1c5cca8068af9e9bb69145d590510205c3be9f51c98e2f5fd2c2b33b9d78ab08334","size":5701,"data":"","first_seen":"2025-09-08T14:29:09.779747Z","last_seen":"2025-09-08T14:29:09.779747Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/filters-4c2daf36.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0f2ebff36cf3224ee199d696cbccdecf","sha1":"1459dfd82d54434bb58d48cc326bb93ba2cf41f9","sha256":"c88092655c14a443ca73dfe3d4de862c2da7f1277547ae0389953c1d22f53f06","sha512":"0dfdd11f2ab0ee5ac411bfad5bd7888a3cd3fc617ddb0f7c580bfde35cd54fdab284b8cddcef1fc5aeddcc745c3fab51c548e0dd3f16d109482bfabf67cfae0a","ssdeep":"","tlshash":"e35141edf486a13726fecacd401d4515f0cb7f19681b0e5afc5ad0562467848d4bf364","size":2760,"data":"","first_seen":"2025-09-08T14:29:09.830164Z","last_seen":"2025-09-08T14:29:09.830164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-4bd56d4a.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8826a927fdd4fc2758dc782d49c1cbf8","sha1":"ea38fe84254e17a6990aba112a1cb8355b479cc6","sha256":"ad5a3fb380d57c514d4bf33388a61fe24576b19cfea5d8214507354b6303fe5d","sha512":"c56f1071fa746235f11a399969a49855313ee073c616775ee36f3461c8dd53f3db5bdb973d5f05648db75d00ee12a87c189a827c16a381ad918f0b266d4df92c","ssdeep":"","tlshash":"0801d0aafab8feb30fa64a4935c331520040877dd45020f1888b36301b6ed94d1cd71d","size":770,"data":"","first_seen":"2025-09-08T14:29:09.782757Z","last_seen":"2025-09-08T14:29:09.782757Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-30T21:34:04.992233Z","times_seen":1695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-05T02:17:15.283967Z","times_seen":42567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94cb806f13187b76d16e8079124171c5","sha1":"be4a8d1cf84b787988d13ce1525597114ffda19f","sha256":"8d842a1f950c7dae6582c415825541111a6556359dc37380452abbb9c426b1d1","sha512":"280cc32cda89db02b4cb60e620a1c175194998afeb2c4bea92194c0c4f335d00a8e35d4c1ca28c2f4201c4654493fc96a581e54175ed4ee4153af805d69c10df","ssdeep":"","tlshash":"62c08cc8a0c32d101603a92020af29e490384027b14c1b038de4d8492ea30b48233ee8","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-07-28T19:28:06.612464Z","times_seen":943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-08-04T00:31:01.988178Z","times_seen":1769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"079b3766fcc15da6346cd7a66e10eb3a","sha1":"c246443903c11c1a8b00ed1fdff7e1a3da27013a","sha256":"38b34f22c57556f8257e985e0938f8593734f8b0c25d9a80e653ed031b0d62c7","sha512":"eb1075b1719cec5fb8c16c5f7e014be3d8d66206841b92ab6e5a5932443660662e25eb3b16d32553befc87a57b0cf1095faea0cba29d214a9cf0ebf891347108","ssdeep":"","tlshash":"90c08cc4a0c26e001602645010af29e4a024442678481b02cc94d8482e220b08233e9c","size":137,"data":"","first_seen":"2025-09-08T14:29:09.970495Z","last_seen":"2026-04-03T04:37:59.091081Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cb64f94097307a2fbaa5805f2b1fe8f0","sha1":"7c03403d2fbab163596889da4be720d87e19e64f","sha256":"877614d99573c405a6cfad337e01fe0e68f18e8455bc75eff280f9b6644d3167","sha512":"503ef4542e64da3c0fb5017b16f072f859e3a5c32069d3d44c8a595a129af2ff9378b1c6134d814832ce4307f8d60565bd7a2ca2aa7b391b09b13c115c77a79d","ssdeep":"","tlshash":"b9c080c5b0c37d216601655555af28e49134551675481717cc9cdc453f274f0a237f98","size":169,"data":"","first_seen":"2025-08-13T22:50:23.288315Z","last_seen":"2026-07-24T20:44:12.112187Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/#/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f049705ded586ec888809453ddb97eed","sha1":"c04197dd58fab49f9d3974f390695d56e388a792","sha256":"3b2046fc0d9b54e8f978fcbe69edf1eb43f35320283ed2e39b12c20deafe4f45","sha512":"9f33bd944891eeddb142780f0236713298022b151db1db846f52e53f4399bfdf96834a0a86908aa80ba71c1a60b8e717df28c7c85ab59dc7b3734f4757e02849","ssdeep":"","tlshash":"f4c08cd4b0ca6d00a603691011af35e49024806770482b029ca4dc882f234b09237e98","size":147,"data":"","first_seen":"2024-12-02T08:41:53.640766Z","last_seen":"2026-07-28T19:41:49.866159Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dydxvault.com/assets/index-dde261b9.css","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-dde261b9.css HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-1dd7\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U21h8l88RVh%2Fpr6Gw89OcNdx0Ig6bszGUh8umERKj1gCbZZjCOr7MtqC%2FSmfl2hmOeppzRDNKtiJfkmDgePA9SFT8DQUsqX3mDI%3D\"}]}\r\ncf-ray: 97bf2234ea60b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7639,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7638)","md5":"95968521a833fb1f119791e19741df1a","sha1":"377f956722a5939f279fc773b3a57458426236da","sha256":"dde261b96f0e107956451aeafe8b051ab8d523d8602858ddfffcf0fbc5fe90e6","sha512":"4b7a2f4bab34e5d06dac1d62a80de7e31e82e964c7726a892e9323ab8d95d39018023bfeca2e86a433300a95d6e44242e618d5968e8519976ba4818dbcdfd56b","ssdeep":"96:vyfLOO/G5c1MBgP+y6aMFY1IMQWvm8ftbtBAFCRzMhxMnrRfW:vyf6Ol1MBgoMQW1ftbt6CR4/MnrM","tlshash":"68f1ce09ebfc41381d33e5da9fc482ec617cae659410eef7b257015909c73fa3626296","first_seen":"2025-09-08T14:29:09.778335Z","last_seen":"2026-04-03T04:37:59.032124Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-f1e37a03.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-f1e37a03.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-1645\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvoVmTVkk2Ga5WKukbAEd20sevm6PicVEgyQkLzpdHcN5rpUnsMOqpA8S8vyWVhdtPnoz8ytLPTg2YUU057GQUjwF3c2Uep91jY%3D\"}]}\r\ncf-ray: 97bf2234ea63b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5701,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5694)","md5":"9c5c051eca728f72968aeef1b500acda","sha1":"fe9c0fa04da3e94b603344b606fcd56bec27184d","sha256":"efd45e3e1a9abd232ca3112551b06494263669311dcc73dedb5ba124f3b84e88","sha512":"be342ad63c8c646b07cb49f295a9f1a7e9fc8b14d333e07c7792da04b2a022366ffcea758a19da295ecd3fcf9e04124221d0bbda9352b0ac127d6a774d0497d5","ssdeep":"96:HONzU6BR9xvYfGgqCw8NuE0ctqje0esqWKLzn3hHZP3fUB27Jx678j6:HONzU6BR9pYfZqCw8PtUwbX3hHFfUHAu","tlshash":"04c1c5cca8068af9e9bb69145d590510205c3be9f51c98e2f5fd2c2b33b9d78ab08334","first_seen":"2025-09-08T14:29:09.779747Z","last_seen":"2025-09-08T14:29:09.779747Z","times_seen":1,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/common/getAllSetting","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"172.67.73.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrtX2%2BQFBzphsDbYCChfZbE2GtZ6TS3%2BCZu6eLTYXZ%2FhtXDIddtznCGlJQYuQUQmsom3Gfmjg4eGXTWuyqBEuIt7NGa%2BlyUXvkg%2F6OY7\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97bf22361aa77127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20521,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c7958e5ece5545ee2bb866520e8cca34","sha1":"d179ab8cbbe4ffca51c02d87916a9f3277616665","sha256":"a907a118652d45f9233aac48e50c648707c50c69a0d5b23dcf4e337a9ceeb712","sha512":"f1e7cf0894d4f7d7d2e978b4f453827868ade9222a7f7acbcecf8deec24c4971780e3ef39cdc7497d6a7fb65ad7d76d345d52e51462bd992a9716734828c1f6f","ssdeep":"192:NIRYJTnPtpOYYQOSpQ+o6+Rbo2c2hkxHEEogALxA0uJma/5Cnn/zjoMHeW4+CKHU:92BaM/NMU0XMIKiGVrAY6x","tlshash":"b99222a736bcccfec24f2ac214eb3908e99c356bd4e5e951d19abfa9cdd1570480b109","first_seen":"2025-09-08T14:29:09.781286Z","last_seen":"2025-09-08T14:29:09.781286Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-4bd56d4a.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-4bd56d4a.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1M0pFLBouBDyMQyRBfdlXDaUdK8Ez8Jd79a3XomLbvO339XG3Dx0CimWS%2FWHsXCAS6wRbKw8YHC8NsrnIdeN%2FVSqHEzzmD%2B%2BMfk%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\netag: W/\"68bdba2b-302\"\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf2234ea64b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":770,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (769)","md5":"8826a927fdd4fc2758dc782d49c1cbf8","sha1":"ea38fe84254e17a6990aba112a1cb8355b479cc6","sha256":"ad5a3fb380d57c514d4bf33388a61fe24576b19cfea5d8214507354b6303fe5d","sha512":"c56f1071fa746235f11a399969a49855313ee073c616775ee36f3461c8dd53f3db5bdb973d5f05648db75d00ee12a87c189a827c16a381ad918f0b266d4df92c","ssdeep":"","tlshash":"0801d0aafab8feb30fa64a4935c331520040877dd45020f1888b36301b6ed94d1cd71d","first_seen":"2025-09-08T14:29:09.782757Z","last_seen":"2025-09-08T14:29:09.782757Z","times_seen":1,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/f2c4eb50-aea1-4675-9194-8c4c9827df7aexpand-horizontal-line%20(1).png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/f2c4eb50-aea1-4675-9194-8c4c9827df7aexpand-horizontal-line%20(1).png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2536\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bl0X7odRJH6be2aXpOZOilsA6AOKRyjCzlPfLcapO9IWr2gkV3MG6ofb4EPsBoxPeEfp9OyaiN0Jie4Hf0%2FcVOKqfGHAJvy%2FDH8FVJSH\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"76d8c0eeb993f1624ab24952b4ab5c22\"\r\nlast-modified: Thu, 26 Jun 2025 15:41:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22398ed15691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"76d8c0eeb993f1624ab24952b4ab5c22","sha1":"bca52d01ed001d5b71fae20ea1436e2e3b5ee1bc","sha256":"cdafc98d9b4af756679098e6a947ba00fb0210e076d67b4adf52500db50cbc8c","sha512":"8910a8753ed7ea47ccef44a621e31ea43a7994eaa0df4d6c699624f92b2fd5e85fdf78c1fdcd4bd7dd0db6ef0a90d4369be1983dde3d6ab9381c1462ff62e7aa","ssdeep":"","tlshash":"565100ad00f4fbb2c50ec167a45b3ad39718b0a7e6770298051e970aaf0d554f9f007b","first_seen":"2025-09-08T14:29:09.784106Z","last_seen":"2025-09-08T14:29:09.784106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":135,"dns":0,"connect":0,"send":0,"wait":193,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTX0Zf3FKfOJnDizP%2BLi2PMaRBevAvZrPvFheWFfirRe6EZv9BUvY3iyvqVyzlctvUiC4%2FwYh5dLAWI7wjuNF0O02%2Bj5ZkZxWgUZOzta\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf2239ba92b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1b9a855123642275de337222b9462a9c","sha1":"794ad693eff3361a9c3bdccdd9911f04dbc96571","sha256":"5271e09c2aaba2805fc2f178cddc490385076f5e0eba9f6f30b80fa4395bb747","sha512":"d828b8070062280681bd994823de7c2e0fdda2b079d5da88a0fe8a9466da3555503873f52292e7d830ad47b762067f3faa146c14eb6d79544c70c1d653013056","ssdeep":"","tlshash":"459002551c189642a88300a9d506524400243160263492584c59512581881622440858","first_seen":"2023-05-12T20:49:51Z","last_seen":"2026-07-28T19:41:49.785191Z","times_seen":325,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/doge.png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /doge.png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1597\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ZEB1TAJFVrsIM7Y%2Fq0pLrUUsXDvF1hlc9Egn5sQhKDAl1qBV2ESQbiD12POU1vNvTQ%2FfNISak6luB4jFj99rZJdw2JTF2u3A40p4CJ7\"}]}\r\naccept-ranges: bytes\r\netag: \"1938a5ea7cbe7458795a834563258ced\"\r\nlast-modified: Tue, 24 Jun 2025 11:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a895691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"1938a5ea7cbe7458795a834563258ced","sha1":"d969fd854e1a997b7817ba60800cc1c7a6a1423b","sha256":"4a789f36f6ca12a6d1901ab8441a9cab7a4a9a5fd4ba87c887c4d45c729fffce","sha512":"e940ff74f8cb4f53b7463bbcd2b118e9d7c818eb8d2ab0a2ecfdce172e98cb91c44a4d5acd49402b12803c2b273d5ce3f96e1295ae612368bfb78e7f619546e3","ssdeep":"","tlshash":"bc319846a655c394f3cd0711c30b4a56215e579c786170c056b9a863cf393a8d5fef71","first_seen":"2024-11-30T11:37:49.082714Z","last_seen":"2026-08-03T12:45:30.920027Z","times_seen":77,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/xrp.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /xrp.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 2393\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bcCAAAXMeEbFgXk%2FCjZr43Tn9pw1DlSLp%2BwUBzfWFCho7%2FiGuEnGpYfaZveY2V1%2BqYNV9oB26Bx5YuolKsRmSC0goWufp8NkcWi4v42h\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"2308acc5cb079e77004f6ae91cc7b051\"\r\nlast-modified: Tue, 24 Jun 2025 11:41:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d3a535691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"2308acc5cb079e77004f6ae91cc7b051","sha1":"8f720c008e92589aecad00f9338e63dff7dba67b","sha256":"0875539d872ac02066c129360ade039e835bd7b9b2320f3a4d24ed4ef72c3051","sha512":"b18ef5a99aacedf38a3cfa584a8451df96097682fa4dbd5f54fb2ec4011811e3e800474dd5306d64f588f92e4210be0568725038b8664863f45dba12ba3d4ddd","ssdeep":"","tlshash":"f6410ba2c3b63a51b428f219ca4b044d150abeae3534f074714e365fe67d3637aa9051","first_seen":"2025-03-09T08:32:31.721939Z","last_seen":"2026-08-03T12:45:31.024396Z","times_seen":47,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/link.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /link.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 5120\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0AJW37EqD%2FM6HHi%2BX7QmXsOWWa78V1%2BW4naDoDRBxcDEm%2FXy5KjJXr67PjfZK4nB0OVBDIj%2FK9gw96S6PmYPd3bpAvMK2duw6%2F%2FkP8E\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"29ae853fe2eb20ad9fd78abdd8c13090\"\r\nlast-modified: Tue, 24 Jun 2025 11:38:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a7b5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"29ae853fe2eb20ad9fd78abdd8c13090","sha1":"047aa718bce1fc3ab6c47a22a100574a542ca727","sha256":"6180dd8f67f797ea2a3626cc1629bb9382f086b405ddf05084339db2b4aee353","sha512":"eb67b44d148ad2e4741d5edeee59a43b2f14b0cf3d936a05ee2106be3561d9d118a1cb39347279dbb850599ad9bc3491188a5b18e56888bc4a15f18e21919ede","ssdeep":"96:K8xFiL0SOZIHqjpDa+Bffrxgf2NEvPeHZqqlyqv126YWE41eT7hbmw:NFiIQKjA+5rxgf2uvGH1lyqNN927hv","tlshash":"4bb18ce0a7991dda92272bf1b387693f3e23c3d28500a456a0132666dd5374f4f3a35e","first_seen":"2025-08-31T01:19:13.287706Z","last_seen":"2026-08-03T12:45:31.029423Z","times_seen":24,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/sol.png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /sol.png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4222\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufXe1iooe11KmzdlXqM%2F9Hh38t1LzGCLANH55iY6V3DGoiRNEqD93L1wiFkMmzACU2C2yxlwe0e5BgX7L8KB0HAdDzUU6QayWsVXArmW\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"0bf2916a9c679e99dc9060ee1cc2dde5\"\r\nlast-modified: Tue, 24 Jun 2025 11:40:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a885691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0bf2916a9c679e99dc9060ee1cc2dde5","sha1":"7b54d567258f440651c4a41d2f955c9c412451bd","sha256":"b9296ce1118a6d150e57049190aeb4c024199e0787e0c6198c244230b8d704f5","sha512":"1749edaf7c45f50df246f209b5d26801f3ec20f449a82a9deff48b348c5fded272fc3cfdaec44eccf27ffb5225774a7ec0c6a564d7a0e558665411d5bc3c8675","ssdeep":"96:hvuOg3LKz5FT+ae8o5VngkGBh6WQZsrHzXIY4:yYdzinN6wCQY4","tlshash":"ed915dd8f39d7610a3c05d3590aa3ff78ec6818c0c258888f926f67c54ad4e11c85e5a","first_seen":"2025-09-08T14:29:09.791256Z","last_seen":"2026-08-03T12:45:31.030519Z","times_seen":47,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=TRXUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=TRXUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RgG1L79Gvz6Qb6gbyBl8e53jWOShw5uspDECMBMUBn08XEgXU0VwMcok76hiux0tr87%2Fh5KmSvN%2BFVVsD8wceFtu4gEUo4ommekNU%2Fqs\"}]}\r\ncf-ray: 97bf223e1ac0b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8081,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1c3298cc06fc5596d1be81112ff136b5","sha1":"2dfdcc2e1de79c39795f5334e56cd0aa57d14bce","sha256":"20cd63b7b1d7794decce1a0d22e53bf06e43fc525c14a2f1725ab0044c5e98c6","sha512":"deae69258e205c3621e091d02f482c49ba65e6afc99974497d4d636dc802a6603fc5a3d28aa3accd1f846f442c060dccac674b8ace4de6114d1f90bc328a6f13","ssdeep":"192:Ge0axDfmipwKm/dynCAsOK24j9gn1RCY3fPwLC:gYai7BnK61R/V","tlshash":"aff1d822128d8650fa3d881a23d6fca61a6a315ffede1fd084ef297709e52f11708f55","first_seen":"2025-09-08T14:29:09.793293Z","last_seen":"2025-09-08T14:29:09.793293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-07-03/b37f0a7d-aaf5-4ac6-a517-77ba3682a00dbanner_picture-3.2b6de3e.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-07-03/b37f0a7d-aaf5-4ac6-a517-77ba3682a00dbanner_picture-3.2b6de3e.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 240906\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLRPJR0Zk7kuqgNsT72Fy%2BrLJE4tplvktvdMM0cAsSwv6Gc%2BG01d2QbVS8AhTZ7iRtHJ9A6jf%2BFkkOI%2Bi874Lz6Rajcv57TyjCdSWWkq\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"2b6de3e65faa68db108388d9bd608d32\"\r\nlast-modified: Thu, 03 Jul 2025 08:51:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223a7fbf5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240906,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1234 x 1080, 8-bit/color RGBA, non-interlaced","md5":"2b6de3e65faa68db108388d9bd608d32","sha1":"cb2b7744c67238bea8ac86b7cc246610074b7ba7","sha256":"6b3c462a451be7b85cd334f9dc8a13dff2f7a79c2b78f9f6a496fde60285c7a6","sha512":"029831df793d9bb5783129cba1d8f293ab9d24e487b23870d3dafebe48118a60e36d1db10a33195f03cf85468be94dea4214cf339566b466f910003013f0b915","ssdeep":"3072:yiES7idHY3LTDK1QuMv9OJZM46UAP1pqbOlBLhGxKDxCGfhAT7+af8YI/F1JFf+:GS7WYb3K1QuWOTPT6sbIB/4G8K/Xf+","tlshash":"a63423cac58a197dd4d815fce3f092c01dbbd09527e20bf6b7bb0b265a1f544d82c92a","first_seen":"2025-09-08T14:29:09.795486Z","last_seen":"2025-09-08T14:29:09.795486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/charting_library/charting_library.min.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:38.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba1e-2a6a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ELJkVoY2scIbU9XJ5lDaKUZ2bh9kIG0iVuY7UM4VyXYTa3QQzzZ0HWY9tuMHImynEHXgCbod%2BQbb8UyTdimu%2FnKBnCjr%2Fem0GbY%3D\"}]}\r\ncf-ray: 97bf222f3a0db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-02T16:01:39.462111Z","times_seen":1325,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/resource/fonts/Arial.ttf","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dydxvault.com/assets/index-c2cc53d2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:15 GMT\r\netag: \"68bdba1f-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jU%2BVuR%2BtJ%2B9o%2BIQQSBXZwec8g6D6oHf%2FkpQyieAD49JT0uJa%2Be62srU%2BVRc8i9%2FUvloEhJxi14NjtXYjN7bNRBZQKAChxDfaN0s%3D\"}]}\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 97bf22316a33b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-30T19:44:59.556937Z","times_seen":2202,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/en-cf2a4a5b.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/en-cf2a4a5b.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-c020\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRwaU2W3sMnujN3eWZ2DyvHlqNEDV7zqWcoMx1NTVZo4DJYvyb0Z%2Bpj1XtvDNprZOXybX%2BTzD6nlhqjXeo2oPbmwPHlPgGWvWic%3D\"}]}\r\ncf-ray: 97bf22370a77b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49184,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (49163)","md5":"2f3be15f94edcc01fc0d7d721d7595e2","sha1":"ec69eda0392aa45a7850191922f977e791484051","sha256":"627b7dbbabdb9b11caa6bf838a46b980663cbb19cf528058cc95dafcfcc795a8","sha512":"d03ab36c2e95ac43d6ee093225f8fb152f97761b1ce333664cde9b61c4914d09be01a311b12ffb0887ccd3c6c38e84b4b3a3eaec4d1449d4b1139c45eea71073","ssdeep":"768:LHWrMKbrWm6fpaOh47OQdqOQECVPx6R+n35SfkNOpZcEw/oPrPrfWMT5voJzMAMV:LH6zbIulCR3cfwpoTPLVeJzeVz3MVi","tlshash":"b523198d7e16889e09f35366b4ce6e2124f50ac1c255881f4fecc5fd53d2b6663a3b28","first_seen":"2025-09-08T14:29:09.799135Z","last_seen":"2025-09-08T14:29:09.799135Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/common/type/defi_activity_type","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fd86EzR%2FF8RSBNmeZqs3k4ZVoBYXUAPsyMn11lmt2XpskYDRg%2BEvmBAA5u6SRCAxE2L%2BK0BHVjOJx51CExAaXNxN5UO3U%2By4PhIE75du\"}]}\r\ncf-ray: 97bf22395a8fb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=ETHUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=ETHUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ki232H1EV20ShpOLzb1FQsOe0uiypV1i0iU%2BPBN8NOKdDh8Ko0nkCgz4LqakbygvW2C50oOgr06NkzcwxpKKBVPjU8nCHrdfrSxRsFA\"}]}\r\ncf-ray: 97bf223e0abfb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8518,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"516d4377ab28424a9b6070c1cca455cd","sha1":"8c96522fbac3ed4cf78f6eba763ba7960bda4c30","sha256":"0005fb55c2943df99e1de5d7d9e9fb0e467d01ba3e23d9b435dd83fab6e03d96","sha512":"5f57e4bbb872aa512c27cb8675fa55eb36dfa139bbc9584acc8f07b4a206a47e9ce85ae63e504be15434cf831726b1813883f22c973f0008868f2c396a1c2274","ssdeep":"96:/AVxs0OTzG+wW/AfsyvBfZCGO1O3WXdVhxhQxngIpRGPcPIVK:/kszH/Csy1ZC5DdV3hqDvGPuIc","tlshash":"840226731394cea0fa798c4aa792b8610e57701ffece0ce19ad0697b09e53715e78b50","first_seen":"2025-09-08T14:29:09.801697Z","last_seen":"2025-09-08T14:29:09.801697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=ETHUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=ETHUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWqLh0yu9nK6Ct%2Bq%2B5c3vTPlp22IjXrbSPMi22n2hT9ilyr1s0COUsyFkmvltNHVYkK2KHMgjSP99eLJEBJZWmRXSAVdCjVGBChi%2B7Yr\"}]}\r\ncf-ray: 97bf223e1ac4b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8518,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"516d4377ab28424a9b6070c1cca455cd","sha1":"8c96522fbac3ed4cf78f6eba763ba7960bda4c30","sha256":"0005fb55c2943df99e1de5d7d9e9fb0e467d01ba3e23d9b435dd83fab6e03d96","sha512":"5f57e4bbb872aa512c27cb8675fa55eb36dfa139bbc9584acc8f07b4a206a47e9ce85ae63e504be15434cf831726b1813883f22c973f0008868f2c396a1c2274","ssdeep":"96:/AVxs0OTzG+wW/AfsyvBfZCGO1O3WXdVhxhQxngIpRGPcPIVK:/kszH/Csy1ZC5DdV3hqDvGPuIc","tlshash":"840226731394cea0fa798c4aa792b8610e57701ffece0ce19ad0697b09e53715e78b50","first_seen":"2025-09-08T14:29:09.801697Z","last_seen":"2025-09-08T14:29:09.801697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/95a15fce-802e-4f05-91c1-9135e424e0bbbar-chart-2-line%20(1).png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/95a15fce-802e-4f05-91c1-9135e424e0bbbar-chart-2-line%20(1).png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 3260\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LyOqx2%2FR%2BIbXDD8U%2BVFBvSyfn4rcuwTeYV2x4HoYsXfoxqgbgdVdkCFzJ9yx%2BVhqRbw4YBCymUKEiZJarWJRpSpCM%2B0bF6Osp5kf8FNK\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"9026b95051e4e45cb38131fa388aefad\"\r\nlast-modified: Thu, 26 Jun 2025 15:43:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22398ed05691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3260,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"9026b95051e4e45cb38131fa388aefad","sha1":"5ad165c795e1ccec2460ef14ee14ebfbbda645d6","sha256":"85227a0cbb9e1bec5af8fb0a8124bc1b320decc53d43f362ad7f90984fcad205","sha512":"416f3331f204bacccd8285dfc31563bfa854b94076440706ac3a5080dbe3349a396b0b377db9cd5d4251da5aae26bcde20941cd3de6085df903b59de0425bc5d","ssdeep":"","tlshash":"2c6182398c9cc96a5f3a6091cb780c54846ae27039b239c6683b93f62d05c58a6a562f","first_seen":"2025-09-08T14:29:09.803715Z","last_seen":"2025-09-08T14:29:09.803715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":193,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/ltc.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /ltc.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1660\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GAeupxStbuzzgdywHx4ausc8UCDoMGGis5mSMTXoMffsHm22tHOBb6MFpnxAPV9JdDaiYnTmFOV%2B4oEeszC8m%2FoQYNb9W7cfI4kA1yzS\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"95507ffd15fb458032339c7dc775ed70\"\r\nlast-modified: Tue, 24 Jun 2025 11:38:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d3a595691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"95507ffd15fb458032339c7dc775ed70","sha1":"e374f127ccd850868577125ddda835210f9f9c12","sha256":"7160750bcbc115ac8a3229bc1120fb59e96a737d607a57b42fa8e2b092a14159","sha512":"6fe799554171ee690f22ad0c86752f8ee12826ca378e15a0531b50d1f84458805ca6abc9ff8684bd62171afda6ed546ed21ae7dfb6689de65a248351fc1f3a58","ssdeep":"","tlshash":"82311a099a662da282350f2ae84c6128cd012340cd0123d7fbbdfc12d2e81c1503cea0","first_seen":"2025-03-09T08:32:31.736669Z","last_seen":"2026-08-03T12:45:31.015564Z","times_seen":68,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/trx.png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /trx.png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 6884\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTbY2dvA6%2BmIeY75tUuIRJ%2FdeBTW0PvxpaCFBm%2FcFqkzzsi5G5UV7vam83BnYJqFnOnZOqBoui4vYux5pQDIL3pfsSmrXgsBkhX%2FO%2BaQ\"}]}\r\naccept-ranges: bytes\r\netag: \"4485ad0ffccf92c98a17fbc03505699a\"\r\nlast-modified: Tue, 24 Jun 2025 11:41:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a8a5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"4485ad0ffccf92c98a17fbc03505699a","sha1":"491829698bcdfef16a76dbd51179a9407eb3b15d","sha256":"91329e8a180b0fc75f4b8b4cd252a64e4f13f33edf4aa6664fbde442cedff001","sha512":"1596e5a7cc7c103f73df1a61fd50c377fbeb4b0b71c8d6aabe7d0d021f7cdfd96679f33352527d74688cc2f2b5f6a1488f46b21e3d2d7d2f578a79f6f8e64ffe","ssdeep":"192:bya20oqaVgVwA5+c+Eq3IHUUDrHph1LbpwxS9wgF:byGoje6ol+xadLbbRF","tlshash":"62e18f13d15e5e08c6cf21308773564b6facc5307e0eb2c12f76a6514d2ba809fa132e","first_seen":"2025-08-31T01:19:13.315017Z","last_seen":"2026-08-03T12:45:31.038454Z","times_seen":42,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=ETHUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=ETHUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTa6QpIuJKl%2BvxmveqQqx60z8YiQ1miHOymY0sYyep8VNt%2F8GOg3zF90AweYutjiSwB5jxeTzMEs2B2c8pqnxqrLEPiCwXcTVmQVDfub\"}]}\r\ncf-ray: 97bf223dbab1b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/common/getCoinList","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zNVUsNBV3aUUJwTpx31QmVkYn0fXPr9cGE5HCZS7klWrMqMqJNmtLkWQpHZpqR9G3myvlr2TLkp2INISx18vzPhZ9MLAogIq6idzf1S%2B\"}]}\r\ncf-ray: 97bf22395a90b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=BTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=BTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WF6kk3SVdod2y3%2Byl0%2FSaK2%2BfFMKdRhe3DdT1YX2JyAfX%2FQPjfypBALl%2FIkfTrafMkYL91GdFQLgvyBIk2L3LmGSfYTyPnpRTAFoZvGf\"}]}\r\ncf-ray: 97bf223e0abdb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8747,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5373e57db310ecd55c10bcb03a392a77","sha1":"a5bed21beb70dece212e69502b0c25b271a8c8f4","sha256":"4961c42b4f9a3c0a1185353a3a5b42447d42fb968c96c1cffd44b986c9442933","sha512":"27be534895805fa5baf98b5178f828bdb55ff3434512d4863a8d1e25c275611ae6846dddb9c1eaf10fff7c52eed4c55393ab25d1d35e1d66768211f5b44e804f","ssdeep":"192:PEoFmJc4HUHV/XNmB0MvpIowrIhkoSUT4OBDdizMjcasq+nvC5ko34:FYpU1E0Mvp7mI4aBk","tlshash":"5b02255397c8ca70fe75881a33e2b86d1a6a311afeee4ce495f1657709f12b1160cbc1","first_seen":"2025-09-08T14:29:09.808093Z","last_seen":"2025-09-08T14:29:09.808093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trading-order-roseccc.s3.amazonaws.com/echo-res/2024-12-28/489ad0c0-8cca-4674-b1de-7e831332df6becho-pro6c57acf5e15c4a38bec2f69a37c99c16.png?2.0.1757264427522","fqdn":"trading-order-roseccc.s3.amazonaws.com","domain":"trading-order-roseccc.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.30.36","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 14 Feb 2025 00:00:00 GMT","end":"Sat, 07 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2E:BA:63:64:95:A8:CE:55:DD:7E:EB:A9:98:83:14:B1:6F:6B:61:69","sha256":"00:D7:0B:CC:1F:82:6B:F6:D9:2E:55:1A:BA:88:38:33:19:09:5B:85:49:41:5E:DA:A1:97:B9:D2:0A:3B:13:52"}}},"request":{"raw":"GET /echo-res/2024-12-28/489ad0c0-8cca-4674-b1de-7e831332df6becho-pro6c57acf5e15c4a38bec2f69a37c99c16.png?2.0.1757264427522 HTTP/1.1\r\nHost: trading-order-roseccc.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1jKM35KSR4PZCsEOQHyv+jwaBxT7C8h+bKKXnGaC8H/BSexh/BS+UJczPfE2msk83OPy4aZumI7gmreBZYPzV4mYDEDgKJra\r\nx-amz-request-id: FC4ACKQGD9TAKVAN\r\nDate: Mon, 08 Sep 2025 14:28:41 GMT\r\nLast-Modified: Sat, 28 Dec 2024 13:52:17 GMT\r\nETag: \"cd9639c040f59589fcb5d6ed983201f1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-myval: test\r\nAccept-Ranges: bytes\r\nContent-Type: application/octet-stream\r\nContent-Length: 4196\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":4196,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"cd9639c040f59589fcb5d6ed983201f1","sha1":"dbdb74d71fb5cb16b7b8da75f94823dd95fc9d5e","sha256":"e1a782a8916940e24b67ef01c954ac6f353f2ec32825445e34a14fed70411b92","sha512":"2dd972fb315d7ed8bf431ddc91f62d14d2d9be2c1e993aa88f35f8db85ad59df74c93a3192c1f8b15e15e4f5ef4b32c08af2273065b068dee92f77cbc44f75e8","ssdeep":"96:YZCFp42ks3eAyPPPeWmWqK617l2WsRWsRWsRWsnu19TLOJYdRGYgcyTEs:YZ6p42ksryPPPzmx1h2WsRWsRWsRWsW+","tlshash":"0c815c66ce0136dd8c50a03c0b6401fe7df816e8be22ef65999477b56a9f6340814bf7","first_seen":"2025-06-06T01:26:06.899814Z","last_seen":"2026-07-25T09:20:52.801382Z","times_seen":47,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":40,"connect":104,"send":0,"wait":115,"receive":1,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/us-e7be4240.svg","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/us-e7be4240.svg HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dydxvault.com/assets/index-c2cc53d2.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFs%2FhLCp31rjv6wg7Bly4VNoDJGiM9r%2FdddDJHnIWZuuUh1zgXWgDfjBU%2Bly0sJYGrT5ixkXqgG7RhXG%2Fyok4q1sw5s4qmoLyVg%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\netag: W/\"68bdba2b-288\"\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf2238fa8cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d23b9509d0a0a828e3071096b0d2edf","sha1":"37ab729313d47d14f637326a1432ee02e62db544","sha256":"e7be4240cf57987926673708f09233be1ab6bdf35acc7b86bd32a263f197a2a7","sha512":"b658ce1342283e8c9155e9f626a9ea094bbf2c7094e59459b3bc262384bdfd65b170b6110935c9d3a2989cac6e24efdbbf06e73f9fa9fe74119e60595d8e8650","ssdeep":"","tlshash":"80f0f4f1d2ece5a8851136cd1fbdb6a823d8bea806400dbba04c3c6c2425d7667835e8","first_seen":"2023-12-20T14:16:02Z","last_seen":"2026-08-05T03:01:03.102949Z","times_seen":4340,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/heroicons.json?icons=bars-3","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"104.26.12.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 02:07:29 GMT","end":"Fri, 31 Oct 2025 03:07:26 GMT"},"fingerprint":{"sha1":"14:0A:7C:6E:37:65:51:AB:C1:67:54:11:32:93:D9:69:B8:49:82:FE","sha256":"1D:A0:4D:26:2F:F0:16:CD:C3:DC:6D:21:E2:24:CC:B7:F8:83:21:84:5C:FE:EF:F5:D0:5A:A1:74:DC:9B:FD:D8"}}},"request":{"raw":"GET /heroicons.json?icons=bars-3 HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EdFuWcmRz961HZIwPbyKLGTJco2qvVasdqc%2FcLe3RSXVMYRW0KmIzyP1J5fWi1qM1y83%2FNUdLgeUMFrCBlxZdo0HHpGup5TpFd5wLpqUbidY\"}]}\r\nlast-modified: Sun, 07 Sep 2025 17:20:25 GMT\r\nage: 47692\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97bf2239ece875ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7a3007588a08de0a9c05141dae14e83c","sha1":"135f183be8ae5a3838bc8c1e9f64d349260acd52","sha256":"069c26755ae22090f723be600eeb65cf446b446414b556555902f5ce7f9194ba","sha512":"08eb4cd22d6c00e66a8d85860ec0cd9dabbc6e043c97e4b08bb286d5cb584775c86d41e5b4646f162ca7d64cff6db84df40bf244a2dc14e4fe59a3b9c1e52a64","ssdeep":"","tlshash":"31d02b683330d4fdbb13151ec3f4ea19a9c7224137866904512a40f4713076c22b3fa0","first_seen":"2025-09-08T14:29:09.812632Z","last_seen":"2025-09-08T14:29:09.812632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":41,"dns":21,"connect":1,"send":0,"wait":11,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=BNBUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=BNBUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vClUgNAK5qGgWWfEfuSejtCo0WoStofOJ%2FxDwwwgcCThlheezf3cjfMinwS3o7Vym%2F8yqTlzIR5ghptPiwCmY9HZCJctzUL9loj%2FHFmm\"}]}\r\ncf-ray: 97bf223dbab4b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/1d85e281-765a-4a55-b76b-31a778e22332home-line%20(2).png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/1d85e281-765a-4a55-b76b-31a778e22332home-line%20(2).png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 3159\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3yLa1cOZ4UPzai01XLeoGM1duMfvW8sYYmH3urP%2FYvAZPQouJMRGecdK7d%2FHWYdxvA2aAVD3P8c0QyON651Bl0%2BpFgx54JB20vOTjGT9\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"72466d53999193eb7e9679023c61c872\"\r\nlast-modified: Thu, 26 Jun 2025 15:39:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22398ed45691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"72466d53999193eb7e9679023c61c872","sha1":"9601c9b51383d5d35a5ea0178a5d7a5ca8081e6a","sha256":"ca76b4cd2e025ee04c6c79fa6bc0af745c8b7cb29c82b840698316ae06ab3e2e","sha512":"65f10ef4c39ef20669a0b8a020b65d78bf5e014bed59fc460771fbbef1cb3bd6c6d0d6513b71db59d36bb55a25b3dac5f648c531e512471bdf78d529adb6dbbb","ssdeep":"","tlshash":"d0516df5563ece70dd48a920eee40f705a0a42433ea827eca0677b64200a72d3b500fb","first_seen":"2025-09-08T14:29:09.81434Z","last_seen":"2025-09-08T14:29:09.81434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":152,"dns":83,"connect":1,"send":0,"wait":193,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/07a908f5-2b1d-455f-8231-d747a3a805b7wallet-3-line.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/07a908f5-2b1d-455f-8231-d747a3a805b7wallet-3-line.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 3211\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B97iPX94oGHCCQrBfQRQYNDaYiQ2J3n4UPsIDpJlyU6aP%2BnhV50YTPoUsacAXygEl%2FN6bNk%2BHAthcMsrq%2BnmY6XfbaiFSvkBNtTiEqg7\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"4961bba378f68125d3e8a685b7cde0ca\"\r\nlast-modified: Thu, 26 Jun 2025 15:44:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22398ed65691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"4961bba378f68125d3e8a685b7cde0ca","sha1":"f50e7f813a35280e28a1e7762f0824c5a205dd32","sha256":"fce120e7e273bf2ab5b0b98a0e38afb7745b5330cb709be0b8cf79043a9f8f8c","sha512":"84c75a1fdd56e92d813627a63bf8c5472745a3562b4d9036c36d1530ab3ff35d0b5bf8dd6159da1a4ca70d300846dfdfb43729d563d90e0da2ff78e60c0ccf65","ssdeep":"","tlshash":"63615a24983d10840288a395f83e1c0baa4b033b4b0a4ffde4765a5f25aec1cbd4fe21","first_seen":"2025-09-08T14:29:09.815894Z","last_seen":"2025-09-08T14:29:09.815894Z","times_seen":1,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":133,"dns":68,"connect":5,"send":0,"wait":191,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/common/getMt5Amount?coin=xag","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaTrauuxLHvCpIL%2BFBuZeJ2EIOQeYx27HP0Zy%2Bc2e82f9bQM06EpHt1mtuophCwuc85OsNCcCEKsUKBm9k70pUKxdgp57ahVl3EESnA7\"}]}\r\ncf-ray: 97bf223dbaacb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-07-30/90775f0a-d53f-4224-a0a6-67610ca36cc2dxdx2%20(4).png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-07-30/90775f0a-d53f-4224-a0a6-67610ca36cc2dxdx2%20(4).png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 171710\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjroFAbi0c4jAKvA31kVFA5Cu6cPukExXJhydsIgyVBtOI%2BslMOXQ4u5EjRN2Rhhp3bDlmN0E2tIwjuoJKjsfLuCNXVX9YDJQnk5XCbY\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"315ad5804807e4bbd17e01c25686e2be\"\r\nlast-modified: Wed, 30 Jul 2025 08:45:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223f4c4b5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"315ad5804807e4bbd17e01c25686e2be","sha1":"2d79133382b8381ffc9eccfc4c5f09136d261530","sha256":"0d8aa33f88f1166ebedb07a8f34320723b566999543c33309309edaf440c5cbb","sha512":"92237b71fafeb40e79e5f6eb053e085f8f8052d4a41ecd0855dd39113354e825e1e5c47e0aeaf571f552b434d1e69bd235204ea1aa29f918024962b13d58f124","ssdeep":"3072:8k+m/+YvV1TR8updkZ/h5Q8NTvQz8PDEv6GCUREU/CoQ+yIuVRUEGfIU:imGYvVRWmdkZfQ8JYwWP/CW80","tlshash":"bbf3124da1ff401290cf4f540b6ea8c17d01b50b4b86957a9aaf860de3b90a4d53fba3","first_seen":"2025-09-08T14:29:09.817554Z","last_seen":"2025-09-08T14:29:09.817554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-07-23/5ce2526a-11e8-423c-9116-6455ff277382e54598cd-3161-40d3-9732-176a15d81d28icons8-dollar-bag-96.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-07-23/5ce2526a-11e8-423c-9116-6455ff277382e54598cd-3161-40d3-9732-176a15d81d28icons8-dollar-bag-96.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 3680\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2337j%2Bl7g7JM1cnZTHm29Eg2TupNuvfEC8XPGv%2B48piKGoeJ1a9QgazEqGBu9WNbWY%2Bja5yCiQPj2kOK3Iz3HphpjNr4xhh%2FcyC5LjO\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"a9086a2aed107e3c4bb1f96f75064627\"\r\nlast-modified: Wed, 23 Jul 2025 09:00:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22397eb45691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"a9086a2aed107e3c4bb1f96f75064627","sha1":"1f8e990542933c67f0ae9403aa54847d386160d6","sha256":"a7363f53bdadb96ae9394fdbb2220b473cac8d48ed3b9f94e332ce07c00a182b","sha512":"edb7aba5ba565c4d9a7a93b810b7cfc0c9d82968536dd4ee0191c195f0cc5da811dddd54fba0fe034075d7ccd3a567144105b90ff879565caaed53e038606980","ssdeep":"","tlshash":"63717c579f08c0577568073f18721560be7e0a891221365bfc0a8ef53834eac66ab71f","first_seen":"2025-09-08T14:29:09.819354Z","last_seen":"2025-09-08T14:29:09.819354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":210,"dns":0,"connect":0,"send":0,"wait":202,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxykO39W8vEG0zxkwZV4jraW9XiFRjGBSs%2FpmraZsDU73P8j%2BTUEgc2%2BBqvnEUFTknJ%2B57U1feIc9qhSh5UmSVKF51FBM7cjKx4ebb%2F0\"}]}\r\ncf-ray: 97bf22395a8eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/common/getMt5Amount?coin=xau","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vm8YvAm5oXcaYsA2v47muPVUKMXVOEaF%2BxH1JLi9rupUyZzbbDaSNMIQdssgTU4Ybi5fqz8bxPoUhRfzOpBICHqnrTV3NczJJKdegEld\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf223e0abcb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4fbd3e20676fbf971c8ae042521973a6","sha1":"64cbbb2851d51a7e880cdad9e0c1613479c0de9a","sha256":"9297f468824be2a76eb0a4c0ea0be6e57a863816b6b70be1557a3f8660100c4e","sha512":"0d007fca67bbf4ded26b6e0a30eab1128258bb82ac3d9ace86eec21c18167767f3538069e5150f770dae459c59e768925aab894da8d49a5d406e23313b71507f","ssdeep":"","tlshash":"f69002555c188242a88300a595066214002471702668a2494c595135c1881622050898","first_seen":"2025-09-08T14:29:09.820953Z","last_seen":"2025-09-08T14:29:09.820953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/eth.png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /eth.png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 3437\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FmkNMgP4pTEaRtsjcdorlJoQ6o7%2B0lOwZBPZjOTN9slpMCMjVOjWOSdKmLjEe55%2BIU8reKaQPflfBtFkj%2B8LbVIaDyUk5uQeebtR2h2b\"}]}\r\naccept-ranges: bytes\r\netag: \"174b0414fece541456d82f84a296e380\"\r\nlast-modified: Tue, 24 Jun 2025 11:36:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a7e5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"174b0414fece541456d82f84a296e380","sha1":"b5705bc9d5e6c5d7f70e9a1a2773f7211f474657","sha256":"99bf2102cc13a51bb226f931b8d0fa4c5b3ca9dc4179167e89d7ee3f677c3fdb","sha512":"6a5fb1f896da4d1bda7474e19880294be83017a5da5cd39113adfeb5032cb9b7566e706845209e4312408a99b7305b27a84748637bed44aa2622246bea0bda94","ssdeep":"","tlshash":"a5615d8d039107bec5d46349519fd6698c278705862f4fe84b67c8fc0e99dccc4c6b59","first_seen":"2024-12-25T23:55:17.402619Z","last_seen":"2026-08-03T12:45:30.825498Z","times_seen":88,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/common/getMt5Amount?coin=xag","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYQI8MOAZPvBS5hhEBx8dDPmd%2BRp9%2BPfFRKO5juVVA1LOlUBZrP9Yh0d1wdncS0eakIdr8nE6VJWEM8cVSEwbmBmbumv7e9BMGBNk4R2\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf223e0abeb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d1f8a2824468fadb94eedd6bae58e2f2","sha1":"a7e57df54557ec8b44c17f59c999ec153a7f107b","sha256":"5136572d4cc0244f0f0628724df8ede377f9c8214f62c47063dd0b93d9de5d45","sha512":"70ea9791ca81c1dbbe43a368eae961353d07e19431237289140c380960c8664066d3d516c998f34aa560c9b23e4019b86ee9c6f3f73000a78ededfbd8a2b0bd3","ssdeep":"","tlshash":"ba9002556d189242ac8340a99606121500243160662493484c99552985986622050c98","first_seen":"2025-09-08T14:29:09.823245Z","last_seen":"2025-09-08T14:29:09.823245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=LINKUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=LINKUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yZrXp2tO6kJaB3teSh3qYMMIrvlwcRAsNcNLNOH7cP8Ba6TaS1ex24Bx9x2toNZh0NcP8MXcnL31QGZJFEfGMkGIgxtr4QpycKOUb7Gn\"}]}\r\ncf-ray: 97bf223dbab9b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-4bd56d4a.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-4bd56d4a.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8O482BGi%2FCYpmbNnRxPqymHdxKgeHrMNaCnYPnLsT3GDbf9QhpEY1eW8yQqrTZ7XL6u4ugSIfafO%2FGrEsJKUGSvW9vFz9AzYRk%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1\r\netag: W/\"68bdba2b-302\"\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf22365a73b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":770,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (769)","md5":"8826a927fdd4fc2758dc782d49c1cbf8","sha1":"ea38fe84254e17a6990aba112a1cb8355b479cc6","sha256":"ad5a3fb380d57c514d4bf33388a61fe24576b19cfea5d8214507354b6303fe5d","sha512":"c56f1071fa746235f11a399969a49855313ee073c616775ee36f3461c8dd53f3db5bdb973d5f05648db75d00ee12a87c189a827c16a381ad918f0b266d4df92c","ssdeep":"","tlshash":"0801d0aafab8feb30fa64a4935c331520040877dd45020f1888b36301b6ed94d1cd71d","first_seen":"2025-09-08T14:29:09.782757Z","last_seen":"2025-09-08T14:29:09.782757Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/7880627e-d96d-4175-af62-c9372961cdbeicons8-transaction-96.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/7880627e-d96d-4175-af62-c9372961cdbeicons8-transaction-96.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 4870\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kSXu4KqUCUeP1BdnLCKRP5gsocrrEfiQ7qLgAm9L31Xq6dNk7Pu0111jrF8HtymIty9NxQwixkNp3B0YEo9Y5sV6yEWHIQlelr53hgtl\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"8694c4121aebdf7059aa77e0f4d4cb2d\"\r\nlast-modified: Thu, 26 Jun 2025 16:26:56 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf22397eb35691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"8694c4121aebdf7059aa77e0f4d4cb2d","sha1":"bc8eb36a90dd464784adc99cc08c988e3c0bad92","sha256":"9ef7cc4a058648e42bcc252e87121541733bb3dcbb001c34c01dec9886970242","sha512":"396fa53f162b27f7df64cac29867114e5ad1d5702bff6b27e9a4a7e627a8e82a831e331fa7d34063e4e2ad699db033a105e207d870e0d1f9e1979664c3f6763a","ssdeep":"96:CSFZeuhyXWWILurT1v1AST5LEciq4sIP8rEGUOWAksh53jW4tJUHTtvT4:CS3euMXz8uHZq65L+qDIUA7OWOPfIBvM","tlshash":"d8a18e98359a08f5dc8ce82003f80c6cca6a53d64ca3bc8c5ed4ac5af1f139891f6f16","first_seen":"2025-09-08T14:29:09.824831Z","last_seen":"2025-09-08T14:29:09.824831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=BTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=BTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfgpFNeEc3%2BBfr4cZFthozh6FbYs4SJd3Nuv5Sagf%2Bu1vV9Qr%2BfFyJ6Pncb%2BWRLGuA5kREF8Gg%2FaJqpBts4lUEDqL%2FC1iJrB1wTQIaWZ\"}]}\r\ncf-ray: 97bf223dbab0b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=DOGEUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=DOGEUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akODympNwMyoxzMzvmxNVLUGE4NdcphlwCdZTAUHX%2B30vQwxWYNZiJdG%2F5P%2FLiVsfWk8XYP9en7REKxFxKQfcAgygN6BF4seH7YIPy9g\"}]}\r\ncf-ray: 97bf223dbab6b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-8f319dc3.css","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-8f319dc3.css HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-5cb6\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhhcER9X47HVk53T4ScHzfcX%2BS3DS4gsweunu%2BlVy6MzeK6pQG6YgMvbjkv1i4%2BgkHfQ3ZQ8y5CuUY9RBDYVO96EYkoNXEq42gQ%3D\"}]}\r\ncf-ray: 97bf2234ea61b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23734,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (23733)","md5":"bb1bf27c9563b4ad3740fa7e04fefb59","sha1":"dfbbfc0aa03b03b9ec84ee3b33e4b8623dbcdf5f","sha256":"8f319dc31ba1febe3f10843f43e2c8d71c84eb67e198c6aa3c644504f513c75e","sha512":"c004f1e8104f070c00bac58b2f199a10c98beb820ffa83ef518f82548d8b01f1d0efe2b0e7a78095f2738f23b3a80f9c1c6e41f04f0da11dfdf0435ddb2b836a","ssdeep":"192:o2f4DlAhMC/qaJB3YxQCp5Fld5G4huF2kVql37ZQOckM6WvLjqk/orolo7:Z1BjkQCp7Q/orolo7","tlshash":"d6b28518a684517cfc37e19abac09fcc923cb522e753dd89a197b2d5298b3e71733814","first_seen":"2025-09-08T14:29:09.826629Z","last_seen":"2026-04-03T04:37:59.008035Z","times_seen":3,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-cf74fd56.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-cf74fd56.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-6813\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VLO9IDhIRjQ%2FnsV%2FZwsBKZfkcpSYeCAPeRKFd0MNH2vYs2g3u%2BWLHLptj7%2BpYvh7EtotyGLqOmpHf4hCN%2FUiq2cNIORyuzBs6yU%3D\"}]}\r\ncf-ray: 97bf2234ea5fb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26643,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (26642)","md5":"bc0ca25582ba315ff6b7d96ea1194f02","sha1":"59254e832d6191917c77956bdbb240f29d86e9ac","sha256":"626505ad143a457c3f5b873b9b7ad2d05fa445ecd8bad5c2dbf429822597f2c2","sha512":"7c208ff5d92f7b1496d138b25214a8cfd323b64dd7d15efe52626939b47a2d114d519c4a54684bb2b477d909c3d740d03b839ed8500bc31a5ef2213e0971bb77","ssdeep":"768:BP601PWztyFaSYADxnL2UK06DNff2G7e0g69tvUs4nU30ZybjuC65/zCyd3n+:BLk6pLFKPddHQEgsjuC65/zfV+","tlshash":"c0c2e985fa015139c3f6949390990040762e2feb6909c8e174fdaed63bd3eb4679473e","first_seen":"2025-09-08T14:29:09.82843Z","last_seen":"2025-09-08T14:29:09.82843Z","times_seen":1,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/filters-4c2daf36.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/filters-4c2daf36.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-ac8\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2F%2B1PoO6XdYOOU%2FPkD14Iff9pJlCzuCHKNXV85%2B36rzrV%2BuoQveKxYGq5XXyAjYo%2FJ2jv1aSTsqvC3wEziX9rugjcxbGXt6iTJI%3D\"}]}\r\ncf-ray: 97bf22365a72b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2760,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2735)","md5":"0f2ebff36cf3224ee199d696cbccdecf","sha1":"1459dfd82d54434bb58d48cc326bb93ba2cf41f9","sha256":"c88092655c14a443ca73dfe3d4de862c2da7f1277547ae0389953c1d22f53f06","sha512":"0dfdd11f2ab0ee5ac411bfad5bd7888a3cd3fc617ddb0f7c580bfde35cd54fdab284b8cddcef1fc5aeddcc745c3fab51c548e0dd3f16d109482bfabf67cfae0a","ssdeep":"","tlshash":"e35141edf486a13726fecacd401d4515f0cb7f19681b0e5afc5ad0562467848d4bf364","first_seen":"2025-09-08T14:29:09.830164Z","last_seen":"2025-09-08T14:29:09.830164Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=TRXUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=TRXUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2By7S24bAUxwCjzSPWLNV9LzYy0uuu2izap7XLvXLUKGTGwP9i7qB0DHg30OAPdEbx5mqo9E%2BiXe1rHFoy4i9P9ZbsYE%2FxziULAznf2U\"}]}\r\ncf-ray: 97bf223dbaafb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-395d0042.css","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-395d0042.css HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c8pbYsFRwjm%2FiWec9ZXoQO9g4GCk8pnjeuCSdOYJvpsai0H6vhW10fKTxhoSKUmINkSInMQ8QLAMUiXqy4ejplcey1gikIxsaGY%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\netag: W/\"68bdba2b-7c\"\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf2234ea5db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ce66dcfdf24cdf22d941520ab5324f39","sha1":"672a17ff554b44b82962fa5124c46231646ecbd2","sha256":"395d0042e5333fae2945997276c13d72a3fef980bef17de47f27017d1e02a5f8","sha512":"d36d1196ee6c9c66efa5cf2ad7a110051c4687d132d6b1c6f2c585d6d11b2e4f5f4ea26c3c1c053ce3c7c1970dcece646f3fd4ea2a997a1c9a5b0d95701857da","ssdeep":"","tlshash":"d1b02b9401291a18572194523f346205c282c801e001a14048060f7970cb34249e0e4b","first_seen":"2025-09-08T14:29:09.831639Z","last_seen":"2026-04-03T04:37:59.044122Z","times_seen":3,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/dot.png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /dot.png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 5651\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPKpUnOp0qIu8uw0F8VPCs6I0iFjJPR8w%2BrIeDh%2FQ43Y3M5%2FOGijrvU8DfqPTk2LzH2a5uFuSH1qF1Kbvyq8K2qVGZI3f3t9he4daNOC\"}]}\r\naccept-ranges: bytes\r\netag: \"f272c9cc7e4ce5cf95d5318496ff1de0\"\r\nlast-modified: Tue, 24 Jun 2025 11:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d6a8c5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f272c9cc7e4ce5cf95d5318496ff1de0","sha1":"2abf6609ede007e2ea8e734ece29fe1dae4ceedc","sha256":"6051b0de048fea17d91be204b3c2025e16265c3a5e65759bf254186e77d41e6c","sha512":"dffb29fbda41c9e3ab588981936dc07a491b2e2f03d4c2016fc07869b412eae14486e7be1193fc7545ddaa5e046a5b786424a53049fca02b248f57e0954e6793","ssdeep":"96:K8YMAU3VlXB77NSz5mHgNmGRwXO4s7Mc3xniDYdhGm+cTQOGvyKA9u1yDH0d3t:kcZ77MmIRqOl7MGtth+cTQ4Hucct","tlshash":"3dc18e40db29c0eb462d56f181a6133f7b9b5211a183336a60fd917e923fa448bdba47","first_seen":"2025-09-08T14:29:09.833353Z","last_seen":"2026-08-03T12:45:30.846586Z","times_seen":34,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=BNBUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=BNBUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oFncsM3PXVgz%2BIcEl1r%2F6wOp%2BwGqR0zEHzvi30pceyP7Bnisd7sorgnbKf7BYPiJfLzaokidQ%2BGOeBwkDVUY9ID5yB2BPUBdcbdGcwB\"}]}\r\ncf-ray: 97bf223e2ac5b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8207,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"118cdaf51737ef03c35413ab02bcfffc","sha1":"305fe1e1e812406a5caa791a47eebbcf3ee6e047","sha256":"c0209827613b01c84efa9cedc9f1d3657ae3b4166757a7731bb58c5e8cd2f7d7","sha512":"a910861f51b63fa8aa5825875d1d5eb2f817a5e06c12358ae75b8fd6fb9fae3df7e37a2332ece21f4ccc5872a3cbbd115437297ff1098559b183fa79fabee05a","ssdeep":"192:7GuawQhQPFL30He2DpnQ2wGfMMG2oegAmtUP:naQd0HrDpzwG+2oNtUP","tlshash":"fd02c14203c8c264fb798d1a3392f8e75a2f3196edce4dd48de1637359e52b23a08751","first_seen":"2025-09-08T14:29:09.834906Z","last_seen":"2025-09-08T14:29:09.834906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/569221d4-97bf-40b2-95b9-1aa83c94f05cicons8-swap-96.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/569221d4-97bf-40b2-95b9-1aa83c94f05cicons8-swap-96.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2235\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TAL3n5RpHdoGq%2Bqx2wdK7wH%2Bbmn3hJCwgrbkPk04JzmZmHSbIOtcf8OwuXN5HL%2FyV1qD102%2B%2FGvFoN9TNy6uW0tzf%2F7k0KJ%2B7FgFx9LX\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"171ddec528ee874bd7c682a5e7e05574\"\r\nlast-modified: Thu, 26 Jun 2025 16:18:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22397eb95691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2235,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"171ddec528ee874bd7c682a5e7e05574","sha1":"3076356df02ed59f75a65272bf2c24de43406220","sha256":"218d14941bac09e4e5df5348eedfaa54777517c5dbf15c9f4873a706b162df76","sha512":"5178347af55d7aa668591f502049fd4287f672eefcd2d475fd49fda2e7ecb4c545dd0bae7929c20bdfd4973f4e381a2aa456af5d37a5c680675141a9f1ee7187","ssdeep":"","tlshash":"b1413c1d1e5959e4897a5afd5b4e0d50eeb710da9d7e4111ccf9589d033f2208cce39c","first_seen":"2025-09-08T14:29:09.837064Z","last_seen":"2025-09-08T14:29:09.837064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":201,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/28ab405e-9c2b-4c18-a31f-c121c960d698icons8-rise-96.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/28ab405e-9c2b-4c18-a31f-c121c960d698icons8-rise-96.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1144\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8VAO5Un81WuXuM2lntnfFRD8gXZdBspBBaigdo%2BErnpQISE6AKp5v8WjTIGugulDoPHucsAgLhRceIaryLYukctlnPnjc57Ybl1DVa9\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"40478c47aef215f8a2784bd503a1165b\"\r\nlast-modified: Thu, 26 Jun 2025 16:27:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22397ebf5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"40478c47aef215f8a2784bd503a1165b","sha1":"34a2580176033e7aec359b4750fbb22eb56bffa6","sha256":"6d5be90a45396779b7957e3b28f97b445b8980d506f9c4d312410ee08c02f0c5","sha512":"e2cf5d5f7360a72370c90bddc617f01b67a59a2d6ccb07389d6abbcc82fe15cfc7b50ca67a1d7521214ab552967bba800d76ec90945c6af67ae4022666c89bfd","ssdeep":"","tlshash":"f921c6ce6ff6583c58b106fddf6308aa256b2600d47e42aec1b82501ed942c4c329f81","first_seen":"2025-09-08T14:29:09.839179Z","last_seen":"2026-04-03T04:37:58.992346Z","times_seen":3,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":200,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/xrp.png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /xrp.png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 2393\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lU%2F3FLoF6edjbQmHS22PGj0Xupxd%2BoDCvbfNflteUjq894%2Bi2x0xrxq5E0siGyXDp05nKgg6p15o48gBKI%2ByFnisUQ4QEc%2FgHK6e0pIK\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"2308acc5cb079e77004f6ae91cc7b051\"\r\nlast-modified: Tue, 24 Jun 2025 11:41:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a7f5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"2308acc5cb079e77004f6ae91cc7b051","sha1":"8f720c008e92589aecad00f9338e63dff7dba67b","sha256":"0875539d872ac02066c129360ade039e835bd7b9b2320f3a4d24ed4ef72c3051","sha512":"b18ef5a99aacedf38a3cfa584a8451df96097682fa4dbd5f54fb2ec4011811e3e800474dd5306d64f588f92e4210be0568725038b8664863f45dba12ba3d4ddd","ssdeep":"","tlshash":"f6410ba2c3b63a51b428f219ca4b044d150abeae3534f074714e365fe67d3637aa9051","first_seen":"2025-03-09T08:32:31.721939Z","last_seen":"2026-08-03T12:45:31.024396Z","times_seen":47,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/link.png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /link.png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 5120\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9iPI1iy7oB%2FUpvycXa2okZOmNgO2%2B6N5XEH%2B%2FJvlC3y81FdDflhjPE1FOZKDfljrpHT5CXIeMG%2FajRPA%2FxDaefg90iTGOU5kDV4X2YD\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"29ae853fe2eb20ad9fd78abdd8c13090\"\r\nlast-modified: Tue, 24 Jun 2025 11:38:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d6a8f5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5120,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"29ae853fe2eb20ad9fd78abdd8c13090","sha1":"047aa718bce1fc3ab6c47a22a100574a542ca727","sha256":"6180dd8f67f797ea2a3626cc1629bb9382f086b405ddf05084339db2b4aee353","sha512":"eb67b44d148ad2e4741d5edeee59a43b2f14b0cf3d936a05ee2106be3561d9d118a1cb39347279dbb850599ad9bc3491188a5b18e56888bc4a15f18e21919ede","ssdeep":"96:K8xFiL0SOZIHqjpDa+Bffrxgf2NEvPeHZqqlyqv126YWE41eT7hbmw:NFiIQKjA+5rxgf2uvGH1lyqNN927hv","tlshash":"4bb18ce0a7991dda92272bf1b387693f3e23c3d28500a456a0132666dd5374f4f3a35e","first_seen":"2025-08-31T01:19:13.287706Z","last_seen":"2026-08-03T12:45:31.029423Z","times_seen":24,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-c2cc53d2.css","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:38.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-c2cc53d2.css HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-563a5\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWSVce8nLnK12%2F2v1hX24gKIWkCC%2FTBoMprB66W7zGcejQ%2FX07IandE%2BknQ1DjV90xDPcq%2BVOKwRx33Ayvr4vo8FtFxFHhNsEJo%3D\"}]}\r\ncf-ray: 97bf222f3a10b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":353189,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"a7d2d62ce88fd9127fb3c580d7f0c289","sha1":"6a2cce9e8ba3282d9fb9d5bc8df500bff877de9a","sha256":"c2cc53d25d803844f0d190b7d420d69eb412b4f15dcc52bfdadea97e1d25799b","sha512":"d34de7015a872fcd86bf52ecae2b37befe9ee6f6678b7b840f72e65f00d52df2278dee34e0415339fad089379ffcca855bf482cfe9fc60bf4628508932e00bd5","ssdeep":"6144:n8vxsal1W96kZ8w71ZACkFDS3vyf58rBeV05TDK1:8v1C9XZ8w71ZACkFDS3vyf58rBeV05TI","tlshash":"2e74d769e580817d6f17a676a7ce5ad8f23dea61cc018fe9b20520494fc3bf91363217","first_seen":"2025-09-08T14:29:09.840539Z","last_seen":"2025-09-08T14:29:09.840539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/sol.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /sol.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 4222\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmKaSFW7IsbH0IQUzJEv5cWtwln2ty4LPfbvWHtz8nboUMPMBxwJw92iHFAatgZ05jDwT%2BBDgXRyD1IzSI7L%2BehDjYGdXAl1rdj1tcZJ\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"0bf2916a9c679e99dc9060ee1cc2dde5\"\r\nlast-modified: Tue, 24 Jun 2025 11:40:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d4a6f5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0bf2916a9c679e99dc9060ee1cc2dde5","sha1":"7b54d567258f440651c4a41d2f955c9c412451bd","sha256":"b9296ce1118a6d150e57049190aeb4c024199e0787e0c6198c244230b8d704f5","sha512":"1749edaf7c45f50df246f209b5d26801f3ec20f449a82a9deff48b348c5fded272fc3cfdaec44eccf27ffb5225774a7ec0c6a564d7a0e558665411d5bc3c8675","ssdeep":"96:hvuOg3LKz5FT+ae8o5VngkGBh6WQZsrHzXIY4:yYdzinN6wCQY4","tlshash":"ed915dd8f39d7610a3c05d3590aa3ff78ec6818c0c258888f926f67c54ad4e11c85e5a","first_seen":"2025-09-08T14:29:09.791256Z","last_seen":"2026-08-03T12:45:31.030519Z","times_seen":47,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/resource/images/artwork/none.svg?2.0.1757264427522","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /resource/images/artwork/none.svg?2.0.1757264427522 HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: image/svg+xml\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nlast-modified: Sun, 07 Sep 2025 17:00:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aVmlVDXb12PE6G8BdBICajP3iKfX4E5XWOU3kMwfijiHuW2Ad3TbWNu8J%2BgTMNaJXMWM92Lfhc5pFxKpLoc133mCcMztymD%2FExM%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\netag: W/\"68bdba1f-9794\"\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf22388a89b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afbf605b2f42a2dafaee5614af372d3e","sha1":"7960ae871f3b2fdf0b8895b71937de02d19ecb2b","sha256":"c8514d928906fc685d770f0186fbf446a61f15823a7ab523d802533aa9c1c856","sha512":"bdb6042df0edb8f0fada1cbfbe9a7b52e1bc077501426510b736c61a4c5493da16aee3fb10a6066222f12aa9ad026c43dfd25c1688d66ec789df22ccf6865a29","ssdeep":"384:aX2YFJQ5U6Qqq4GZhzmlMxtHPCYopNCZiQgMkpYKf2LFvBbqoKnLA5:IbQ5U6Qqq4GZhoMxd9PZiQJZfvonLO","tlshash":"7f03772253589b39f542e38cdb9110b6741e8893cd67a098fde78b496f359fcc28c29d","first_seen":"2025-09-08T14:29:09.842196Z","last_seen":"2026-04-03T04:37:59.003642Z","times_seen":3,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/btc.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /btc.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 2589\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZjKBJwj%2BYcXm%2Bdsf7GcvcQ2CPbsn1EetVxOBLKlSXIWJfoTJdptGPcUIMDsXi5eGjVLjq62ZIo83%2FyHD94A%2Fa5%2BMa5ea%2Fxb9EmFqNOnY\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"8f8d12b8691a706a99e7544bd33527c2\"\r\nlast-modified: Tue, 24 Jun 2025 11:36:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d2a455691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"8f8d12b8691a706a99e7544bd33527c2","sha1":"1ecd8325658f45911e28e94afb85f3aba3ea38c4","sha256":"8022fd53c251f18cb39cefede445f1c78a3b265989232f0bb46b9c4622e55a9e","sha512":"36abf50c637a730a26ceea1ab4e2c9d153274b5c1a03d273372f0b580eeed3267d08d4512326da520bd19b425288d72f0c2edc8abdbd3549b03612c639946021","ssdeep":"","tlshash":"a9513aa1c3955ea0445ad9910b83ea56263031dca284f7d6ee3024900f68b35b4d2b73","first_seen":"2023-04-13T08:11:26Z","last_seen":"2026-08-03T12:45:30.90421Z","times_seen":343,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/doge.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /doge.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1597\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfBsGasDZcJ8AoBxeVRK1Gh84e9xGVfgARTIUU8SIkiCkDu%2FQmjfILTPqie0lDhwoD1ZCrmFtebnPi9PMhmt72gbYeoeJyDzuDB1qYw0\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"1938a5ea7cbe7458795a834563258ced\"\r\nlast-modified: Tue, 24 Jun 2025 11:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a735691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"1938a5ea7cbe7458795a834563258ced","sha1":"d969fd854e1a997b7817ba60800cc1c7a6a1423b","sha256":"4a789f36f6ca12a6d1901ab8441a9cab7a4a9a5fd4ba87c887c4d45c729fffce","sha512":"e940ff74f8cb4f53b7463bbcd2b118e9d7c818eb8d2ab0a2ecfdce172e98cb91c44a4d5acd49402b12803c2b273d5ce3f96e1295ae612368bfb78e7f619546e3","ssdeep":"","tlshash":"bc319846a655c394f3cd0711c30b4a56215e579c786170c056b9a863cf393a8d5fef71","first_seen":"2024-11-30T11:37:49.082714Z","last_seen":"2026-08-03T12:45:30.920027Z","times_seen":77,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/btc.png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /btc.png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 2589\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sz%2FKUPhEFgXtXtYKE5Yepb12QC9rtaldPtO03UifD6BSwVWKFhUzTlqt%2Fza0dddhaE%2BN0%2F4FK8XSoXBSGmGpvUIWtYbJHyiefpUttp2t\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"8f8d12b8691a706a99e7544bd33527c2\"\r\nlast-modified: Tue, 24 Jun 2025 11:36:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a7d5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"8f8d12b8691a706a99e7544bd33527c2","sha1":"1ecd8325658f45911e28e94afb85f3aba3ea38c4","sha256":"8022fd53c251f18cb39cefede445f1c78a3b265989232f0bb46b9c4622e55a9e","sha512":"36abf50c637a730a26ceea1ab4e2c9d153274b5c1a03d273372f0b580eeed3267d08d4512326da520bd19b425288d72f0c2edc8abdbd3549b03612c639946021","ssdeep":"","tlshash":"a9513aa1c3955ea0445ad9910b83ea56263031dca284f7d6ee3024900f68b35b4d2b73","first_seen":"2023-04-13T08:11:26Z","last_seen":"2026-08-03T12:45:30.90421Z","times_seen":343,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/common/getAllSetting","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"172.67.73.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R2ktRYKdBPu4KnCBYSiuvwSaPppnPOXgivguorFmdKcSYwCucf2FlLPh%2BBgFQN1eO26xtuIgDvcztyALJFlIfFG9jU4QqG4C2RtlIRGR\"}]}\r\ncf-ray: 97bf22351a137127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/8360596e-5a86-423b-a50a-d758f117dd84icons8-gas-fee-96.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/8360596e-5a86-423b-a50a-d758f117dd84icons8-gas-fee-96.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 4612\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a86QUCt4mXdd5DtHiQBsSwmKe9%2F5NetTrYcQZfmBmvFyWTGGlw6kmlUOx9n9cStALHEOydqmJOw0fpNw5i1Oq9wJ9UXPDvKV3Y9DEHDA\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"d3e679d4b0ba00e2e341bbfbf93a7eed\"\r\nlast-modified: Thu, 26 Jun 2025 16:22:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22398ed75691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"d3e679d4b0ba00e2e341bbfbf93a7eed","sha1":"c24912624abed900c5682c03d5764f0907e239a6","sha256":"3c782a0c3ca2b6c5f5a1c607dd91a0585b77212a4b9e1169163eb01a59408814","sha512":"9ee9537d3eb79f9e66d3e375da24e3270ad9c61aedf6ae637d54804d23332b18b4d2b372591816097a0abae6f6dd5ad60ba0db73ec4a5fc41af71e111929be76","ssdeep":"96:CSQfcKhWeNJKSWOpcHbbjj1kShPqd63TQNqD0nyQBHFEAU+G9:CSQfDkefKtHbbjx/m6DQ8D0jHIR","tlshash":"f7916cf582231ef280a0d0a184a2a58658b73b8e79036807135d28576ca79a41efb27a","first_seen":"2025-09-08T14:29:09.852102Z","last_seen":"2025-09-08T14:29:09.852102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":232,"dns":160,"connect":6,"send":0,"wait":199,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/a06f3367-183a-4e01-a2b0-f75a8bfff2ebicons8-add-96%20(1).png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/a06f3367-183a-4e01-a2b0-f75a8bfff2ebicons8-add-96%20(1).png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2476\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0gq10xJX6ImhklngHuB7cunx4QKu14jHWt1uyjxOlT9HSwYit0pmZBIWEorTkZqm7D3VUrL2spwquOLnJGi7CGdpCoZmHoLWhOw%2FM32\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"9970f2aecedcbc48e851165baf7f9bdc\"\r\nlast-modified: Thu, 26 Jun 2025 16:17:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22397eb75691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"9970f2aecedcbc48e851165baf7f9bdc","sha1":"52a25c6a0449e5330232f1c591b460b0c80ce2dc","sha256":"2dc0a1d0a464106662d78cc25ba4fc157995d61bb2bad9ddd4ff8be8babedb0d","sha512":"9eac5fea8832d1cb8327517c65b34f7197c7348f0d734bab8f261cc8c7b886a8998eb21e6b7eea3b5a5a71477cf2205d499b3357d6f2f0245be0109a50d4afb3","ssdeep":"","tlshash":"0e511ac994000c93e18c62e23b910f76e90ea92ea8a28805e5d5f84e6b3cc94b15d465","first_seen":"2025-09-08T14:29:09.85556Z","last_seen":"2025-09-08T14:29:09.85556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":206,"dns":0,"connect":0,"send":0,"wait":194,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/83e363dc-fa99-4f69-afd0-2d231c71b56cicons8-diploma-96.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/83e363dc-fa99-4f69-afd0-2d231c71b56cicons8-diploma-96.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1369\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1q7XNGPj8Yhy6U3Bl6w6qt8QFTWzS%2FvOrZI%2FlixNuuqClUfV%2BalImuHzRmCBfkbExW7WSZpnoEqxUG4bDkCqP6aGSbYOBULgq0l22yKB\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"7d11eb10516db29712f853f858c63af4\"\r\nlast-modified: Thu, 26 Jun 2025 16:26:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22397ebd5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7d11eb10516db29712f853f858c63af4","sha1":"460bde19b3dd7a43fe5d7a9200cf20f103d0d77a","sha256":"7b0348288a00f3763654fb73480ce218dc4ce002dd6ae2ff22c23275e3ca49cf","sha512":"53b152917e0e3006d6aba4d6110bd0b10cec4cd4104e76a8f2fb679af6387b0086d9390fad1baa2597b3d281a2c72fa55d94b4a3ced88ab04591f7b6ef0ccb01","ssdeep":"","tlshash":"7f21d8ea3a5bd8be41a304a58cbb13aaef1311080d56db56b085869b014bf04671e7f3","first_seen":"2025-09-08T14:29:09.857538Z","last_seen":"2026-04-03T04:37:59.035328Z","times_seen":3,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":200,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=LTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=LTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LnZEwYmbmmMbkjcTxFuYglB16LQ9inDruWy6zb8HOgompjNC9bonc432TpgfHl3Bf%2BHUq3HL8zIMhsfpBQsyajNOZiWlzxXYrzHqOrH1\"}]}\r\ncf-ray: 97bf223dbab3b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=TRXUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=TRXUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bha1bT9uS6gSCM58DNWNG4bSffsuyddKPxlTtj%2FSC9mq49%2B7f3Mf6Gi31zT6RuvDxSpBXPFOgdKu8NDsxbHJWLQ8PRusVq8vDvowiQs8\"}]}\r\ncf-ray: 97bf223dbab7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/bnb.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /bnb.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1494\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6NuXEFbTp%2FjhyqCh2dccfrf4D804VEkgz1U9Nlqw07%2Bv9dquMQCsOpkFRauWvI4NNXHi4z4xeqN0DMZ296BL3ljwkjXQPl5wkUtGRU6\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"fefe5d0b26806c858130f0eb454e1106\"\r\nlast-modified: Tue, 24 Jun 2025 11:36:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d4a675691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"fefe5d0b26806c858130f0eb454e1106","sha1":"8f540e4d9b853acc0145bd37ec42fdeecd7f15f7","sha256":"7aef69406a4a5c74bd3569222a4fb3e534c8c6c1446755fdec7d7687bbf38a04","sha512":"98af45cf72a49d0776a57edc8cecb299d206723d1772c64439738e508f27ab92f0a06608bb76023267a34a8b433cec216329a8847836fc381f818ed2487fe3ff","ssdeep":"","tlshash":"2f31fce221413443e91adab851af83637ce009a05b8392456dd576d7b779ac45b44812","first_seen":"2023-08-29T23:22:40Z","last_seen":"2026-08-03T12:45:30.973311Z","times_seen":71,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/vendor-f04b2417.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/vendor-f04b2417.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-10dee2\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1swo7r3sLV4vt3rWClbNw%2FxF0RB1n46w58deu6GhMLNM60wi9Axmkvgmp%2BFhhrA0GnEHfZsSvpiXrcpNjY0zVsXiftTpN71M%2Fq0%3D\"}]}\r\ncf-ray: 97bf22316a32b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1105634,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a0a13f612e436e9c75e95a658b143c9d","sha1":"d087e2f6a56b8a9ddb65e4877c5db4eada1eddd3","sha256":"a5e7b77d3c9d8c5e7c76a9129202758e7c60df13f30d857e80190e9c0987210d","sha512":"941577444685c09b6936ed957028a7bccbb125e26706042cf31ed8d53bb32260dcca240764b77eb054896ad935daf9b0bcf70ae068d79d2dd1245eaeeb4cd7ba","ssdeep":"12288:F4GDlC1cW0F8C1YLY5ClKQKMe+hYUmCrfFhp0Wy7WfRPoxRO:F4GDlCEv+muKQJ3mCL/p0Wy7Wf6O","tlshash":"982529c57592f06547ab14e240bb0002f3396e59740ec4a4f1ad98eb7d7ad89a2b7f3c","first_seen":"2025-09-08T14:29:09.861827Z","last_seen":"2025-09-08T14:29:09.861827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/vendor-f04b2417.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/vendor-f04b2417.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-10dee2\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pz0xME1L%2Bbj2Q%2B1%2FZ4tiBWKQbEPTkerlYZ%2BFcLYGpq3spOw%2FipVkEhWFlilTu9zBcvZLJ7MNw7YGniLN5xnPPEfgEBWBwe4096c%3D\"}]}\r\ncf-ray: 97bf22346a4db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1105634,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a0a13f612e436e9c75e95a658b143c9d","sha1":"d087e2f6a56b8a9ddb65e4877c5db4eada1eddd3","sha256":"a5e7b77d3c9d8c5e7c76a9129202758e7c60df13f30d857e80190e9c0987210d","sha512":"941577444685c09b6936ed957028a7bccbb125e26706042cf31ed8d53bb32260dcca240764b77eb054896ad935daf9b0bcf70ae068d79d2dd1245eaeeb4cd7ba","ssdeep":"12288:F4GDlC1cW0F8C1YLY5ClKQKMe+hYUmCrfFhp0Wy7WfRPoxRO:F4GDlCEv+muKQJ3mCL/p0Wy7Wf6O","tlshash":"982529c57592f06547ab14e240bb0002f3396e59740ec4a4f1ad98eb7d7ad89a2b7f3c","first_seen":"2025-09-08T14:29:09.861827Z","last_seen":"2025-09-08T14:29:09.861827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/4a26bb24-346d-404f-ad5e-610cb9fc57a9icons8-promotion-96.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/4a26bb24-346d-404f-ad5e-610cb9fc57a9icons8-promotion-96.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2476\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4PrtCRooExzqKORiTc00BA75br%2BQybm7QaVcgIFRCpS0WjPT8uuee6tuzaLGTYJ9b2IMg%2BgSD6F8YgPWGRMFqOFrK7%2FCPimcI%2BoC35E\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"7f8f2cd0ebd4f3466d81f3590be8175c\"\r\nlast-modified: Thu, 26 Jun 2025 16:09:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22397ec25691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7f8f2cd0ebd4f3466d81f3590be8175c","sha1":"02b7d6e3894d64b154f38be02eb73511f3ce5667","sha256":"b4ef8ce2559e93202d8c5337ac18f590c84d60d8fa7b5d6ce5a8281cadbd48f5","sha512":"f4f02a9825c4c52e28880878cc4a755ba56a0719a5b3bd6bcb485d1f0a6825aa60a1e3648ca317873ae95c83d86b14c6bc9ee8cd38a43b3503043e1dae773ca5","ssdeep":"","tlshash":"66511affe8e9afa3b99d173b5103f8c114a54d1905409be09af984aa2342664a3cc338","first_seen":"2025-09-08T14:29:09.864513Z","last_seen":"2025-09-08T14:29:09.864513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":161,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/eth.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /eth.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 3437\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLz%2Fa1gFwJ2XswVmFCpSgXUlbXlcuu19MOZDQGkQbN3nu0Osx7Rbzw7Ek0THTTN7SE%2F160ekCStYCmhJwV7V3vVfjCbm1NgAG5bGwR2q\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"174b0414fece541456d82f84a296e380\"\r\nlast-modified: Tue, 24 Jun 2025 11:36:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d3a515691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"174b0414fece541456d82f84a296e380","sha1":"b5705bc9d5e6c5d7f70e9a1a2773f7211f474657","sha256":"99bf2102cc13a51bb226f931b8d0fa4c5b3ca9dc4179167e89d7ee3f677c3fdb","sha512":"6a5fb1f896da4d1bda7474e19880294be83017a5da5cd39113adfeb5032cb9b7566e706845209e4312408a99b7305b27a84748637bed44aa2622246bea0bda94","ssdeep":"","tlshash":"a5615d8d039107bec5d46349519fd6698c278705862f4fe84b67c8fc0e99dccc4c6b59","first_seen":"2024-12-25T23:55:17.402619Z","last_seen":"2026-08-03T12:45:30.825498Z","times_seen":88,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/vendor-4b39a398.css","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:38.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/vendor-4b39a398.css HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-16c35\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYK%2BwTCMU9pVg2ciqQeq8Rgxen9sLADvgdk%2FSbBIhq7UqeCFNSdxlrcK5gqvHvL5GYUI6LdJAt1KAui7ZO5Q8AVI3nTBxRV0Res%3D\"}]}\r\ncf-ray: 97bf222f3a0fb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93237,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"2491919d901ad15e82d6c1245fb28968","sha1":"166501022e953ff7bf709e96198c76d4578676de","sha256":"4b39a398237e9aaae03327bd9216047be19b6587a469195ed9160b96c9b5a819","sha512":"c538de42b89cda2c728d4b43d017565e1ac244b948c4dedf116cff1b0d085f16948fbb5d42b798ab020ac7dc3fd8ac2e56ecd365b07edac5e1d25d08edcb73b9","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/Bb:BnNIClDsIxuVS8tb","tlshash":"bb93d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-03T16:32:00.309427Z","last_seen":"2026-07-28T19:41:49.743883Z","times_seen":237,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/solar.json?icons=chat-square-outline%2Cmoney-bag-bold-duotone%2Cwallet-2-bold-duotone","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"104.26.12.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 02 Aug 2025 02:07:29 GMT","end":"Fri, 31 Oct 2025 03:07:26 GMT"},"fingerprint":{"sha1":"14:0A:7C:6E:37:65:51:AB:C1:67:54:11:32:93:D9:69:B8:49:82:FE","sha256":"1D:A0:4D:26:2F:F0:16:CD:C3:DC:6D:21:E2:24:CC:B7:F8:83:21:84:5C:FE:EF:F5:D0:5A:A1:74:DC:9B:FD:D8"}}},"request":{"raw":"GET /solar.json?icons=chat-square-outline%2Cmoney-bag-bold-duotone%2Cwallet-2-bold-duotone HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uY38vbvWZAHes3mIDD4vX7erEdwoqz3DTmRf3n%2FR3ROntrvcslBiQ83UR%2F1Acnypy4KWzEGOccY5HrlOiQXR6kmpcklq%2FKC4cJciV0go4fo4\"}]}\r\nlast-modified: Sun, 07 Sep 2025 17:20:25 GMT\r\nage: 47692\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97bf2239ecec75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4200,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"597933d777138950ac2925d0d78d64a0","sha1":"585ca52018ce433311daa3d718b1bdcdbc11c86e","sha256":"ff3a757d584eba75818bb0436b2c1d30bace83215e59b681f88d6ffa5779c642","sha512":"feb8b3bf1be66703b356b70206345178ea86d16ef6de7fc93721f22f327ba03c80dc1477100429915c4056714ac4001789c54d945c9a4f4940d7daebe8496548","ssdeep":"96:1JrQ8VLDyBBQeKddBhvOayIeWLf2SzQsL6VhUNhP/YC51kswJ0b3Qdg:zvVPyXKzuaZlYW1kyAm","tlshash":"528166c54330a3dd5a8be66fef66dfa4523f74b53a7901c009becb181187999fe01854","first_seen":"2025-09-08T14:29:09.867601Z","last_seen":"2025-09-08T14:29:09.867601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":37,"dns":18,"connect":1,"send":0,"wait":12,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/ltc.png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /ltc.png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1660\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vce0aW9vzxHweHDim0e4%2Bcvh3k7Vsv%2BzQAhs3LPWnSqTXBGKmnnSnBQHMQ%2FweaMEWFBmyQOkWuRCVSP7m0kxuqTu1cGImf39gPUuFKeX\"}]}\r\naccept-ranges: bytes\r\netag: \"95507ffd15fb458032339c7dc775ed70\"\r\nlast-modified: Tue, 24 Jun 2025 11:38:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a835691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"95507ffd15fb458032339c7dc775ed70","sha1":"e374f127ccd850868577125ddda835210f9f9c12","sha256":"7160750bcbc115ac8a3229bc1120fb59e96a737d607a57b42fa8e2b092a14159","sha512":"6fe799554171ee690f22ad0c86752f8ee12826ca378e15a0531b50d1f84458805ca6abc9ff8684bd62171afda6ed546ed21ae7dfb6689de65a248351fc1f3a58","ssdeep":"","tlshash":"82311a099a662da282350f2ae84c6128cd012340cd0123d7fbbdfc12d2e81c1503cea0","first_seen":"2025-03-09T08:32:31.736669Z","last_seen":"2026-08-03T12:45:31.015564Z","times_seen":68,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/common/type/defi_activity_type","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oF3OlEOAkENqDCj7N6usrUDmgoxu57eQ2%2FltsaHe%2F7ebmbYW%2B1Lbvpu9W%2BLrM90QCTUmXoHDaf2jvB7CE%2FyakdKgbJ3m2FE8eJ8W4Ozi\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf2239ca94b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-07-28T19:32:04.761168Z","times_seen":800,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/trx.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /trx.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 6884\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uWnLKLJ1l9RwIW%2FCQs5hjzv%2Biu2uiY9DeFJLdm7%2BCnGo9nLkgwVb16j8sd7XPBJQ93woFnr%2FsKNEJOxpscLy2LCWyBC4whFG4%2BSAqoLA\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"4485ad0ffccf92c98a17fbc03505699a\"\r\nlast-modified: Tue, 24 Jun 2025 11:41:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a775691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"4485ad0ffccf92c98a17fbc03505699a","sha1":"491829698bcdfef16a76dbd51179a9407eb3b15d","sha256":"91329e8a180b0fc75f4b8b4cd252a64e4f13f33edf4aa6664fbde442cedff001","sha512":"1596e5a7cc7c103f73df1a61fd50c377fbeb4b0b71c8d6aabe7d0d021f7cdfd96679f33352527d74688cc2f2b5f6a1488f46b21e3d2d7d2f578a79f6f8e64ffe","ssdeep":"192:bya20oqaVgVwA5+c+Eq3IHUUDrHph1LbpwxS9wgF:byGoje6ol+xadLbbRF","tlshash":"62e18f13d15e5e08c6cf21308773564b6facc5307e0eb2c12f76a6514d2ba809fa132e","first_seen":"2025-08-31T01:19:13.315017Z","last_seen":"2026-08-03T12:45:31.038454Z","times_seen":42,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/ba193e95-903f-4bbf-b0b4-064556ea67f5expand-horizontal-line.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/ba193e95-903f-4bbf-b0b4-064556ea67f5expand-horizontal-line.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2532\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TchU8bSX%2BOKNaigLec2PRLiPxU9aT4HYwx1M9q848gEnt%2BkYO2pylLHnPy4lFWbhvJBPyPzfUsOipuuS9A9dEni5HL19csxCtH85OGHd\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"672293c081a7b19f8598c485e8d38b31\"\r\nlast-modified: Thu, 26 Jun 2025 15:41:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22398ed55691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2532,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"672293c081a7b19f8598c485e8d38b31","sha1":"8cd34abc5594c67c12377d9f950ab7a162d238f0","sha256":"66010db47ad9fcec241e2118260e922c24388a5f7d9c88a7dd1e0adc37e7265f","sha512":"567aad96689352d486687044f5f86c5d44c5d024776c057df6a283e434bbf5cbb4557d084821d44169e66c9dd5854eaad1bdd9b59feb629ac0032e99ffdd6b17","ssdeep":"","tlshash":"bd51543ac2eff580aeb0122abe1a015d4132d774865f11404767d91a68fddbedf2252f","first_seen":"2025-09-08T14:29:09.871144Z","last_seen":"2025-09-08T14:29:09.871144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":136,"dns":69,"connect":5,"send":0,"wait":199,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=XRPUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=XRPUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=opLdBp8b2dmrPdAb6QRaWR2lLgx%2BQ5zknsRE35wy9KTtPME6hs8XtH%2Fu6PDaHEBsaUlJ1Yl5FS5TLO6AxFu4V%2B%2Bf1He4GP1%2FpAld4MlM\"}]}\r\ncf-ray: 97bf223dbab2b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=SOLUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=SOLUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=257sdshypoxspuaDWcOAdb6luBC%2FO23%2F1NJvgrS3d1SHWdKyXHIJ1FkoLBTfK%2BnCnq%2FhxJBRTu3ycPFz9bgGmGzRJxBaJAyPmXnRBE9U\"}]}\r\ncf-ray: 97bf223dbab5b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/filters-4c2daf36.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/filters-4c2daf36.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-ac8\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppGktM5flOxn9Dv7FYs92IIIj6y6Bi5%2FdU3EXofOWNA53IjWnx4MWKZ5K5faiTCV6K5dWHAF1aITgdnoh6wPX4oCnsVHYFkpI3A%3D\"}]}\r\ncf-ray: 97bf2234ea66b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2760,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2735)","md5":"0f2ebff36cf3224ee199d696cbccdecf","sha1":"1459dfd82d54434bb58d48cc326bb93ba2cf41f9","sha256":"c88092655c14a443ca73dfe3d4de862c2da7f1277547ae0389953c1d22f53f06","sha512":"0dfdd11f2ab0ee5ac411bfad5bd7888a3cd3fc617ddb0f7c580bfde35cd54fdab284b8cddcef1fc5aeddcc745c3fab51c548e0dd3f16d109482bfabf67cfae0a","ssdeep":"","tlshash":"e35141edf486a13726fecacd401d4515f0cb7f19681b0e5afc5ad0562467848d4bf364","first_seen":"2025-09-08T14:29:09.830164Z","last_seen":"2025-09-08T14:29:09.830164Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/common/getMt5Amount?coin=xau","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=keeISHV6PVgABRi8VgVQlg0csCJnCog8MAiECrPI%2FCD9oXTW4N%2FzRjFsRJCl54V%2FDXfoa94tSlb5sO3NMr9j9Qrd8dKTsDXBDYc2Mwwt\"}]}\r\ncf-ray: 97bf223daaabb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=LINKUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=LINKUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aiV6yqMfOpKc5ExpoDh%2FOifWPEjUFmuF0%2Bzx%2FQK483dDIhxStLNjL0Id5eqKbeYqUgSCE1YnOpYe8%2F%2BCCin%2Bokrcjy%2FTEDrWWFyu6IAD\"}]}\r\ncf-ray: 97bf223e3acab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8044,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6aac52dcff82d84ec9f805b5bdd142aa","sha1":"27f6241db1ac84bfe9af81c69ff01618b53581fe","sha256":"15833130bb2986b04dbce72864b78aebb968e5f37223493fc6e9047cc0c3fd9f","sha512":"c5901100bf8c92b5fe6447c31d69a2f7ca991268c57ec246eada94c2e72ea7e35693011993048d38b84ff91affd455575a35eba49a6c3033f37cf7c5b1bc2fda","ssdeep":"96:Ha63DIzlh7EPnsoCIDu6Ojj7Aq1ZPL/5elVIaHECUniUiXWcOU:Ha63ahYsEqj9elvEiRG4","tlshash":"91f17e6e1284c754fa39880a2396fc561e7a714bfece0de0c8d46bb71de13b25b08751","first_seen":"2025-09-08T14:29:09.873663Z","last_seen":"2025-09-08T14:29:09.873663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/currencyItem-cad3c5bd.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/currencyItem-cad3c5bd.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-337fc\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wa%2Fq67THX8%2FUYMQv63nouQRUzPjdPpFzpXJ8JjO%2FJMYb5nmO8ND908tYjQyO7MrK4tVvdw3xFTq33htpndqI6767ntuo5rltQks%3D\"}]}\r\ncf-ray: 97bf22365a70b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":210940,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d57083ab5ea7f246dce427fc09ee051d","sha1":"ab70cee5fd5caa7e731f140c81f8c46ee497aeab","sha256":"a190bdef401a9f6eed914d8e2b0b2e830612a23f3b02cb1080ac45ce2364a48e","sha512":"a15a20bab6199fe6ca724b13b53a67ac307e8d0d90f73d40726b8b718cc04191fd3bdc5484d882299664f94264b9d05b1bf16d39aeb344c5be9376cc67e00460","ssdeep":"6144:lEpG/7jgUhkGpeOB21A4YQbisXeeah20QAw00v9BQMh3Z/PJq:lYAjgUhkGpeOB21pYQb5eeah20QAw00y","tlshash":"ed24e6953342b12282e256d6583a0506e3357a483547899cf6bc4ddf3c6a98bb1fff38","first_seen":"2025-09-08T14:29:09.876681Z","last_seen":"2025-09-08T14:29:09.876681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/dot.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /dot.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 5651\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0m9foXl4iaEe6dEK%2BRXqAlfnoaTiWdT%2BepQV0n6BjX3vrOvRcCySNHU%2BBHfxbJPzL2PXYfqTlaVv2UYP5UmcEZV%2F1eSEjNOyn9tkM0d\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"f272c9cc7e4ce5cf95d5318496ff1de0\"\r\nlast-modified: Tue, 24 Jun 2025 11:36:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a7a5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f272c9cc7e4ce5cf95d5318496ff1de0","sha1":"2abf6609ede007e2ea8e734ece29fe1dae4ceedc","sha256":"6051b0de048fea17d91be204b3c2025e16265c3a5e65759bf254186e77d41e6c","sha512":"dffb29fbda41c9e3ab588981936dc07a491b2e2f03d4c2016fc07869b412eae14486e7be1193fc7545ddaa5e046a5b786424a53049fca02b248f57e0954e6793","ssdeep":"96:K8YMAU3VlXB77NSz5mHgNmGRwXO4s7Mc3xniDYdhGm+cTQOGvyKA9u1yDH0d3t:kcZ77MmIRqOl7MGtth+cTQ4Hucct","tlshash":"3dc18e40db29c0eb462d56f181a6133f7b9b5211a183336a60fd917e923fa448bdba47","first_seen":"2025-09-08T14:29:09.833353Z","last_seen":"2026-08-03T12:45:30.846586Z","times_seen":34,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=SOLUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=SOLUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUT%2Fe9fmJn%2FAIosJY%2BMlUSJAznSCASBpHsRuHATK0%2BUCi%2Bs5FzZU3Yn6jHyE%2BRiohVWxKEaYd2bg4HlfHCher3MmK8dhrDoVxJkBo1le\"}]}\r\ncf-ray: 97bf223e2ac6b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8435,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e7052f0cef1fa9fce6dccbef628e0533","sha1":"39129ddd39973f955f9caf34259c941db162e4c8","sha256":"df7aeaab91648ebfbc8d99e21f9588e27f3c5749096523ed6a8dcd0db73e9b90","sha512":"33af8e3eb15477b487393563cda6be43675c260e45ab0a84a84c4c4bfc0f6de76cad948ee7eea0485395a3e3824d1ae3f90abf05b8949198633e29b5cbb85f91","ssdeep":"192:PrkEAW8nR1tyop1AblgDEkb//xeTswelMmgCTCbjiDtQB9:PrkEc8lgLHATsFlMmFo/","tlshash":"b8022472138487b8fa368c4a23d2f9621afb3117eece0dd499d2677349f13725a18b54","first_seen":"2025-09-08T14:29:09.879216Z","last_seen":"2025-09-08T14:29:09.879216Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-07-30/246b3bbf-420c-483a-b8ad-22a54470f77e%E7%9F%A9%E5%BD%A2-1-%E6%8B%B7%E8%B4%9D%20(3).png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-07-30/246b3bbf-420c-483a-b8ad-22a54470f77e%E7%9F%A9%E5%BD%A2-1-%E6%8B%B7%E8%B4%9D%20(3).png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 147326\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYvLU7mfGpIluVSkyEG%2B40mXwAnKDyiA4kubmj0N5g0eLzwydEpAv2eMORSMhUCeRhJOfA67r28oGPdph%2BRZQV2%2F6Ed70Ig9X6ccC0gj\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"1c41570a712a103a4d0c4999959f9c61\"\r\nlast-modified: Wed, 30 Jul 2025 08:19:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22397eb15691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 278, 8-bit/color RGBA, non-interlaced","md5":"1c41570a712a103a4d0c4999959f9c61","sha1":"6abf57fb3005df6e99dab539903eda6530bf49a6","sha256":"f4d10ad43409f3d7bf78793328829d7e7385d2a40588b9e04c79820ccf60dd91","sha512":"faee48430a9468ca8d94923aa39610939085ca0bc92f5afba80380456eb99fc1fce31c6bc1825a924226434848840c47c50f3f0bb927a2c67661657b06cc7bb5","ssdeep":"3072:FZVMwvkkSzY3Vbde/vVXpYNVP1ekEF25N3zA+rV:F7xkPclAlXpeBrV","tlshash":"9be3138dd2cbedef1cd81243458be11531f481f5d3a65a28c82619bc69c29eb7e2e7c1","first_seen":"2025-09-08T14:29:09.881661Z","last_seen":"2025-09-08T14:29:09.881661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":257,"dns":199,"connect":1,"send":0,"wait":200,"receive":11,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/28530267-75ba-4712-bf77-109db047a7fewallet-3-line%20(1).png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/28530267-75ba-4712-bf77-109db047a7fewallet-3-line%20(1).png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 3225\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ntqxp5uNrlXbPNg4TcQN2vbWQDdcFI%2B1SFSKDSXFuLQP9fmjgZoezMWCuW2rl24BHyCchaEQZj41oJyVcK%2B45hRvns7%2B%2B4kYLkQSuOg%2B\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"328efc2c417a37edf0230b99fdaf1b92\"\r\nlast-modified: Thu, 26 Jun 2025 15:44:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 97bf22398ed35691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"328efc2c417a37edf0230b99fdaf1b92","sha1":"da1ccf5cc264f9b36eef0b0d23ad41f9cdde834c","sha256":"9cf21a593c7f170516ab435296c51a9b3f7c7032cef117f490268661ddc8c053","sha512":"3dff0b72080d4c7a9cb28313f02549dbf918b6a7811d374d96ed77ec3c421e2c03a59675bce20146ea394b44fe4617b53e46fbda9020efe01ebed1431c5455df","ssdeep":"","tlshash":"0b6109b07dcaabef860eebcd9ae52c29056751e11f89d5fbe1d78700002c286f182246","first_seen":"2025-09-08T14:29:09.883849Z","last_seen":"2025-09-08T14:29:09.883849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-08T14:28:38.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=8,cfOrigin;dur=132\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ql064r%2FYyS54KzKCiAdf%2FQepp8F0sxh55FMyy3VoCzdGCVkC7wmdCTh1mJsFdU30N8illpN2fanrPLfo0HpyFeML61qOb1LLlUMpA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 97bf222d1a3232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8335,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (578)","md5":"9d2b9021751a540b4afa75fc68fb0ae8","sha1":"7c260755022eced94ad5416782192efef3a97945","sha256":"42b163bb1140a44ee13919adc3e98b4c07546e1befe67ab76e4721b4e1b88f8d","sha512":"ebe03d770d5d00c79b42c0ab2d7ca55719c2c430172fbb4bbcb5cf8fee313fd9ab1d97222c4573b591b94d44919ea8c0654e30cd93bf985f31d08f35059f70f8","ssdeep":"192:TFPnUOpBHYqEooL6TcblUP8ZCxfBuB1niTiufT0zBxq:ZnbjHGP0UZCxGieub5","tlshash":"eb02a6ab28f1d4655263017a6b9bf404bd226523441dec00bacd57ad8fd0fdac8d3be6","first_seen":"2025-09-08T14:29:09.885888Z","last_seen":"2025-09-08T14:29:09.885888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":80,"dns":59,"connect":1,"send":0,"wait":160,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/currencyItem-cad3c5bd.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/currencyItem-cad3c5bd.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-337fc\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3jkV8slgZtLIiLQGJ60z3qsuIXewWl%2FJpUF8QMMyfugtvedQNpXPa7T%2FKf17CAN%2F41pwXggcwXmtjZdJ0RHSsTmkpnBGWlA7Hu4%3D\"}]}\r\ncf-ray: 97bf2234ea62b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":210940,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d57083ab5ea7f246dce427fc09ee051d","sha1":"ab70cee5fd5caa7e731f140c81f8c46ee497aeab","sha256":"a190bdef401a9f6eed914d8e2b0b2e830612a23f3b02cb1080ac45ce2364a48e","sha512":"a15a20bab6199fe6ca724b13b53a67ac307e8d0d90f73d40726b8b718cc04191fd3bdc5484d882299664f94264b9d05b1bf16d39aeb344c5be9376cc67e00460","ssdeep":"6144:lEpG/7jgUhkGpeOB21A4YQbisXeeah20QAw00v9BQMh3Z/PJq:lYAjgUhkGpeOB21pYQb5eeah20QAw00y","tlshash":"ed24e6953342b12282e256d6583a0506e3357a483547899cf6bc4ddf3c6a98bb1fff38","first_seen":"2025-09-08T14:29:09.876681Z","last_seen":"2025-09-08T14:29:09.876681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-cf74fd56.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-cf74fd56.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-6813\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8x%2BpUaVP3e9jgIxaaeq%2Fe%2Bln9rsTgoDfxvig3AXZZSBsuHuOQRCWjG858APk3P75TZUQdr3xqnyWx%2BvQtjuGYzhztZqgIQKsyk4%3D\"}]}\r\ncf-ray: 97bf2235ba6cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26643,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (26642)","md5":"bc0ca25582ba315ff6b7d96ea1194f02","sha1":"59254e832d6191917c77956bdbb240f29d86e9ac","sha256":"626505ad143a457c3f5b873b9b7ad2d05fa445ecd8bad5c2dbf429822597f2c2","sha512":"7c208ff5d92f7b1496d138b25214a8cfd323b64dd7d15efe52626939b47a2d114d519c4a54684bb2b477d909c3d740d03b839ed8500bc31a5ef2213e0971bb77","ssdeep":"768:BP601PWztyFaSYADxnL2UK06DNff2G7e0g69tvUs4nU30ZybjuC65/zCyd3n+:BLk6pLFKPddHQEgsjuC65/zfV+","tlshash":"c0c2e985fa015139c3f6949390990040762e2feb6909c8e174fdaed63bd3eb4679473e","first_seen":"2025-09-08T14:29:09.82843Z","last_seen":"2025-09-08T14:29:09.82843Z","times_seen":1,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/cdn-cgi/rum?","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1007\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v8zfjxHHA4kFouX%2Bs7LGeYUby21iNw65JmmZqV9137hVdEIGTBSPkoFfyu0WqX3UHC6oapGYftNmgCCgh0KtmrkV1xCFaOlnqYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\nserver: cloudflare\r\ncf-ray: 97bf22370a78b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=TRXUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=TRXUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1zdyjFsWQZksyk1WCOT%2FqQ%2BceqPyYcXhgfTPcJn%2FlPTIRejfAL7eq7D9L8WF7DiFooRq9m4Bc9wSvAKwJy%2B0fYtH3RkUKrZF0PzACIc\"}]}\r\ncf-ray: 97bf223e2ac7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8081,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1c3298cc06fc5596d1be81112ff136b5","sha1":"2dfdcc2e1de79c39795f5334e56cd0aa57d14bce","sha256":"20cd63b7b1d7794decce1a0d22e53bf06e43fc525c14a2f1725ab0044c5e98c6","sha512":"deae69258e205c3621e091d02f482c49ba65e6afc99974497d4d636dc802a6603fc5a3d28aa3accd1f846f442c060dccac674b8ace4de6114d1f90bc328a6f13","ssdeep":"192:Ge0axDfmipwKm/dynCAsOK24j9gn1RCY3fPwLC:gYai7BnK61R/V","tlshash":"aff1d822128d8650fa3d881a23d6fca61a6a315ffede1fd084ef297709e52f11708f55","first_seen":"2025-09-08T14:29:09.793293Z","last_seen":"2025-09-08T14:29:09.793293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/0d148467-cd45-4fda-a179-52faad575ff6bar-chart-2-line.png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/0d148467-cd45-4fda-a179-52faad575ff6bar-chart-2-line.png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 3252\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmlG6ooPlOAEcN9KrTNj2GhjUbhWzJSlwUHPrIpj31gwOhhJXSXjsryIhdi%2FpvaZPZP6TtyrLZV8YYRAH7gzIMJrjtCnekQdXJhENacA\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"68290770a2ea44c1b8edb974f4b24698\"\r\nlast-modified: Thu, 26 Jun 2025 15:43:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22399ee15691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3252,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"68290770a2ea44c1b8edb974f4b24698","sha1":"2a541fb21ebb50c860139312dc3479665261c9f0","sha256":"4a2aa267b3f9a15dbc08e9392592f70bd52eb145db0503931a2c39c4197df722","sha512":"02d6eddacf97a1cbc7ea919fa22e9b5bd87ce62cad824135ca1686cc7afbd2a833b0fbb2f82a64211b94bd04ea0f2ef93e41102ffbb06cf9d311ddc589221a80","ssdeep":"","tlshash":"9e6152788ecd53316e196182d61900b5c829da7029703b8fb83eb3d22b9ad1c677571f","first_seen":"2025-09-08T14:29:09.888158Z","last_seen":"2025-09-08T14:29:09.888158Z","times_seen":1,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":148,"dns":75,"connect":1,"send":0,"wait":194,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YPVZq1CZO1mWSI64EPa8ntVIBTmASdedSK0IAUBvWGEPmJQYhJOwco9QSpd6zM5%2BcI5Z9GlLpXswBimdqy9g3CQsJ8sBj47cxuKOpPy\"}]}\r\ncf-ray: 97bf22395a8db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=ETHUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=ETHUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QR63B6HQ3X318FsWbAuqAZ02dmCsR%2BN9LGQ%2Fgjgr0aDTcXMja%2FZrXYpoUpmppUtNrU9YGC93VXhPSonaXXNCnlYC%2Bd9h4KDV%2FciIugjt\"}]}\r\ncf-ray: 97bf223dbaaeb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/resource/fonts/DINOT-Medium.otf","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dydxvault.com/assets/index-c2cc53d2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:15 GMT\r\netag: \"68bdba1f-11d88\"\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IteEfn4mF05jAv7AwC3c7fX0G5lFnIz%2By6qk0ZK0eIkfJULO2ohnEcy2b9LSbsT0REDTYbxJRa81t2bTK18ipcEKDN1LkRAYorM%3D\"}]}\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 97bf223dfabab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-30T19:44:59.551352Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-06-26/72914d47-3318-4a1c-b934-ca68cda10c13home-line%20(1).png?2.0.1757264427522","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-06-26/72914d47-3318-4a1c-b934-ca68cda10c13home-line%20(1).png?2.0.1757264427522 HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 3143\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ez8jCYhtpps4AdzqVI8P%2BfkFltKCsW2t2WQh6Zr%2FPZUOF6KsyzQVbT4NYwWShgrqGrQEF9Nf6ZrgdzxufH%2ByA1xrOy%2Fug8Oz5t31p1cU\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"14834c6b762358fef324f9140b71dcd9\"\r\nlast-modified: Thu, 26 Jun 2025 15:38:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf22398ec65691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGBA, non-interlaced","md5":"14834c6b762358fef324f9140b71dcd9","sha1":"80fcab8b8ea7e3421e5c57f8f0bd326fd3d9bda7","sha256":"945069c0b4c5faf38eba9bd79343859a0544442147aa07b6b219fc39d2e4f637","sha512":"ec1e4b6a996d2a337619e27bd780f92d2f31fe62ed958f431407b8444d2d4549aabfea2ab83b9fb0fa944975536a1fcdd84bbafd34c44d0604e89862ca5ad150","ssdeep":"","tlshash":"fa51fa82caf98d365c53d53c25c31908f88d4a6a0d7a2bded74328fe890b554003aa58","first_seen":"2025-09-08T14:29:09.891296Z","last_seen":"2025-09-08T14:29:09.891296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":197,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=BTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=BTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UqavFhIZ5iVSvUsX%2BWpUiW%2BJ8072fJ8ajzKpC5q9JZxJyIIU4cTIBQOXqXPDy3AU%2FCA5v5aIbAWDQ2cNZRKvClqHi5kee6Y8YCxLHSY\"}]}\r\ncf-ray: 97bf223e1ac1b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8747,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5373e57db310ecd55c10bcb03a392a77","sha1":"a5bed21beb70dece212e69502b0c25b271a8c8f4","sha256":"4961c42b4f9a3c0a1185353a3a5b42447d42fb968c96c1cffd44b986c9442933","sha512":"27be534895805fa5baf98b5178f828bdb55ff3434512d4863a8d1e25c275611ae6846dddb9c1eaf10fff7c52eed4c55393ab25d1d35e1d66768211f5b44e804f","ssdeep":"192:PEoFmJc4HUHV/XNmB0MvpIowrIhkoSUT4OBDdizMjcasq+nvC5ko34:FYpU1E0Mvp7mI4aBk","tlshash":"5b02255397c8ca70fe75881a33e2b86d1a6a311afeee4ce495f1657709f12b1160cbc1","first_seen":"2025-09-08T14:29:09.808093Z","last_seen":"2025-09-08T14:29:09.808093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=LTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=LTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQhfyE7eJsirMpCEVSuxYjV%2BmfCdA4PfIRt57XbynZqSM78MO1v0c%2B85m%2BxLJsGKRo2IIY4PRR0FChomUh6A5nnGDQIw9E6q05Ki2pfd\"}]}\r\ncf-ray: 97bf223e1ac3b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8142,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c25cbeca8db85a8e05bffda58879e663","sha1":"df5ebc731cd488b99b90ee7204ab0a3f7a840c32","sha256":"e2f7394555fef678e109d72e8b7515d1ca5f23975b4cd57ff3c21db09cd381b3","sha512":"c1735ae379aa4ebb9d9e7763e95554c2cf2ff248baf438938d30ce0cb2551091b7d635b6f5d84ab73b81f49bc22b0bfe5828ab8756781a5bf6e2e6ced3ebc135","ssdeep":"192:Ma8zSmIXbTpKmu35Yc/kuvn4XtlhJWUjgi1Gv/p6LK:9aSmGbkH2AXpJ","tlshash":"b9f1e54a12d88278f93f8d0a339bf8210ae6311eedce0de489f076732ee527116487d5","first_seen":"2025-09-08T14:29:09.893276Z","last_seen":"2025-09-08T14:29:09.893276Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-be9f7d28.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:38.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-be9f7d28.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-21e37\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2BDftAKf7%2F%2Fi4BxBq5TICLntJFf39fEhWUh0oNUNE6tV03CLk%2FAIDP7OIq7flMo6QudpaGKkkCrRbSMmc37Oaozj%2BXOiPfpb8p0%3D\"}]}\r\ncf-ray: 97bf222f3a0eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138807,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64690), with no line terminators","md5":"6e3a7306224398bea43dbde790c8bcad","sha1":"f55013a97357023a283661e320f3fc75de4aefb7","sha256":"d7ce7ebc662cec0c1693c16a3a42f31833c8e6b5b6fd38a770eddc67d1a48dc8","sha512":"aa61f11fb0828d0ae426bcbd083b61a89225b632703309a44bc43f1447bd78356e50b6ac39f1945132cc8fd336f5849d4d81372b4f5db18285c4da837f3c05ba","ssdeep":"1536:xR8IHGdTuFf+vP+q6EGxghqStsSxdBAkwrb6wJX0rePpiWpqVG8qhHk5pRL:QItf+vP+MIkwrb6wJDBiWpRMHL","tlshash":"2ad38d4ab9055dff3ebe0c48a9461500205a1f93a84cc8a3b7ae9e5537fdce1734b726","first_seen":"2025-09-08T14:29:09.896659Z","last_seen":"2025-09-08T14:29:09.896659Z","times_seen":1,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/currencyItem-89531610.css","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/currencyItem-89531610.css HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:39 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-bfe\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2etvXh7eP9lKSd1pKs0oC2zakIPqHRlfwKkPkmQNXWhy7rPJF41mXjGxV1YILZngCWLvzDAqVkJlpA3g3YoIJudTtBLoXo21XX0%3D\"}]}\r\ncf-ray: 97bf2234ea5eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3070,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3069)","md5":"3b851e34e387473c0eb43a07c961fc05","sha1":"c512a6b067ee32d7f139b4f34f53f9cfa9287025","sha256":"895316108256ad91b556a0343dfc5e31adfe1188bc372f02ce3b2227bef80258","sha512":"dd7769d0261ce7f582be32d361210b4ee27920cebf209205d6eb93c5265b5b4624a9dd569e38fb96daeb37d8c709d29e813e1b0ec11fef8e1db0281ce173586e","ssdeep":"","tlshash":"19513258971303f4de37ca4bee98104d92243a9a908755cdf88f12375e8bea30a35936","first_seen":"2025-09-08T14:29:09.899351Z","last_seen":"2026-04-03T04:37:59.048244Z","times_seen":3,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dydxvault.com/assets/index-f1e37a03.js","fqdn":"dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /assets/index-f1e37a03.js HTTP/1.1\r\nHost: dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 07 Sep 2025 17:00:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68bdba2b-1645\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dk1g1zqSxbfc6ByBwFsCxd2r1nZYCWXkvSysyXoqT2C52zDDNMKlInOk7JWnI%2BJnHfmFkegPbC4ngqXoPZVWWpEjip8RbAf8%2FAU%3D\"}]}\r\ncf-ray: 97bf22365a71b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5701,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5694)","md5":"9c5c051eca728f72968aeef1b500acda","sha1":"fe9c0fa04da3e94b603344b606fcd56bec27184d","sha256":"efd45e3e1a9abd232ca3112551b06494263669311dcc73dedb5ba124f3b84e88","sha512":"be342ad63c8c646b07cb49f295a9f1a7e9fc8b14d333e07c7792da04b2a022366ffcea758a19da295ecd3fcf9e04124221d0bbda9352b0ac127d6a774d0497d5","ssdeep":"96:HONzU6BR9xvYfGgqCw8NuE0ctqje0esqWKLzn3hHZP3fUB27Jx678j6:HONzU6BR9pYfZqCw8PtUwbX3hHFfUHAu","tlshash":"04c1c5cca8068af9e9bb69145d590510205c3be9f51c98e2f5fd2c2b33b9d78ab08334","first_seen":"2025-09-08T14:29:09.779747Z","last_seen":"2025-09-08T14:29:09.779747Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/common/getCoinList","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NeCa1UJo4N3zFmdhn4w5rR8tRJKRoLpFCFr34Ayd5vcYY%2BfyCt42ab%2BYSTRDiwaUlr9hHTFNh%2BDp8MSDM56PbWHRKLPks4WrGNkCZgNB\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf2239ba93b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18416,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"831393b86ef1ae2bf728bd653725629a","sha1":"dcdbff01ded45e0de467c84aad7055219b9b116e","sha256":"c2f7afe6f7fe1086ad5663c2d51fd67eb4d27f3a08e20ed1d6afd17982fd722f","sha512":"a0a1591244a9f1ed14a4decc62a65ab0265bf5ad1b927e674d52855f0da9d3cefc0fb8957222cb452a0c9feb6a7c90c88b2aa7937e6c85c7d1de7ea6972e035a","ssdeep":"192:BX1MXLPXXlX1MXrIXF8XmVXsQSqguwwXbwYyK7OYYfjCKGnj/jWZnD1VxJ/Mhqlv:nGRptUtdn","tlshash":"e1821057612894bdc179d0d12eaf3d12918d313fdcd68f2a82ce4d99cee9af0650af06","first_seen":"2025-09-08T14:29:09.90163Z","last_seen":"2025-09-08T14:29:09.90163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.dydxvault.com/ws/5a087c46-f320-4a35-be5c-2c44c0813ee8","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"172.67.73.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:39.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /ws/5a087c46-f320-4a35-be5c-2c44c0813ee8 HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dydxvault.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: mkF+QfwMurZKOnffCVEC1A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Mon, 08 Sep 2025 14:28:40 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://dydxvault.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: YjUf+Fifx2W4kCGlcCmT8HiOT2U=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bOZ5fPTs6ER3FXOFdQ6pc3u3uM%2Fc6CwGXI7%2FlMsAKqDlWOTIrWE%2BdGO3OiOqSr48n%2FMKY8%2Bvb56b%2FgxdkO0RBTeTvQMCs66EgCRCqVYnCndh0JrtsQHyQCr7YGD0bN%2FS3V0R\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nServer: cloudflare\r\nCF-RAY: 97bf22355ff54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=502\u0026min_rtt=427\u0026rtt_var=204\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3116\u0026recv_bytes=1195\u0026delivery_rate=6581818\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=0df82cfccb1c8b53\u0026ts=131\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":23,"connect":23,"send":0,"wait":116,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=BTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=BTCUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q95Av3Iyx%2FVJjS9ndnB8hFGMaSdnPGDnzyhHZw3WCISeYXQIUlKTwBSBxPgd%2FC7biYkLa8ZtHem9ZulvzpRFFgnF1okSFHcJDg4alCSx\"}]}\r\ncf-ray: 97bf223dbaadb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=DOGEUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=DOGEUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJmXoMOeM7z64OPzEEXARPZkfNcPzjnT4qk5tHJdpJ7fFmLpediwFaUpRxPdEG8pnb9JCYqKEtA0QR3yJTyNYX3gmhTqjMf2zcMu%2F5SX\"}]}\r\ncf-ray: 97bf223e3ac9b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8241,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e86811f2ccf0d4adcadb5b710d8df1ff","sha1":"00e67fc46bc5bb2af39747a8b55709176a396db3","sha256":"c854b26236018cdc3cfc769a8a6302ab3554be9050ba2c559a37c0102af0a54e","sha512":"a23c7f8c737b3f9e7b55da01e0c93de0ce724f9247e273cabeb109a87689cfa1ebc0f7bc6702969d891a8d26a95387bbd0093d6a93cc205f967d07ac1c0eef25","ssdeep":"192:h7Z8IRtKr63Zj0hIXCDAP9koafk1q6cWMigfdLTky:pZ8IRtO6Jj0hTDiW9/6cWMimky","tlshash":"e802a19202c586b4ff3d880d13d6f916266a315beece0fe1c8e9267319e12f62708f55","first_seen":"2025-09-08T14:29:09.905904Z","last_seen":"2025-09-08T14:29:09.905904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:38.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:38 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97bf222f9bec0b02-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-08-05T01:14:14.512152Z","times_seen":337635,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":52,"dns":41,"connect":1,"send":0,"wait":13,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:40.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:40 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eF1zsNoqs3UhNTZpdoFNDOsGFKZoRK9py6yvbgwFvsiK11rX2zyYGIPS2hS%2BdzspbPhqXPkTFq5hSTxxfkc70%2BMHKbdkl7BKzlsmjEuS\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97bf2239ba91b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":594,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"11fa58081ade025e8b1c06100e496ed4","sha1":"00f6de3c15a31bb8f195a25eff0c391e8a2e4879","sha256":"ad9d56e77522bed6cb89f3bed1797e2b21215904fa890774fb08192a5c4bafe8","sha512":"8df4dd8232d2c92e7e7aa9e7523c7bbf65fa8eec64c0acdb2da57e71513cfb1b62c1707af4266245eda5aac86ea4099fc6fe3d903f4f59a23b412b9117a89054","ssdeep":"","tlshash":"c6f0a61f04388eaa090918d365cdbcc8d25f0647c6a0de70971acf2d81f14731a0e188","first_seen":"2025-09-08T14:29:09.910785Z","last_seen":"2025-09-08T14:29:09.910785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=DOTUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"OPTIONS /api/app/market/klines?symbol=DOTUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YfzqugINlqMcLXyTdqpZhBi5g9RAThN1LRS%2BN5Cg7Fuc%2BIoLD%2FYeAnno%2BbIMcO%2Bd2AQ1xyaPfq94%2BaeVTt2kBTNEWwRJh5EhcqdmQ2aT\"}]}\r\ncf-ray: 97bf223dbab8b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T03:58:24.008249Z","times_seen":17718483,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=XRPUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=XRPUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDqnxYi8P48qKxKrNHSEsEhl0mwmQO3Vv6CpCog2qmcZhqHEIkIeWnqhxS07rILEIcUO4X35jVyd5j9bJH07tPeYbXJR5I22JJk%2Bz6gH\"}]}\r\ncf-ray: 97bf223e1ac2b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8150,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9c9991f4d1ef521004e5c99cdf6a4b24","sha1":"e6dc62d72b686d0e2e27e0e084ce2bc53b35abb5","sha256":"8339e21dfb970fd0ea430970608a5a5cbba6d633029ba01d6d6f6e6e7c9fd03c","sha512":"094a96c76e930a97143488b5f94ae2721bc78bd333f87339872fd8a4d0be97a1dbb600e023f1a120c77293bb7ba971f2abedb4969fa0277ef607b345e12fca86","ssdeep":"192:tBsqTRr/6DKRPfM4fkJqyu9sx8zp8fK5mJtz2bJQD4+V7Fk:PsqN/1MXqycwAps9LD6","tlshash":"b9f1f4d503d087a4fa754c492792f9511a7a351ffece1fe48ba127b71ae22b2020cf52","first_seen":"2025-09-08T14:29:09.913307Z","last_seen":"2025-09-08T14:29:09.913307Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/bnb.png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /bnb.png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1494\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7v96aazIDAyVz9N1pPUhrLwyT2ADp%2BJZWYi3ReApeMDWHsjVQ6KN%2B5Wdx1%2BADKURQMtK1hS8sn1IUQ%2BPdwKVaTn0dHmFZb9oZU1CJBJ\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"fefe5d0b26806c858130f0eb454e1106\"\r\nlast-modified: Tue, 24 Jun 2025 11:36:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223d5a875691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"fefe5d0b26806c858130f0eb454e1106","sha1":"8f540e4d9b853acc0145bd37ec42fdeecd7f15f7","sha256":"7aef69406a4a5c74bd3569222a4fb3e534c8c6c1446755fdec7d7687bbf38a04","sha512":"98af45cf72a49d0776a57edc8cecb299d206723d1772c64439738e508f27ab92f0a06608bb76023267a34a8b433cec216329a8847836fc381f818ed2487fe3ff","ssdeep":"","tlshash":"2f31fce221413443e91adab851af83637ce009a05b8392456dd576d7b779ac45b44812","first_seen":"2023-08-29T23:22:40Z","last_seen":"2026-08-03T12:45:30.973311Z","times_seen":71,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dydxvault.com/api/app/market/klines?symbol=DOTUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto","fqdn":"api.dydxvault.com","domain":"dydxvault.com","tld":"com"},"ip":{"addr":"104.26.3.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dydxvault.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 07 Sep 2025 15:57:04 GMT","end":"Sat, 06 Dec 2025 16:56:56 GMT"},"fingerprint":{"sha1":"A2:78:84:3B:A0:06:7A:91:D5:A1:BF:73:DA:94:E5:BF:8D:2E:18:D8","sha256":"42:A0:53:A9:51:27:B2:15:33:56:C6:55:FA:25:DA:F5:1A:99:BF:BF:94:A0:37:8F:6C:58:D6:05:16:A1:41:51"}}},"request":{"raw":"GET /api/app/market/klines?symbol=DOTUSDT\u0026interval=30m\u0026limit=48\u0026market=crypto HTTP/1.1\r\nHost: api.dydxvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://dydxvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/json\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://dydxvault.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: no-cache\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hh9hJ8vq0NAG4mYW4Mfl5GOoaB3dqlNUmrK9BR7t0McZL7VpwqCPKSSWbkfxwUmaALffouRR7dM%2B2pecoMgAiH%2B9vYr7IEa4jOyQLCSl\"}]}\r\ncf-ray: 97bf223e3ac8b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7887,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a16af9ac3e60a75b95eb4dcfa47027ea","sha1":"7f0bc1b2ae5e02d5a34612f7b32b3884cce3b280","sha256":"58fb7a62ff61f6531cd76eed1ed220d26d8adf64375902a773e8356e56c05146","sha512":"64c451d43f20b14732f0e054f762604d71266bdbc2e2fa76efc7e6a0bbde5adaecb38a60f65800d6d372943a094d056b3d1a35bb9b09fbe392bb7de32ef9342a","ssdeep":"192:jJuo7Mo3ryr9R0ye9F/yfmMchWj6bi7Q/:77L2RRBe9F/phUj642","tlshash":"9ff1d46b03c4c654fa368d0a3392b8550657315feece9fd689e1267f09e12f15b28f12","first_seen":"2025-09-08T14:29:09.914983Z","last_seen":"2025-09-08T14:29:09.914983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-08","alert":"Sinkholed","trigger":"api.dydxvault.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.anovia.org/upload/2025-07-30/90775f0a-d53f-4224-a0a6-67610ca36cc2dxdx2%20(4).png","fqdn":"image.anovia.org","domain":"anovia.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dydxvault.com/","date":"2025-09-08T14:28:41.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"727b7685.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 10:59:19 GMT","end":"Thu, 20 Nov 2025 11:59:17 GMT"},"fingerprint":{"sha1":"BE:BB:8D:A3:69:EC:6C:13:2F:18:9C:14:90:6E:25:5B:75:0A:5A:A5","sha256":"D5:2A:7A:A3:2E:35:E0:7A:5F:93:2D:3D:CC:FC:44:6E:6A:4B:35:13:F3:BD:12:33:82:0E:8A:01:AC:38:FB:3D"}}},"request":{"raw":"GET /upload/2025-07-30/90775f0a-d53f-4224-a0a6-67610ca36cc2dxdx2%20(4).png HTTP/1.1\r\nHost: image.anovia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Sep 2025 14:28:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 171710\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=etF9hc2G65i%2BmpSOma7N817x7nLGp3YChrngOBPqyXcYyITdBIYQN6xRL5AgYxlgpZM%2FSouqg4K%2FnBcIFq8a%2Fs2uhYjfvdSHss2cx5nc\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"315ad5804807e4bbd17e01c25686e2be\"\r\nlast-modified: Wed, 30 Jul 2025 08:45:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 97bf223f4c4e5691-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"315ad5804807e4bbd17e01c25686e2be","sha1":"2d79133382b8381ffc9eccfc4c5f09136d261530","sha256":"0d8aa33f88f1166ebedb07a8f34320723b566999543c33309309edaf440c5cbb","sha512":"92237b71fafeb40e79e5f6eb053e085f8f8052d4a41ecd0855dd39113354e825e1e5c47e0aeaf571f552b434d1e69bd235204ea1aa29f918024962b13d58f124","ssdeep":"3072:8k+m/+YvV1TR8updkZ/h5Q8NTvQz8PDEv6GCUREU/CoQ+yIuVRUEGfIU:imGYvVRWmdkZfQ8JYwWP/CW80","tlshash":"bbf3124da1ff401290cf4f540b6ea8c17d01b50b4b86957a9aaf860de3b90a4d53fba3","first_seen":"2025-09-08T14:29:09.817554Z","last_seen":"2025-09-08T14:29:09.817554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}