{"report_id":"bad0db6b-8d78-4e48-920e-6110f9745416","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-09-23T06:25:57Z","url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"title":"Xverse - Best Bitcoin Web3 Wallet for Android, iOS \u0026 Chrome"},"submit":{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T06:25:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":2,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:31Z","timestamp":1758608731,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":35530,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-23T06:25:31.268192+0000\",\"flow_id\":2110891549796994,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":35530,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"dr2asrbse.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":468,\"bytes_toclient\":116,\"start\":\"2025-09-23T06:23:56.731778+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:35Z","timestamp":1758608735,"ip_dst":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":49514,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-09-23T06:25:35.495228+0000\",\"flow_id\":349426683966192,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":49514,\"dest_ip\":\"172.66.44.107\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"xversewallet.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":924,\"bytes_toclient\":3264,\"start\":\"2025-09-23T06:25:35.488176+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:36Z","timestamp":1758608736,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":48574,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-23T06:25:36.600072+0000\",\"flow_id\":1832197564558867,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":48574,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"dr2asrbse.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":588,\"bytes_toclient\":116,\"start\":\"2025-09-23T06:23:58.814611+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:38Z","timestamp":1758608738,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":35494,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-23T06:25:38.561092+0000\",\"flow_id\":1692770041033811,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":35494,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"dr2asrbse.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":468,\"bytes_toclient\":116,\"start\":\"2025-09-23T06:23:55.029779+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:40Z","timestamp":1758608740,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":48588,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-23T06:25:40.545251+0000\",\"flow_id\":1271788084351357,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":48588,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"dr2asrbse.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":588,\"bytes_toclient\":116,\"start\":\"2025-09-23T06:23:59.676221+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:46Z","timestamp":1758608746,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":35486,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-23T06:25:46.580313+0000\",\"flow_id\":2119764952142646,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":35486,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"dr2asrbse.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":468,\"bytes_toclient\":116,\"start\":\"2025-09-23T06:23:54.316214+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-23","alert":"Detects file containing Telegram Bot API","trigger":"xversewallet.pages.dev/www.xverse.app/x.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"xversewallet.pages.dev","ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-09-23T06:25:59.037949Z","last_seen":"2025-09-23T06:25:59.037949Z","alert_count":4,"request_count":27,"received_data":1716990,"sent_data":14046,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Optibase","description":"Optibase is an A/B testing app for Webflow, enabling data-driven decisions by testing various elements such as copy, design, or entire pages, aimed at improving site conversions.","website":"https://www.optibase.io","common_platform_enumeration":"","icon":"Optibase.svg","categories":["A/B Testing"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2025-09-21T23:08:49.797985Z","alert_count":0,"request_count":5,"received_data":188861,"sent_data":2836,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":2,"received_data":98734,"sent_data":1124,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/x.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"d988f0f0c2ba4755ea1851cc0018f16c","sha1":"5c73810a95faa90340720e8c1f80028769e2f7f5","sha256":"9393c40d8e7cb5e093e66ceb41983215fc86ca58d601f764f9f60994bd73fe3d","sha512":"e1dbfbdd4f066a5621d5c933f3f86c88352459bed357eff1653b5368f94a6c4d04d0fb5222f0b6bff465c921669418b716ac081debbf4ca46cbdc78eabbdffaf","size":11085,"token":"7141420161:AAGh3wZMnUv45CEQg6UE7e0xpQIZGtYcdPA","is_revoked":false,"bot":{"token":"7141420161:AAGh3wZMnUv45CEQg6UE7e0xpQIZGtYcdPA","user_id":"7141420161","username":"MissCollectoraiBot","first_name":"Miss Collector","last_name":"","chat":{"chat_id":"-4704812522","title":"BiggerBond","type":"group","bot_is":"member","total_users":19,"active_members":null,"admins":null},"pending_messages":1}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/x.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"d988f0f0c2ba4755ea1851cc0018f16c","sha1":"5c73810a95faa90340720e8c1f80028769e2f7f5","sha256":"9393c40d8e7cb5e093e66ceb41983215fc86ca58d601f764f9f60994bd73fe3d","sha512":"e1dbfbdd4f066a5621d5c933f3f86c88352459bed357eff1653b5368f94a6c4d04d0fb5222f0b6bff465c921669418b716ac081debbf4ca46cbdc78eabbdffaf","size":11085,"token":"7141420161:AAGh3wZMnUv45CEQg6UE7e0xpQIZGtYcdPA","is_revoked":false,"bot":{"token":"7141420161:AAGh3wZMnUv45CEQg6UE7e0xpQIZGtYcdPA","user_id":"7141420161","username":"MissCollectoraiBot","first_name":"Miss Collector","last_name":"","chat":{"chat_id":"-4704812522","title":"BiggerBond","type":"group","bot_is":"member","total_users":19,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:31Z","timestamp":1758608731,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":35530,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-23T06:25:31.268192+0000\",\"flow_id\":2110891549796994,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":35530,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"dr2asrbse.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":468,\"bytes_toclient\":116,\"start\":\"2025-09-23T06:23:56.731778+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:35Z","timestamp":1758608735,"ip_dst":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.12","port":49514,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-09-23T06:25:35.495228+0000\",\"flow_id\":349426683966192,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":49514,\"dest_ip\":\"172.66.44.107\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"xversewallet.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":924,\"bytes_toclient\":3264,\"start\":\"2025-09-23T06:25:35.488176+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:36Z","timestamp":1758608736,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":48574,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-23T06:25:36.600072+0000\",\"flow_id\":1832197564558867,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":48574,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"dr2asrbse.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":588,\"bytes_toclient\":116,\"start\":\"2025-09-23T06:23:58.814611+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:38Z","timestamp":1758608738,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":35494,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-23T06:25:38.561092+0000\",\"flow_id\":1692770041033811,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":35494,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"dr2asrbse.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":468,\"bytes_toclient\":116,\"start\":\"2025-09-23T06:23:55.029779+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:40Z","timestamp":1758608740,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":48588,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-23T06:25:40.545251+0000\",\"flow_id\":1271788084351357,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":48588,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"dr2asrbse.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":588,\"bytes_toclient\":116,\"start\":\"2025-09-23T06:23:59.676221+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-23T06:25:46Z","timestamp":1758608746,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.12","port":35486,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-09-23T06:25:46.580313+0000\",\"flow_id\":2119764952142646,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":35486,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"dr2asrbse.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":468,\"bytes_toclient\":116,\"start\":\"2025-09-23T06:23:54.316214+0000\"}}"}]}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"xversewallet.pages.dev/app.optibase.io/script.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"900f769a7d84dad63182d00809063442","sha1":"cb908f18831abc85a1b07628743a1cd8ec81dac3","sha256":"87a73e86afb12cefaf10bb265a4e6837079ffe75a9cc72853ee7315b46f87d11","sha512":"19391b621c247815fefe214356998fd63c3d051a3142ea6f831829ee2348cfbb96810c4802ebf5e4ea3c2deed9a373183369351aee8e78c61fa4d0ba72f8da59","ssdeep":"1536:E1xszrTiUHn0zJqMsQzjXech0AT+cxW9OzT4xqSPn:UDU5MVKcPiiqq+","tlshash":"ab83f6ccb2d2b03207ab1ae5907b1016f3396964350e9561f41ccdde3a6994ee273f7a","size":82329,"data":"","first_seen":"2025-06-16T04:29:46.161706Z","last_seen":"2025-09-23T06:26:15.096438Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c82f4a.js?site=624b08d53d7ac60ccfc11d8d","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-04T03:41:46.218873Z","times_seen":217448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.jsdelivr.net/jquery.validation/1.15.0/jquery.validate.min.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c638c11f24acc634fd4f438486d3eff2","sha1":"2c8ae454083d5a46dbcf448c1410effff4113c91","sha256":"419ad47de89cae606220da3ff55c33d6e854f53eaac6f057a6273c645dd31a84","sha512":"81360c66e6fc70ea44c0d9cd7b2da1dc19183b644ee94afffa2fe109b8f4677518afa5359cf08fc80cb5dc6f26dfde51710d6153e24ad9d584c3b32e71279694","ssdeep":"384:QNrHpwEC+JY6/tNAlHsdkMiKnFpY54LOdANtc0Eny+RWgW7N3rwV/vtrx+OLDJgy:5+JY6/UlHsdkMi2FpY54KKBEny+HxVR9","tlshash":"52a2a78d76d670465e9720f4a09b660761b66da0a008e83cb5f8e4d1baf4ecc50f7f78","size":22687,"data":"","first_seen":"2023-04-05T03:24:42Z","last_seen":"2026-04-03T19:07:20.119558Z","times_seen":1235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/x.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d988f0f0c2ba4755ea1851cc0018f16c","sha1":"5c73810a95faa90340720e8c1f80028769e2f7f5","sha256":"9393c40d8e7cb5e093e66ceb41983215fc86ca58d601f764f9f60994bd73fe3d","sha512":"e1dbfbdd4f066a5621d5c933f3f86c88352459bed357eff1653b5368f94a6c4d04d0fb5222f0b6bff465c921669418b716ac081debbf4ca46cbdc78eabbdffaf","ssdeep":"192:fp3dOynq9wfD3e9Nv3zg1S/dn0SRMNqajdgpQ1VQyDn0RUOW9UdNKA5F:pg/dn0SRM0DqEf46","tlshash":"99328316a6247611043bc3f5b7e31a99e5220047a602c9793fec834e4fb2948da57fef","size":11085,"data":"","first_seen":"2025-09-23T06:26:03.970591Z","last_seen":"2025-09-23T06:26:03.970591Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-23","alert":"Detects file containing Telegram Bot API","trigger":"xversewallet.pages.dev/www.xverse.app/x.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e9e3ad57abeefde87342864450cc232","sha1":"4dc8676bf3417d597053d5f253fce034007f63da","sha256":"9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26","sha512":"b2d8e0e883fc8af91de120565298502b6e5b0f6e20275ecd2974de3e768a19a443f7facc2127201df66725c20451b924a69eaab78224073e385f14a5431c3a6c","ssdeep":"","tlshash":"34c0123621525559045b3d04a66ba14a758791b2a9025401dc7ee5a0311bc9aad0255e","size":181,"data":"","first_seen":"2023-03-07T01:17:43Z","last_seen":"2026-04-04T03:41:46.254903Z","times_seen":45232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/js/xverse-web.schunk.36b8fb49256177c8.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d1d67fe2715f25c2fd98a9011d8ea67","sha1":"fd1ce2d8e0999d8279b32211977bddeb04aed0d5","sha256":"8b7d0de9f3df9103d70ed000c17b348240623ac4e4053d56fa0d5cfd8d74d79d","sha512":"f6c9f1147f527cf9e787075eac748e04606872ff4220feeb65cff21672c42dcd2905b2bd31ced2e80c2d249b5a32a69023867b43712561b01f700f6b57e30ddf","ssdeep":"768:g4DiJdpMNsppahKJpE8c32YpIx6qh215vgS9AoS9I1hh00:g4DiJ/1HasJmoYpI1k179AK1o0","tlshash":"be13228dfac1f0914363e966822f941bf27a6a59b04fd4d4926ad1e0dc7c58f8027e2d","size":41429,"data":"","first_seen":"2025-05-14T07:45:58.253137Z","last_seen":"2026-04-04T01:31:22.630829Z","times_seen":10343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d91c64a7c90477118cf32b16abbc6b6","sha1":"d82a77471afe421ba35566ef8352a84df7469fa2","sha256":"9390e4ea915c366cf252c86e5d4925b65cc917b2d9a2bc8eacf8bf3ad5d97cd9","sha512":"874ef99ed7bbef628c430063baf06045b8921f7b51a449905659db711e6af7e092d18147ad2f631066f1c9aef304d12972f34e758c4df9cdaf07add8d85cd520","ssdeep":"","tlshash":"25c02b9c23130c7055f71b840b5fb300f081321094901c30092563844531c13eb08c50","size":144,"data":"","first_seen":"2025-08-29T13:39:52.248723Z","last_seen":"2025-10-13T11:47:31.06532Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/js/xverse-web.schunk.b4159194426a7f50.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"748e92a41a265df75d5bcb85d93d9d46","sha1":"8c868ddf81aadd315740d621de80a78c1923fef1","sha256":"32af76d73c3797be0aee976da5623cab582d801e23810ff0ceb52103102a4d13","sha512":"213a3c374c8a7e6af8148c1dca359765921893e537f8120b301a3cee55dd00b3a4d75211a2e63997538da24291644594b037e8ad445bc7ecc13c74c75a069388","ssdeep":"3072:TcXKfafiAZrq99uDKWozenTwx14T2feRlR7RlRCoZta:GPKOTOmUSb9bM","tlshash":"da84d9c772e9b577065b022ee4971005a2f85acbc58bc6a4d830dedd1c3c9dc9b8b729","size":389490,"data":"","first_seen":"2025-09-23T06:26:03.962543Z","last_seen":"2025-09-23T06:26:15.098809Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/js/xverse-web.dd3d9e8f.a95a570483193749.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab02570253b241b5d83a1eae23929f50","sha1":"5a6657a828b4f99b8ab2182719b89eccf99eaf74","sha256":"e88a150d4ee5fd269b5c66961a705e89166f641a340f003e2c0a96637fe1034f","sha512":"eb854074846e8ec2a9e9c624fe81609bd3610399cf3ad572b0f736fe639fdde04ab039dced71e227d1ba0e9dbc25d9cf3fb64189fd9463008e4ddff2d21e223b","ssdeep":"192:Zjok01D+AWpc+2KBrjS9cDWY5FeNENEq75naLubHX9Vq4kZpOQf:FoLt+P+KBrUfC3q4kf","tlshash":"f122e92473947077a0ea30cb0c5fc708732d2d21ed069ae9e352d9a524f99a514bbf7e","size":10902,"data":"","first_seen":"2025-09-23T06:26:03.979131Z","last_seen":"2025-09-23T06:26:15.101278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"75cb1f8c4408a11a6b555a7fce6e9325","sha1":"dc4ba8dc4c442ae075419ed7a6f903f5627d2e93","sha256":"2ec0769da2fb6d0e0cadf4a4f2399b9b8ace3eb33eeebb37c1a7531c00284c02","sha512":"faa7d7caad748801de4b2989f692a8b72fb3c83479a6f84a8994f768a86b15bf7f3ea17865b3b835fd5b107e69da5387c1956cf7143ea2aca39d92eaa06dee02","ssdeep":"","tlshash":"e5e0c0c97811187574e90db523b4a1147183120418191d62ceeec91469685874c524cc","size":343,"data":"","first_seen":"2025-09-23T06:26:03.995796Z","last_seen":"2025-09-23T06:26:15.112141Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7da3128976105f3e42bf87a0aabe09b1","sha1":"2e22a7cf8b46d79e0723487e8b9352b00dc9d3e9","sha256":"b19cda8df0629b4afd59a90c60de5314b36dfeb6a87481fe9f5c06eacdbe0fe7","sha512":"e15fed2c8e632601f832c81ee35807332a186d6238d47a6c6814b1b2072e1757a6fa6f06b2f0971af9b9901c78a6ff6f4251c5134f47d18932fa157b185fc014","ssdeep":"","tlshash":"b5e02d03fccb80580a3b4927cbfb83552081350b18528404786dc0d92f20ece4b87f9c","size":385,"data":"","first_seen":"2025-09-23T06:26:03.997057Z","last_seen":"2025-09-23T06:26:15.113412Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"81b3497fc048fb7b2c9b91ecceb01c1e","sha1":"9d84cbe0ef705da9e110903abe10195964204a25","sha256":"d7bc8a928968bcf204621d7180ef03c0c93ff212fc69bb51531cd6635fabbc29","sha512":"6bb78e09f7ddfd76b832b7c5a23a623a791d94bb9a0c073ecfeda74e1dc73f651811b14bca9ade1501e96f2fd473f38b7386cbfa98857f007267e9540d3ced7b","ssdeep":"","tlshash":"b8a004d714d51570c5f7155550545345347044405f435c7155cd543545f5dc5d417f57","size":76,"data":"","first_seen":"2025-09-23T06:26:03.998173Z","last_seen":"2025-09-23T06:28:59.386083Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2d228cd7b06014d88c9a9c39220196d","sha1":"00b1add29a80e3e600c9a4754a4fdef13d15ac49","sha256":"2a28e4128b2c9d89f683882c9dc5b2c3f4d1403751de48a810b33ce17e208cd1","sha512":"29de37a38fc1e24d1fbf11459a97681d9f57800cc4e552eb9ca885809369775ec5f25b50af8100df505bf0b243b977d64bc090bc10cc3f2c11141f16b43c9bcb","ssdeep":"","tlshash":"2b017899e0730ed508bffb189f6b498d913a00035547c11a360c8af8dfb2278859f9ee","size":724,"data":"","first_seen":"2025-07-08T10:41:17.537169Z","last_seen":"2025-12-31T11:48:04.594635Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"491c3ff8d4688221017d98ce5b613969","sha1":"78d8c1901ba3e0159d44b0bea5710ce977a5099b","sha256":"79f408bc2992e065580beff2e737faacc6f2674fdcae54b364cfa42f86445518","sha512":"18ebcb5c0e360ae324ed594254729bb582a4d7834b1d640cf152ed5cd75acabcb0e60836b48aa90f6aeb7a7f473a4882b0da563873dd25628c7605d5021e89e8","ssdeep":"","tlshash":"36f02b0dbef512201233752da0efb001dad195475908aca475dc01f51f9db5d28eb658","size":582,"data":"","first_seen":"2025-08-29T13:39:52.254487Z","last_seen":"2025-10-13T11:47:31.06929Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/x.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d988f0f0c2ba4755ea1851cc0018f16c","sha1":"5c73810a95faa90340720e8c1f80028769e2f7f5","sha256":"9393c40d8e7cb5e093e66ceb41983215fc86ca58d601f764f9f60994bd73fe3d","sha512":"e1dbfbdd4f066a5621d5c933f3f86c88352459bed357eff1653b5368f94a6c4d04d0fb5222f0b6bff465c921669418b716ac081debbf4ca46cbdc78eabbdffaf","ssdeep":"192:fp3dOynq9wfD3e9Nv3zg1S/dn0SRMNqajdgpQ1VQyDn0RUOW9UdNKA5F:pg/dn0SRM0DqEf46","tlshash":"99328316a6247611043bc3f5b7e31a99e5220047a602c9793fec834e4fb2948da57fef","size":11085,"data":"","first_seen":"2025-09-23T06:26:03.970591Z","last_seen":"2025-09-23T06:26:03.970591Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-23","alert":"Detects file containing Telegram Bot API","trigger":"xversewallet.pages.dev/www.xverse.app/x.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xversewallet.pages.dev/app.optibase.io/script.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /app.optibase.io/script.js HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"6b673791a57fc58cb797bce6dc2bf318\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Waj9KZ0tCdbt2zF7dAkPF74AxMUUl3TEYTzb6oZ5WDdGOxCetg2TF6pW8F9El%2Bz6WNHrBI9maLV%2FF48y6zhiKeYuaLPlsKcmWAPsMHS2gJc06cEMTAxqhBlxctvixVxPp%2BMPYyTnnYOM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73878cdb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=560\u0026min_rtt=395\u0026rtt_var=25\u0026sent=164\u0026recv=127\u0026lost=0\u0026retrans=0\u0026sent_bytes=183056\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=639\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82329,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65228)","md5":"900f769a7d84dad63182d00809063442","sha1":"cb908f18831abc85a1b07628743a1cd8ec81dac3","sha256":"87a73e86afb12cefaf10bb265a4e6837079ffe75a9cc72853ee7315b46f87d11","sha512":"19391b621c247815fefe214356998fd63c3d051a3142ea6f831829ee2348cfbb96810c4802ebf5e4ea3c2deed9a373183369351aee8e78c61fa4d0ba72f8da59","ssdeep":"1536:E1xszrTiUHn0zJqMsQzjXech0AT+cxW9OzT4xqSPn:UDU5MVKcPiiqq+","tlshash":"ab83f6ccb2d2b03207ab1ae5907b1016f3396964350e9561f41ccdde3a6994ee273f7a","first_seen":"2025-06-16T04:29:46.161706Z","last_seen":"2025-09-23T06:26:15.096438Z","times_seen":65,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/663dd3c03a18cce2671fa177_Group%2013840.svg","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/663dd3c03a18cce2671fa177_Group%2013840.svg HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"771ccf0669985b61aaff98775c2b90e9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eWMq4T11YBszdSpejIuhPfCPZvr5ETJFG3MS3cyS2wxTrfXFyvVsmy9LBL2LYfx43dK7LuxgKPM6pmT1lOEc59g94y6QdVrNfuy41HumJ4YJCp3DguIArDezuD8qqvEh0K8u71ZYMu0W\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73878d1b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=607\u0026min_rtt=436\u0026rtt_var=16\u0026sent=111\u0026recv=94\u0026lost=0\u0026retrans=0\u0026sent_bytes=120910\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=637\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7156,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0c13f8d611eb7f87547b6946d7881b5","sha1":"ef1d871498da896be77688d5830509c399659da2","sha256":"1ec5481fb4c1d578283239dfdf68e8213fd5a1a10d04b5460041f48f2e73a511","sha512":"62bc663ff772e7078e1aa92ee807e38780093f55f6a88266ff69266be09dc53a79e14440c0123a05c1a23e6f6592e813791b0ace58a768b6a1eefe9f5321a463","ssdeep":"192:2E/MWQwG7XBpeCS0ABWC7iIqoT7zRIIFW8m202KFi+Eu8m4:7/phG7be5dBH7fn7z7IXh2KAuX4","tlshash":"bae153f23eac73e46643e7d8de215535366e7cf51bcd4ea1c308ec94e11a099ca86da0","first_seen":"2025-08-29T13:39:52.175958Z","last_seen":"2026-03-25T22:03:10.56758Z","times_seen":7,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/js/xverse-web.schunk.b4159194426a7f50.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/js/xverse-web.schunk.b4159194426a7f50.js HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"f3b8cb1e2744eacb8a291802e923a855\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IQPKYJLe69pOmNvVI6EgbJkutW3h%2FxbdzLnAkA9QY97MD%2F0IeyL8EN%2BEX83TQLOOyLyuV2%2FQaxe92o6hruWce5UffDQab1GQzlkQmmRf99s5J1Os3vK5JKtZ0RXGLSue66RYbfXy6J4s\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73878d8b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=601\u0026min_rtt=395\u0026rtt_var=96\u0026sent=213\u0026recv=191\u0026lost=0\u0026retrans=0\u0026sent_bytes=236949\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=648\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389490,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"748e92a41a265df75d5bcb85d93d9d46","sha1":"8c868ddf81aadd315740d621de80a78c1923fef1","sha256":"32af76d73c3797be0aee976da5623cab582d801e23810ff0ceb52103102a4d13","sha512":"213a3c374c8a7e6af8148c1dca359765921893e537f8120b301a3cee55dd00b3a4d75211a2e63997538da24291644594b037e8ad445bc7ecc13c74c75a069388","ssdeep":"3072:TcXKfafiAZrq99uDKWozenTwx14T2feRlR7RlRCoZta:GPKOTOmUSb9bM","tlshash":"da84d9c772e9b577065b022ee4971005a2f85acbc58bc6a4d830dedd1c3c9dc9b8b729","first_seen":"2025-09-23T06:26:03.962543Z","last_seen":"2025-09-23T06:26:15.098809Z","times_seen":2,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/645b8eb3e92abf58e038fca6_DMSans-Medium.woff","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /624b08d53d7ac60ccfc11d8d/645b8eb3e92abf58e038fca6_DMSans-Medium.woff HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://xversewallet.pages.dev/\r\nOrigin: https://xversewallet.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: application/x-font-woff\r\ncontent-length: 35612\r\ncf-ray: 9837f739da945699-OSL\r\nx-amz-id-2: kS0mN3hBcVuvrBT6mOmzQ5aApHJPhunV9t1zNRQc2KMYZMjlENWQjiKtR4xn0NkHL9b8DXUSTrE=\r\nx-amz-request-id: CPTW9QK2N3FC175K\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Wed, 10 May 2023 12:31:49 GMT\r\netag: \"15074e12ab954bb6cedc83a5d61cc7a4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: AG.AvFqJa1BF34hDXKJPpPQX2XF7hWcK\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35612,"size_decoded":0,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, TrueType, length 35612, version 1.200","md5":"15074e12ab954bb6cedc83a5d61cc7a4","sha1":"61c47594f6b1b0b4c7df155b45eb25a8fe0272ff","sha256":"2db1d4f3913529ec8a34657f1aef73862db1146bc031d740c5c6b6c2666b9b43","sha512":"18e821466121e4990290afe52dcf93ccc8da269dad68b2f3bd7d8edffc989eff4cac0ea2e55ba3e13e8cc4eb30ec8370aa57a697fb5a075893fb24bb25520f0e","ssdeep":"768:eOm1WAcvq0Cpf6Ru8rtOTPpQZPE92z4HPzZOxnAzKUUArmphOO7O:mcAcvq0CgQ8QjGZC/zExAzDyp8O7O","tlshash":"faf2f1b1d11815b92adab8b448ffc6d4a93caba7cde2b0f1e24181b55c0652d4f035fe","first_seen":"2024-10-21T16:37:51.342109Z","last_seen":"2026-03-25T22:03:10.556186Z","times_seen":14,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":58,"dns":3,"connect":1,"send":0,"wait":59,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/663ddd93c8f8364d0a634172_Frame%2013848%20(2)-min.webp","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/663ddd93c8f8364d0a634172_Frame%2013848%20(2)-min.webp HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 176524\r\ncf-ray: 9837f739fafab517-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"266c6199f8e90ba9727ac74437052aef\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OTxMcjCILWjyZYhGHIj5%2FnKWp7M74qICtFDy9ZcEAkjcq17Iv0dZLkefrUXAzZg2FQCaU%2FkZn0Vmkyi5zgzVwRG28qwrtFPPm3t3ZSauzSXa6Zjl0WGNy%2FfQ5PgAw7A6r4oQ33hbyMsA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2281\u0026min_rtt=550\u0026rtt_var=1207\u0026sent=177\u0026recv=198\u0026lost=0\u0026retrans=0\u0026sent_bytes=12817\u0026recv_bytes=11822\u0026delivery_rate=812688\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=788f84db88be3c5f\u0026ts=466\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e30621ee0b761c0e2b1148b58dcda64d","sha1":"8624262b93aa618f03de2af84721bb5bc07855cd","sha256":"ddd36843bad8507f7d50a1446d8bac5ef23e6f9d3d9d817588f261f60f836ec9","sha512":"ea1c6d4232c74a998d2c7e614f2ca239acf2dda99a5aa452c348399a8ff007f127c38b471b57f515668b2885f45ae77324f64ce3e2a75aae418e0050fa032eee","ssdeep":"3072:9wbctFxi55cFVircQ1LUFHGdKpbKtzgVvQ1v/WjQpXZt/vV8IlNqK1HaJH:9wbcxi55yVigQqtd8JJnqK16JH","tlshash":"4e04125d86cda784a31323b4e5e53b45206616b8b74c16f45f83ee32b9289fee48c4dc","first_seen":"2025-09-23T06:26:03.964782Z","last_seen":"2025-09-23T06:26:15.075078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.googletagmanager.com/gtm5445?id=GTM-5V9MJNW5","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /www.googletagmanager.com/gtm5445?id=GTM-5V9MJNW5 HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AizbNPdyn3zh1%2BPTsCvtezPVIYvy24gHzTYfjHkeM9aM30PjDckXEe2By8cLuM0SlmCmCfrjK95RQH41suBJ1xqFJB%2B1LR%2FBMVqmHM89wldQAkt57MBbHOM2fMXLWgfqoLhqtPAKP3Rf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73c9cd6b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2139\u0026min_rtt=550\u0026rtt_var=1535\u0026sent=457\u0026recv=208\u0026lost=0\u0026retrans=0\u0026sent_bytes=341799\u0026recv_bytes=12768\u0026delivery_rate=28238895\u0026cwnd=194400\u0026unsent_bytes=0\u0026cid=788f84db88be3c5f\u0026ts=883\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/assets.website-files.com/624b08d53d7ac60ccfc11d8d/624b08d53d7ac653d8c11dec_Satoshi-Medium.woff","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /assets.website-files.com/624b08d53d7ac60ccfc11d8d/624b08d53d7ac653d8c11dec_Satoshi-Medium.woff HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: application/font-woff\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"cad0777f25d62ac511907f969c0c45bc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QzyBo57hv5QF9sc6psh1B3YPspNNZCgDykohAVu92AJaRyKi%2BdrmnY%2FsBarAq7sBS1Dgpm%2BF%2F0Tbn6BXAJr3hsLe3CZiRC81a37vC30ZMgWz7Rr9MeULFXVlCohPInyuhsaXUM4UyTCP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73868b7b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1317\u0026min_rtt=436\u0026rtt_var=1444\u0026sent=31\u0026recv=42\u0026lost=0\u0026retrans=0\u0026sent_bytes=17808\u0026recv_bytes=3290\u0026delivery_rate=14685598\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=627\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33272,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 33272, version 2.0","md5":"3f3ea9424062d955ceee8e0fc2b15d70","sha1":"7f33c7c45f5f1f4c6e5ab2c6669a3e7041dbe685","sha256":"7aeaf037fba5e3e1b3a1862934f5cabcc863d8e1bd6f45d08c4338d2f93b3e2e","sha512":"7bfc05c292676578f14943a2f69065c16729c7e5a3748088ee512c3758410eb4863dd1d67410448ddcce7daafcb77b0c610f2d7523d039dd46a9da900a2922e6","ssdeep":"768:uHUJyWkMY5zAOueGfKzs91wZvV6ZDVLZrrsxtbJButcy1VUMZh:E5geGfUs3QvO5LxgLNBujT","tlshash":"5ae2f10288a0eaa9e541959416b46bdbc159e0fc8cd727d48e2185cff7dfe03f74291b","first_seen":"2023-11-01T14:41:06Z","last_seen":"2026-04-02T19:11:29.308648Z","times_seen":161,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/assets.website-files.com/624b08d53d7ac60ccfc11d8d/css/xverse-web.88defa45b.min.css","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /assets.website-files.com/624b08d53d7ac60ccfc11d8d/css/xverse-web.88defa45b.min.css HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"6953c3e2b17357130ce4635b51d25535\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Gc5dtp5z5OO5vHi%2FL9SQY55t9w8HTxecPeXcTT0GoxkPB9eMEPipSVVta%2BZJX%2FhijHuI69z6rU7Y5x4zAQ9G3fTT8hrCZzFdlj1Lzh%2FPjbSfSBHa3zWG3WorMXy8E5WljcY7wMoSiIwA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73868c3b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2505\u0026min_rtt=395\u0026rtt_var=2529\u0026sent=621\u0026recv=336\u0026lost=0\u0026retrans=0\u0026sent_bytes=775195\u0026recv_bytes=3601\u0026delivery_rate=153534401\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=715\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181519,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a83787f944e7c8a0915842ce079dfb83","sha1":"d79927cd4b4853be7cb4709f8fb58124fefbe3e5","sha256":"e1cd4f4280ddbb40edefed4d41a397bae6fe7b98682ec34c86686140583d51ff","sha512":"a25051ec2865e259eb5158fddd4f4b74a8669a8bb4e042a5f2996d2b40140d3916f21374e68a703d7044819617b95f02aac777e3f162447ed98a83f225a6b506","ssdeep":"1536:X1fjVgstI2Vp/uExbd+6Fxu/Fyx5VknKPHJHtnsAfWJ2N7znfNU+WGDC3:X5VFTX/uEJd+6Fw/cunAHJH2","tlshash":"d70497235114335cb03bc89297f0b746e114c42bd196abe9a912da16c7cf9c33bb26bd","first_seen":"2025-09-23T06:26:03.968326Z","last_seen":"2025-09-23T06:26:15.091151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c82f4a.js?site=624b08d53d7ac60ccfc11d8d","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c82f4a.js?site=624b08d53d7ac60ccfc11d8d HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"0d2f10dc66fa6608db7885d7d7595be7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fuYiy%2FnY5iF%2FxGB%2FLEnEBOkBGl7KmSSSylXMBkL5giLCVwfiq2PIy0msZneCGyMulTxAx1PnFC33InqkgJJiuAaM1DKRha2B%2BwaRc2cbNMANWGEwUgjNKTHQA%2F8ipADa3e%2FDzaUkZJXW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73878d2b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1444\u0026min_rtt=395\u0026rtt_var=545\u0026sent=593\u0026recv=332\u0026lost=0\u0026retrans=0\u0026sent_bytes=741912\u0026recv_bytes=3290\u0026delivery_rate=153534401\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=660\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-04T03:41:46.218873Z","times_seen":217448,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.googletagmanager.com/gtag/jsbcc4?id=G-L7JX9C5KDJ","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /www.googletagmanager.com/gtag/jsbcc4?id=G-L7JX9C5KDJ HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-length: 444534\r\ncf-ray: 9837f7392996b51b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2024620f3642c47b5af475606c276e16\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2B8IJos486nz9mTIhr%2Ffn1owBonTo9crwJPJZlKcsPLNWZKsstbLH8LmxIxdDCLsz1wqG%2FHJFO3gi5SrMCF5GJ0Fev7k%2FIDqVUhM3hFR2iCygWeyqk4HSyJonWklgtYhHOAaqsKLihfmg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=897\u0026min_rtt=395\u0026rtt_var=685\u0026sent=647\u0026recv=349\u0026lost=0\u0026retrans=0\u0026sent_bytes=804588\u0026recv_bytes=3601\u0026delivery_rate=153534401\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=723\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.jsdelivr.net/jquery.validation/1.15.0/jquery.validate.min.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.jsdelivr.net/jquery.validation/1.15.0/jquery.validate.min.js HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"1581fc1833d20191cbbad5256a0b1381\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m%2BSIkDsx%2F4D%2Fi82mgkXsUHhZ4bTObjF7YWfDmhayKL2C1gZK4MQlH6hHlb2pCyZZRpVAFjc3incE7sU77JLLWp6DHVIXffhhsp%2BPosQ783PhfYNmWukAPALnCo%2BEmTVzrEFTwtWzoUey\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73878dab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=580\u0026min_rtt=395\u0026rtt_var=91\u0026sent=192\u0026recv=173\u0026lost=0\u0026retrans=0\u0026sent_bytes=215018\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=646\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22688,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22549)","md5":"c638c11f24acc634fd4f438486d3eff2","sha1":"2c8ae454083d5a46dbcf448c1410effff4113c91","sha256":"419ad47de89cae606220da3ff55c33d6e854f53eaac6f057a6273c645dd31a84","sha512":"81360c66e6fc70ea44c0d9cd7b2da1dc19183b644ee94afffa2fe109b8f4677518afa5359cf08fc80cb5dc6f26dfde51710d6153e24ad9d584c3b32e71279694","ssdeep":"384:QNrHpwEC+JY6/tNAlHsdkMiKnFpY54LOdANtc0Eny+RWgW7N3rwV/vtrx+OLDJgy:5+JY6/UlHsdkMi2FpY54KKBEny+HxVR9","tlshash":"52a2a78d76d670465e9720f4a09b660761b66da0a008e83cb5f8e4d1baf4ecc50f7f78","first_seen":"2023-04-05T03:24:42Z","last_seen":"2026-04-03T19:07:20.119558Z","times_seen":1235,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/x.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /www.xverse.app/x.js HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"3813da4139afe4c7a769b52a2b683452\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8N%2FvHdhxVq3LPTdTXAL1kwKWuiZSe9ZqLumT8Wxq53ZYvNEDtKMh5%2FwoxMSnKqokr3ezl9lKsbP2RG%2Bfx1jIrfZZOB21ODBOra76e4n0pBtHFfh%2FzViByhGO3fpdkky27nUb7zOlUrnX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73c9cd5b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2345\u0026min_rtt=550\u0026rtt_var=1499\u0026sent=452\u0026recv=207\u0026lost=0\u0026retrans=0\u0026sent_bytes=337856\u0026recv_bytes=12723\u0026delivery_rate=28238895\u0026cwnd=194400\u0026unsent_bytes=0\u0026cid=788f84db88be3c5f\u0026ts=835\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11085,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d988f0f0c2ba4755ea1851cc0018f16c","sha1":"5c73810a95faa90340720e8c1f80028769e2f7f5","sha256":"9393c40d8e7cb5e093e66ceb41983215fc86ca58d601f764f9f60994bd73fe3d","sha512":"e1dbfbdd4f066a5621d5c933f3f86c88352459bed357eff1653b5368f94a6c4d04d0fb5222f0b6bff465c921669418b716ac081debbf4ca46cbdc78eabbdffaf","ssdeep":"192:fp3dOynq9wfD3e9Nv3zg1S/dn0SRMNqajdgpQ1VQyDn0RUOW9UdNKA5F:pg/dn0SRM0DqEf46","tlshash":"99328316a6247611043bc3f5b7e31a99e5220047a602c9793fec834e4fb2948da57fef","first_seen":"2025-09-23T06:26:03.970591Z","last_seen":"2025-09-23T06:26:03.970591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-23","alert":"Detects file containing Telegram Bot API","trigger":"xversewallet.pages.dev/www.xverse.app/x.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/x.png","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /www.xverse.app/x.png HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 15424\r\ncf-ray: 9837f73d0d39b517-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0b0656b1859505a3ea86854faac0a997\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YhvjQ%2F2lZBwsxPAv7gZ673%2FJPTJAkcrpmos6P1Ej9u9%2FNt9FLFYBxmgvyLixT8SWrF1SKQJ5%2FSpCSV268F%2B3XLZ7BQEeGltsMtAvpGLaFgpeWjWwgb0QvK4yBKJ4KpzoOyNmQRbX2iC3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2059\u0026min_rtt=550\u0026rtt_var=1311\u0026sent=460\u0026recv=210\u0026lost=0\u0026retrans=0\u0026sent_bytes=343211\u0026recv_bytes=13122\u0026delivery_rate=28238895\u0026cwnd=194400\u0026unsent_bytes=0\u0026cid=788f84db88be3c5f\u0026ts=944\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 560 x 896, 8-bit/color RGBA, non-interlaced","md5":"64cc897b03eed40486f22a17043730fe","sha1":"3559c37b2b25be815e79d126e27feaaa459c40a0","sha256":"4a8100ad66d25155d36a48d6044039e625a0c12521dd1ff3012fbe3763ea353b","sha512":"1de574dd4a03ef97d0d53920fa36c627518202c974519ec759b81cb771f510271f52c2529426856aef073bf27da14da725407741b4f096ccf12304fd266ea53d","ssdeep":"192:hsJhI2rhxCI3elNUDA9/8rln5yuHP21f1jDcVciwcaQPxjcB2Z/L9Jwf7:hs3tMsc8rlIoP21jDcVcuZcQ+","tlshash":"6f625ac04a521586a96ab188158d363b663f23cf1a49fd4258e2ece73cef9631b501f9","first_seen":"2025-09-23T06:26:03.972526Z","last_seen":"2025-09-23T06:26:15.089896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/64637a0aafc684e4c2627b56_webclip.png","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:37.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/64637a0aafc684e4c2627b56_webclip.png HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 3865\r\ncf-ray: 9837f73f6effb517-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f9d32b354aaebc47a0af6500cb0eb9bd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=erCVzymrHjvmCSvMbdPZjpq0QqMzIeHdBkjIwtAQ5Fg3ZWPwk0nBMi9%2F63%2FGjyykAR%2FwfKyqbPbWNXieaBHyvJH%2BWpgxxl0FRMov9xVSGmuoLOmfXWvU0WOlXEB6NzCfwHLlCI9XSWov\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2610\u0026min_rtt=550\u0026rtt_var=2351\u0026sent=478\u0026recv=214\u0026lost=0\u0026retrans=0\u0026sent_bytes=361266\u0026recv_bytes=13923\u0026delivery_rate=28238895\u0026cwnd=194400\u0026unsent_bytes=0\u0026cid=788f84db88be3c5f\u0026ts=1329\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3865,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"245e4c2fd0327d5df466894cf066880a","sha1":"16636d31b516c844ba41e0acda0957c2962f2fd3","sha256":"d3bbc7eef95b8a44177615ecd955461cfa0c46924ae4cbb484b6bbb86f558241","sha512":"b42be225d08fedc33e44710d612ace12fbb8f797cebac60d5444c9c449c28db90bea9e044267ce79f0e3224a97bad2f50756ad3b5244b50d107e4b449289d7e0","ssdeep":"","tlshash":"46819e7bb65a5d9bed382df8d3016e3613a67565900eda0fc85ae120bdb2ee111010ce","first_seen":"2024-10-21T16:37:51.354159Z","last_seen":"2026-03-25T22:03:10.582448Z","times_seen":14,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/css/xverse-web.shared.209063860.min.css","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/css/xverse-web.shared.209063860.min.css HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"714c37237722ec819e983b769dc391ee\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2yk36jPAJ8lMB%2B1rb9oD%2FktGKB7%2FczYkYzrJcASqXqR70Gnudcl2p9lHF8Ra0mNGBsZLr0KVoF6c0nU4TegK4YgoWN6dpXojWM1DC03FYrlUCvjDNbUhkjqiu1YSrvemQ6FH%2Fk77H0GN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73858adb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=822\u0026min_rtt=436\u0026rtt_var=64\u0026sent=83\u0026recv=69\u0026lost=0\u0026retrans=0\u0026sent_bytes=85755\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=633\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":371722,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"2090638601d84683b6498b0ba4e65a95","sha1":"fbfc55f2dea1043875bb8b2288e183047f72004a","sha256":"a671fc6d8f0abe2e1df00dc23971010fada3cc3d5c158a022f07740facafa057","sha512":"3bf7aa10d189b7e11467d93bb9c87ab4f2bd9017c1db74e685eaf1ebacf09c32758aa6594d166e683cbd84a358ee3c16d18e4e678889ab97ca03c8fa427ae319","ssdeep":"3072:WY2jhSj16ZgoNFUKrn53gv40os0gAs0YYK2UAcocRkIkFCzzUI97UEr+1hxzlF13:uY1fDG15YUzbggFkbotv","tlshash":"b584e8122a3830adb53b44fae5e2b1c6b018ca43c2e79bdaf554d466cbca5c3377561c","first_seen":"2025-09-23T06:26:03.974667Z","last_seen":"2025-09-23T06:26:15.086724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.googletagmanager.com/gtag/jsbcc4?id=G-L7JX9C5KDJ","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /www.googletagmanager.com/gtag/jsbcc4?id=G-L7JX9C5KDJ HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-length: 444534\r\ncf-ray: 9837f73868c8b51b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2024620f3642c47b5af475606c276e16\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FsEsdbBWfvz7t7cZZANbW47bEnOJ277VzNM3BowICni0g1IUOFCXl2qYz8MwpRNEACcZq7x4J8WsbKrDHiRY6agKRIi8h3Tay4cgh4jpU%2Fov01aYFpA73E4HJy27cxfmSEzkyYFZOpw8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=577\u0026min_rtt=395\u0026rtt_var=98\u0026sent=214\u0026recv=192\u0026lost=0\u0026retrans=0\u0026sent_bytes=237411\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=649\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/645d01e85e0969992e9e4caa_Full_Logo.webp","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/645d01e85e0969992e9e4caa_Full_Logo.webp HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1414\r\ncf-ray: 9837f73878cfb51b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2853661ad8eb1d3f21e7f3a432fe2641\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sROsF%2B4puw5MTIHpQBRs40QRhkjxLvzksIfbxUOKX4K4czTCJIiFhkLGP1Dx7j0WdICnoxvMfBuIoWRmOZpnTfGgRRskcGiujMANqhKXNJPyDCdL5rZN14duxekePd53ti0uQbxvIH6D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=601\u0026min_rtt=436\u0026rtt_var=32\u0026sent=123\u0026recv=107\u0026lost=0\u0026retrans=0\u0026sent_bytes=133646\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=638\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"258ff28e388a95a6c112ef0170fd7ddb","sha1":"87c1d81fe2befea6e5b28c654af3cc9076bc173a","sha256":"78eb5336388014d606cf0a0284d5cba498a88e4effb3907d5b63fc60dd3e24f0","sha512":"ab6203a3fa47d93532114d375281a12249de6260b8b2145034f51dd19c7f475c4eec6da412969e4ae1f604168cb834dae35e0f1597340f961b9bcc00946e2db0","ssdeep":"","tlshash":"a121e9c94700c162aac52a311ad62c01aa399e77c419be285c4f1c159a0e29ced5b527","first_seen":"2024-10-21T16:37:51.279041Z","last_seen":"2026-03-25T22:03:10.58017Z","times_seen":17,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/js/xverse-web.schunk.36b8fb49256177c8.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/js/xverse-web.schunk.36b8fb49256177c8.js HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"9926dcb2b78bd187b9a5ef3898458f4c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=n6lTfUy6tmex0Fd7AGH824rAB685OJxwTLnF9Rc8g06c%2Bq%2FC8FTnLTcgsyXAd4TE7m9hAzcZt%2FA%2BpVJIeN4zeM7VVEx1Ycva055NR0HPRolO3hAOAF9fuk2ph9Qhc%2B%2F1MZ%2Fiy48nWFdk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73878d5b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=600\u0026min_rtt=395\u0026rtt_var=89\u0026sent=191\u0026recv=172\u0026lost=0\u0026retrans=0\u0026sent_bytes=214367\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=646\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41429,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41429), with no line terminators","md5":"6d1d67fe2715f25c2fd98a9011d8ea67","sha1":"fd1ce2d8e0999d8279b32211977bddeb04aed0d5","sha256":"8b7d0de9f3df9103d70ed000c17b348240623ac4e4053d56fa0d5cfd8d74d79d","sha512":"f6c9f1147f527cf9e787075eac748e04606872ff4220feeb65cff21672c42dcd2905b2bd31ced2e80c2d249b5a32a69023867b43712561b01f700f6b57e30ddf","ssdeep":"768:g4DiJdpMNsppahKJpE8c32YpIx6qh215vgS9AoS9I1hh00:g4DiJ/1HasJmoYpI1k179AK1o0","tlshash":"be13228dfac1f0914363e966822f941bf27a6a59b04fd4d4926ad1e0dc7c58f8027e2d","first_seen":"2025-05-14T07:45:58.253137Z","last_seen":"2026-04-04T01:31:22.630829Z","times_seen":10343,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/js/xverse-web.dd3d9e8f.a95a570483193749.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/js/xverse-web.dd3d9e8f.a95a570483193749.js HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"7aeb276bb7de40965956fc208ac9733f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bn4j0HBOcUtYx7Hj%2BKkUqB596mlIa8gnnUS%2FJqECdirDAcJ40iNYZ7EDN94CTHN4oCKkhajO668S36753VwfdoTDI0EOf5sRYsy9I1yswUGEr3Z0ZxBGtTJfqDWB%2FksFZi53cUdiJA9B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73878d9b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=630\u0026min_rtt=395\u0026rtt_var=77\u0026sent=185\u0026recv=167\u0026lost=0\u0026retrans=0\u0026sent_bytes=209504\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=643\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10902,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10902), with no line terminators","md5":"ab02570253b241b5d83a1eae23929f50","sha1":"5a6657a828b4f99b8ab2182719b89eccf99eaf74","sha256":"e88a150d4ee5fd269b5c66961a705e89166f641a340f003e2c0a96637fe1034f","sha512":"eb854074846e8ec2a9e9c624fe81609bd3610399cf3ad572b0f736fe639fdde04ab039dced71e227d1ba0e9dbc25d9cf3fb64189fd9463008e4ddff2d21e223b","ssdeep":"192:Zjok01D+AWpc+2KBrjS9cDWY5FeNENEq75naLubHX9Vq4kZpOQf:FoLt+P+KBrUfC3q4kf","tlshash":"f122e92473947077a0ea30cb0c5fc708732d2d21ed069ae9e352d9a524f99a514bbf7e","first_seen":"2025-09-23T06:26:03.979131Z","last_seen":"2025-09-23T06:26:15.101278Z","times_seen":2,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/assets.website-files.com/624b08d53d7ac60ccfc11d8d/624b08d53d7ac65f61c11deb_Satoshi-Regular.woff","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /assets.website-files.com/624b08d53d7ac60ccfc11d8d/624b08d53d7ac65f61c11deb_Satoshi-Regular.woff HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: application/font-woff\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"54744eb3998db2dedae11fc60c6d738d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=00aPvKlkG2bk6EdMLlBBaXxB8uFcPk8pvsyXeCcKkaaeh9M6ngleGwTmNNE15cXc10V0t%2FqaWvi0Crq8198N6OjAJ4vGm1AMuLOs4MJSGxOW3LMW3PRnP0WERFIBlfJKU8tsxaa5wm77\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73858aeb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=901\u0026min_rtt=436\u0026rtt_var=685\u0026sent=58\u0026recv=48\u0026lost=0\u0026retrans=0\u0026sent_bytes=52145\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=628\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33024,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 33024, version 2.0","md5":"3adf562e446a18d90ba98f72ea08601c","sha1":"d321698252b78d56103cc01abedad2d1b4d6709b","sha256":"9fbc41c98039b8f79ef0c037616a24d619e6b33f5a833c6f416816d7b493ccad","sha512":"6648afed69fe5decf7cee32b464e2c2a3de4813f165b9c1203cffe1d105064da173dc7e9f02ef1333ac488e81bca10de7ed41e1feae07252411810a67c66940d","ssdeep":"384:mnJqXzp+sU+bxnd9NT3/4KQl9i1XDuiFJMTGln2qO9aGkj8wPHnet3piWGmSPDOO:ZPlMKp571/Qa59mtkWGm65WXz2","tlshash":"23e2f042d295ab14c3d30af96e737e01e6e3e895da1e07ad09d1a9cff09f02363c0218","first_seen":"2023-11-01T14:41:06Z","last_seen":"2026-04-03T09:48:44.148315Z","times_seen":120,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/645cc0b227e0360c207e1802_ArrowRight%20(1).svg","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /624b08d53d7ac60ccfc11d8d/645cc0b227e0360c207e1802_ArrowRight%20(1).svg HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\nx-amz-id-2: OiFj4wBDeiI9vR5pL2F9zuY875iP0iDB+80O0FJM/YXNdDDifcasxArEKtHZ9ecejXVNtBEr6HU=\r\nx-amz-request-id: DKVDEGVBMW24V0H0\r\nlast-modified: Thu, 11 May 2023 10:17:24 GMT\r\netag: W/\"8c064756fba284082bd4f760e306094a\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: 1DnY0.TPbJAOPJsj1L8sDI_zGfw2UmNp\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 9837f739d84a568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":343,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c064756fba284082bd4f760e306094a","sha1":"ebf4a7dcd9357b8d87b6830f1a5f401fb964ca7d","sha256":"3ab51883143b48b7d7b3cb6dfc748c6ced8b10e6ce7cc55fa3ca2eb7c19315d0","sha512":"7be6587f47a84ae99912e53453b1e0361346bb6615e55fb6294edc21798986c066e310927ed5f24a5c5c31d7432594d3b0c9e5507291e36b46862bd3b2b848a3","ssdeep":"","tlshash":"20e08616638c0e7cf7234e35f3693235507f625347496254c873213152182bf693f9d8","first_seen":"2024-10-21T16:37:51.358376Z","last_seen":"2026-03-25T22:03:10.585691Z","times_seen":12,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":69,"dns":3,"connect":1,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/663dd6fc78b32ee6f17b625c_Dashboard%20-%20Coins%20(2).webp","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/663dd6fc78b32ee6f17b625c_Dashboard%20-%20Coins%20(2).webp HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 71764\r\ncf-ray: 9837f739eaecb517-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"efab411256f88f43cdbe7620a3ec4381\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aG7p3QlBoC21xJJ9UYegoBYL0JzoYjsoGCdGdScGXa240SGpZjzMqvXGnc3lXpj3RMnKtZB1JZUsKnnLw6jepIaiyU6Rzfv9lUg%2F66dqxAY6i9O%2BMz5fuXDqI0P7IGoQn%2FSv50L2PuGH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2281\u0026min_rtt=550\u0026rtt_var=1207\u0026sent=187\u0026recv=198\u0026lost=0\u0026retrans=0\u0026sent_bytes=24817\u0026recv_bytes=11822\u0026delivery_rate=812688\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=788f84db88be3c5f\u0026ts=470\u0026x=1\", cfExtPri, cfHdrFlush;dur=3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c05d095384b72d1539a3e55b824ad76b","sha1":"585b0f24d702f3ffdaa8c659197d01fe7c6242bb","sha256":"e5cf526b8711f1e97cb0f83d45fac9b4d6966a42c363a0093de88c3b46fe89ba","sha512":"2829e7bbbc7f69a244ae9283251bcc49059d2179b079a1c21288631030a9312085c03a0221b5a2e12e99a335e71d25c4099308e2655b971bc047c66fd47fe6e8","ssdeep":"768:7v/YBY5Ekxv0evEOHSTvUqqvsBm63BRp14R2eZkEULcZtNhYXbVIAPNkQDi+B/td:7HYet8EavUqnRELkEUO7h4bZ9DDBcy9F","tlshash":"7b63011b90fcda0486dc77634494a0bd4a1383c54d56a89b3266c75a823ae1f1bb398b","first_seen":"2025-09-23T06:26:03.983706Z","last_seen":"2026-03-25T22:03:10.577729Z","times_seen":5,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xversewallet.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Sep 2025 23:35:55 GMT\r\nexpires: Wed, 16 Sep 2026 23:35:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542982\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-04T03:44:26.402971Z","times_seen":132840,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":220,"dns":2,"connect":21,"send":0,"wait":34,"receive":25,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xversewallet.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 16 Sep 2025 23:35:55 GMT\r\nexpires: Wed, 16 Sep 2026 23:35:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 542981\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-04T03:44:26.402971Z","times_seen":132840,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":109,"dns":1,"connect":21,"send":0,"wait":23,"receive":57,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/x.js","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /www.xverse.app/x.js HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"3813da4139afe4c7a769b52a2b683452\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2hwFU9RfTGjzDdVDXcMTkKLCfJECNdL6PcI14f1drVr1StDrwSDoS3cHK6fpjQPfRYt7ECdHvSGziQ%2FWtAPaWr0N3FMAqbXu%2FwBDV9hdQsdx8j2y3EoD0npUuTGUrCdGLaGLx9IRjnBm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73858abb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1886\u0026min_rtt=436\u0026rtt_var=2253\u0026sent=26\u0026recv=38\u0026lost=0\u0026retrans=0\u0026sent_bytes=14119\u0026recv_bytes=3290\u0026delivery_rate=14685598\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=621\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11085,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d988f0f0c2ba4755ea1851cc0018f16c","sha1":"5c73810a95faa90340720e8c1f80028769e2f7f5","sha256":"9393c40d8e7cb5e093e66ceb41983215fc86ca58d601f764f9f60994bd73fe3d","sha512":"e1dbfbdd4f066a5621d5c933f3f86c88352459bed357eff1653b5368f94a6c4d04d0fb5222f0b6bff465c921669418b716ac081debbf4ca46cbdc78eabbdffaf","ssdeep":"192:fp3dOynq9wfD3e9Nv3zg1S/dn0SRMNqajdgpQ1VQyDn0RUOW9UdNKA5F:pg/dn0SRM0DqEf46","tlshash":"99328316a6247611043bc3f5b7e31a99e5220047a602c9793fec834e4fb2948da57fef","first_seen":"2025-09-23T06:26:03.970591Z","last_seen":"2025-09-23T06:26:03.970591Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-23","alert":"Detects file containing Telegram Bot API","trigger":"xversewallet.pages.dev/www.xverse.app/x.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/assets.website-files.com/624b08d53d7ac60ccfc11d8d/624b08d53d7ac665e0c11dea_Satoshi-Bold.woff","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /assets.website-files.com/624b08d53d7ac60ccfc11d8d/624b08d53d7ac665e0c11dea_Satoshi-Bold.woff HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: application/font-woff\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"717df5bfaddb39756349a6e7a3491ae2\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KBF%2FEgHj%2F4O9dakmRAJzmPpM9h%2BtvMj1wxLWST631cluHXRnUHJz%2FE6OfjE4jNWMivvy3AiHk%2Bj0HW1nMDNMn41idMjIcn%2FNR%2Bibav5BcvnPt%2Bt5BeR8s%2FOZU6EX1vY4eIFM3j%2BrMaq9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f73868bdb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=561\u0026min_rtt=423\u0026rtt_var=35\u0026sent=134\u0026recv=110\u0026lost=0\u0026retrans=0\u0026sent_bytes=145813\u0026recv_bytes=3290\u0026delivery_rate=66165202\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=638\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32972,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 32972, version 2.0","md5":"fc3b9a8724a46bc0439e8aedffbed4e0","sha1":"84452c42af906774803ce2da0c83adf10c831281","sha256":"1789917c68172af8a24eeec4ceced208471f7906c6ac51fb7017636b9af6cbe3","sha512":"26c74f29dcf075bddc32f2b299ae564811c871e6b4448711eca66fb4deb921261ddc235f60280408313ac304a05c4bb12beaa8618638467d8242a39cf05057a2","ssdeep":"768:gclGgd8JiTX0wwGPfTSASVrjvq7bFlyQqTcHQBN06uh:5xiCX0MXTtSVrDQry7TN0R","tlshash":"83e2f1408ce3dea4bbb240d12c10e501965aa4fdaa37264e439c60c67fcb5da6bf5387","first_seen":"2023-11-01T14:41:06Z","last_seen":"2026-04-02T19:11:29.292128Z","times_seen":141,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 23 Sep 2025 06:25:36 GMT\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-04-04T00:21:24.107584Z","times_seen":4124,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":125,"dns":2,"connect":27,"send":0,"wait":47,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/645b8dbc0be57f625a4756a4_IBMPlexSans-Light.woff","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /624b08d53d7ac60ccfc11d8d/645b8dbc0be57f625a4756a4_IBMPlexSans-Light.woff HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://xversewallet.pages.dev/\r\nOrigin: https://xversewallet.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: application/x-font-woff\r\ncontent-length: 80240\r\ncf-ray: 9837f739da975699-OSL\r\nx-amz-id-2: kTwZwRoEOo/Ve1HHqeSFCP8Zev811jtcnARnawKsiVoTx48ZPrDVodSy4rkxf92bWKyBAyIFJTo=\r\nx-amz-request-id: WZY90EXMGX2DNF2W\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Wed, 10 May 2023 12:27:41 GMT\r\netag: \"51633a597a34afcef5beee279f18545b\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: .NGyMuNJDY0KYqAzqqEaztqjHAnNGb4j\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":80240,"size_decoded":0,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, TrueType, length 80240, version 3.2","md5":"51633a597a34afcef5beee279f18545b","sha1":"648651d47886922be7a8fffd6f848bac168fc4f8","sha256":"d78d5961b5119191799fdebf6299cf53d83e370bafc851539783e7bfb2dd5961","sha512":"44cbbebc54ae65e34f91a9e113b223dc3176aff76c42fad33a20194b458de8ec0cc283a7f4ae024f3d09a57af7eb8da3df622d13f2747e0c89a3be07046af7cf","ssdeep":"1536:BBnhYmS5q3EhskC3o1F0QCcYa8MH5Bhwq/OiccIMIPwJbuxdJZmClDTQ5S:B1hCo3B93o1TNYaH6q/sM8wJCHSC185S","tlshash":"8a7302913967cd11e5ab99bcd5811f87f3e0026e079e8c2e0f688867ce601fc95ae457","first_seen":"2024-10-21T16:37:51.332923Z","last_seen":"2026-03-25T22:03:10.583413Z","times_seen":12,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":56,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.googletagmanager.com/gtm5445.html?id=GTM-5V9MJNW5","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /www.googletagmanager.com/gtm5445.html?id=GTM-5V9MJNW5 HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 308 Permanent Redirect\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-length: 0\r\ncf-ray: 9837f7392998b51b-OSL\r\nlocation: /www.googletagmanager.com/gtm5445?id=GTM-5V9MJNW5\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QgbqgOjNW4Lg8DMx7aWEUkNHg5G82mcQ99xgjZ8PZTNBKIIVSFxXMpLuJumnxjeYI7e0MiX%2BY8g9Fn9BS%2BMwzB0gIXxezhrnJyDfCW7EKm0Wnjc1iRsStCZNU48T%2FAARTG2cDMcXZ4h2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2505\u0026min_rtt=395\u0026rtt_var=2529\u0026sent=620\u0026recv=336\u0026lost=0\u0026retrans=0\u0026sent_bytes=774679\u0026recv_bytes=3601\u0026delivery_rate=153534401\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=714\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/static.hotjar.com/c/hotjar-5349497.js?sv=6","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /static.hotjar.com/c/hotjar-5349497.js?sv=6 HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ytJNYgxP8GcP4JzzHktgxQvcK3es%2Fz5aTj4HSheEa9TDq6HMx5pA7UDN0iytaLq5%2BXrswgTZS3B6A%2Fz80d9wIa7Mg90yJXzx2wozFV7KRN6Y9TB4VVOZjenEY4mrqM8e8ljDBeFvuYr4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f739399bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1678\u0026min_rtt=395\u0026rtt_var=320\u0026sent=973\u0026recv=403\u0026lost=0\u0026retrans=0\u0026sent_bytes=1251016\u0026recv_bytes=3636\u0026delivery_rate=153534401\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=793\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/6687f6877f173785a9b339e9_dashboard_hero.webp","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/6687f6877f173785a9b339e9_dashboard_hero.webp HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66626\r\ncf-ray: 9837f739faf7b517-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"201a7ff79fad79f0f52fdcae2baced3b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BTgHjzwp%2Fm1w6lnVuemXFANlIBHuIfj2OeBlcFqGlXvFaa4iDYtRkpbKdB9exoBMLoch4TK6ZPszcq5fs9tFgxoerphiHjb2ck%2FfnJdmrCGB%2BpKnXXoFgz5ZskmR7J52i63OI05Kg2%2BA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2339\u0026min_rtt=550\u0026rtt_var=1583\u0026sent=328\u0026recv=202\u0026lost=0\u0026retrans=0\u0026sent_bytes=192817\u0026recv_bytes=12003\u0026delivery_rate=28699826\u0026cwnd=96000\u0026unsent_bytes=0\u0026cid=788f84db88be3c5f\u0026ts=479\u0026x=1\", cfExtPri, cfHdrFlush;dur=2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5657c7d4dbce64f23d3313d01efb752a","sha1":"485c35df1faad7444af107acf55838574560caba","sha256":"fdeff2a6a67c8ab79e68995f6e4f1a88bb1cb8104705498a1d6c2d3fcaef80d7","sha512":"9eb1e9c696c48ed7b834a5aa49dc2522e98970873cd6ac52f630e9c9baab6e7a489842a01f8db0348a92c6b71d3d66c3d32786034f6edb77b1222f2fed6381f3","ssdeep":"1536:sNaiWtWDc1sXqUWTr2I+CNZl8BZSjYI6S/F5:liWWDc1sX+WI+CAcYHwF5","tlshash":"ef53f14b93ecdff9a152705a30548f5f0e3e5adaaf34969f49dccc988986ca440f2d90","first_seen":"2025-09-23T06:26:03.989219Z","last_seen":"2026-03-25T22:03:10.559477Z","times_seen":5,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/64637a04ad4e523a3e07675c_32x32.png","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:37.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/64637a04ad4e523a3e07675c_32x32.png HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xversewallet.pages.dev/www.xverse.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 729\r\ncf-ray: 9837f73f6f01b517-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"781a0bec0d337f52ce1fe14350708cb7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KiNKKY2pJYsPLIM9iDsnglmYoOaTE5tGTpM67Owooc9EyiAfJRmIyJc%2F81YC9gat0P%2B8JiWys%2BMZJMOxcnfEfZkMe31wvjXnHYJwrKcOpj063fEk6dMMnnyhEcRj3R6sCZxaFMRiotex\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2835\u0026min_rtt=550\u0026rtt_var=2535\u0026sent=476\u0026recv=213\u0026lost=0\u0026retrans=0\u0026sent_bytes=359779\u0026recv_bytes=13877\u0026delivery_rate=28238895\u0026cwnd=194400\u0026unsent_bytes=0\u0026cid=788f84db88be3c5f\u0026ts=1325\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"43576f528aa5ff432bdb02f43a8a4582","sha1":"664ccf872227201ee87f95718f2b0f7b1e71a7a6","sha256":"145bf8a21974d4ac9b500e37bb1443f2e15aaa2e6ad5a58972232b174540d11b","sha512":"e09785cc1767bce553f2158ea69752fd447191f56e24bd6db48426fd06e79e11d96d72d7742e25ccd24b0722bd8bb7ecfcca4f7f9614a0f1279d7774b2b43dda","ssdeep":"","tlshash":"c301608b43d4d2369ec74372e62a41159d4d4621d47a334c2ba67c3e522a258e3e8adc","first_seen":"2024-10-21T16:37:51.350954Z","last_seen":"2026-03-25T22:03:10.571314Z","times_seen":14,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xversewallet.pages.dev/www.xverse.app/","fqdn":"xversewallet.pages.dev","domain":"xversewallet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-23T06:25:35.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xversewallet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 18:49:12 GMT","end":"Sat, 13 Dec 2025 18:56:30 GMT"},"fingerprint":{"sha1":"31:23:3E:4C:97:E1:96:50:96:A8:6B:26:28:B6:2E:61:35:4B:82:62","sha256":"2E:32:39:EE:DA:69:B8:12:F4:2F:01:FA:07:73:73:6B:DD:C9:F3:42:A5:06:2F:4A:9E:08:E3:C2:47:26:7C:14"}}},"request":{"raw":"GET /www.xverse.app/ HTTP/1.1\r\nHost: xversewallet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FugiGOv5KkYL%2Fw2I1V7MBuU9iFW%2BkLmyA5FnbJ24FX8IUNEdyLdu%2B1GiYZuzX94g9Zb24flGR2Net0f3mdVEe9YWVuM%2BS9IqcTmOFsQtJrVk%2FJRVmlWHAZMEY50lBvnBsQBrFTY5DsPS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9837f7366ee1b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5699\u0026min_rtt=436\u0026rtt_var=10464\u0026sent=7\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3019\u0026recv_bytes=1277\u0026delivery_rate=6862559\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=52b7009367f8decf\u0026ts=426\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Optibase","description":"Optibase is an A/B testing app for Webflow, enabling data-driven decisions by testing various elements such as copy, design, or entire pages, aimed at improving site conversions.","website":"https://www.optibase.io","common_platform_enumeration":"","icon":"Optibase.svg","categories":["A/B Testing"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":35614,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9683)","md5":"233c79351a1ee670c588c705a6587428","sha1":"d01d627606caa0c67a6ad9069e3591391ccf154b","sha256":"264c6402c705b741caf34c1367a0f464cd9923c788b14a83535d2739e23355a9","sha512":"8d68fea496ccc60cf4620e7124cfbc101addf8a4ad50d94e6e1144c6b932441e018a5aafcc47f3ed9a8a56660205d96df1b67d615cb13fd4d0402a416dd4d166","ssdeep":"384:xsTC3LoEFyYYPEyxyv3lQvCvYsV73NL1SJYOLhj+vruF6Gn9ZJp4u8NhI+urywlM:xsTC7oMRqvCvfVZBS6xNSblaT","tlshash":"dcf23a66f9e451a312030feaf1b5bba5b5d7856ac6878d21b2fc81c5cb83ec5cc1264c","first_seen":"2025-09-23T06:26:03.991687Z","last_seen":"2025-09-23T06:26:03.991687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":265,"dns":4,"connect":1,"send":0,"wait":168,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/645b8eb3f76c748aacc243d6_DMSans-Regular.woff","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /624b08d53d7ac60ccfc11d8d/645b8eb3f76c748aacc243d6_DMSans-Regular.woff HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://xversewallet.pages.dev/\r\nOrigin: https://xversewallet.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: application/x-font-woff\r\ncontent-length: 35740\r\ncf-ray: 9837f739da995699-OSL\r\nx-amz-id-2: yA4RaoebILLTU8W8beXU2ovjwk2jKz05Nyx1K30lYh8p83K6ePvUmKV/o30eZ9mnew2Y7mu1Koo=\r\nx-amz-request-id: 1T3Y4Q2JWG45Z958\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Wed, 10 May 2023 12:31:48 GMT\r\netag: \"c005e98aa4bdd210c5c6bd212eb1c60c\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: eJqt1H_EQTYLzsznS3hLWHDgzmJeJ96I\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35740,"size_decoded":0,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, TrueType, length 35740, version 1.200","md5":"c005e98aa4bdd210c5c6bd212eb1c60c","sha1":"c622edaa12c5b6a5e58222099421159c5efd9cbe","sha256":"5c8fa88b9e48eacb06f43c6282a0430ce24b22e1d4465f831b0674fc889b0a9c","sha512":"96823eca79827b846c1975565be6f7785226ec054392184aef96b19612d0d9af26c70f3cbd11549d873e09e98345ce37548950b58d0c70a4a6cb41792a0246b0","ssdeep":"768:2naaOAcTypQ5Lvl4DMjquyC1hnnHOPQ8lzs/ykGGdUkkkHFA/V9wl:WFOjAMjqLC1hHyQ8l4OGdrFA/i","tlshash":"57f202f89b00c028a727f57a7a9c44c888fe57bc8fa5b684aeef5a06d598e170d51071","first_seen":"2024-10-21T16:37:51.337511Z","last_seen":"2026-03-25T22:03:10.55333Z","times_seen":14,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/624b08d53d7ac60ccfc11d8d/624b08d53d7ac65f61c11deb_Satoshi-Regular.woff","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.160.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xversewallet.pages.dev/www.xverse.app/","date":"2025-09-23T06:25:36.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 Aug 2025 17:30:56 GMT","end":"Mon, 10 Nov 2025 18:30:53 GMT"},"fingerprint":{"sha1":"4E:8C:AA:A3:52:1E:AC:1D:1D:23:4D:AC:0D:48:D5:BB:F9:04:B2:8F","sha256":"9F:CB:1D:9B:6C:0D:B9:B3:80:11:A4:E0:06:8D:F6:2A:5A:F8:2B:36:D0:55:D7:9D:F2:31:72:29:4F:B0:6F:A7"}}},"request":{"raw":"GET /624b08d53d7ac60ccfc11d8d/624b08d53d7ac65f61c11deb_Satoshi-Regular.woff HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://xversewallet.pages.dev/\r\nOrigin: https://xversewallet.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 06:25:36 GMT\r\ncontent-type: application/x-font-woff\r\ncontent-length: 33024\r\ncf-ray: 9837f739da955699-OSL\r\nx-amz-id-2: 1U2ioFUsSQUY8rOXTWck28JzzYgL76YFaTJ+Gnj/izmWSiEykiHNzleIJmhTKddhsbVg7oE5yNxNQbCyU/wTzCglBWx8kRKZ\r\nx-amz-request-id: 1T3ZC7T0R1H3A5BE\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 04 Apr 2022 15:03:50 GMT\r\netag: \"3adf562e446a18d90ba98f72ea08601c\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: E_qo8Lrek0yfQp36JE4SoE8124ZlPc0.\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33024,"size_decoded":0,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, CFF, length 33024, version 2.0","md5":"3adf562e446a18d90ba98f72ea08601c","sha1":"d321698252b78d56103cc01abedad2d1b4d6709b","sha256":"9fbc41c98039b8f79ef0c037616a24d619e6b33f5a833c6f416816d7b493ccad","sha512":"6648afed69fe5decf7cee32b464e2c2a3de4813f165b9c1203cffe1d105064da173dc7e9f02ef1333ac488e81bca10de7ed41e1feae07252411810a67c66940d","ssdeep":"384:mnJqXzp+sU+bxnd9NT3/4KQl9i1XDuiFJMTGln2qO9aGkj8wPHnet3piWGmSPDOO:ZPlMKp571/Qa59mtkWGm65WXz2","tlshash":"23e2f042d295ab14c3d30af96e737e01e6e3e895da1e07ad09d1a9cff09f02363c0218","first_seen":"2023-11-01T14:41:06Z","last_seen":"2026-04-03T09:48:44.148315Z","times_seen":120,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":69,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}