{"report_id":"c0d90434-0b22-49ff-a6ee-db72c2ad4f58","version":6,"status":"done","tags":[],"date":"2026-02-16T13:32:07Z","url":{"schema":"http","addr":"raydium-io.my.canva.site","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"raydium-io.my.canva.site/","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"title":"Raydium Wallet | Powerful \u0026 Secure RAY Wallet App","dom":{"size":33899,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7055)","md5":"9692807cdd9bfefce231492f71e9352b","sha1":"a384a9b4b3e4e71c7e02b05bdbb60faa580e16ec","sha256":"a80d35ed15a03eedd2780c1714ca1d8cdc3d579e1932e64c40ebd517645526cf","sha512":"85c5d0424e0ab8dd27b749ac64bc3e49ecbee835cb7eb39034538e16477bec73af233720402a72e9445d41cd05b30796eb9d74d2f11dacf80c68f48f5acdaba6","ssdeep":"768:b1AFNwVNp1XM6tFMw9XFAnCE4DTwqCWuM:b1AFKxmw9XFAnI9","tlshash":"2de26c2e6d33102a268768ccf3f3a6597779d10be985cc65b2ed53490fc38d888627b5","dom_hash":"domhash6f4e1d4cf0809dea80c376797625a9a1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"raydium-io.my.canva.site","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-23T13:32:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"raydium-io.my.canva.site","ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"domain_registered":"2018-04-03","domain_rank":0,"first_seen":"2026-02-16T13:32:09.713085Z","last_seen":"2026-02-16T13:32:09.713085Z","alert_count":37,"request_count":37,"received_data":3485117,"sent_data":24904,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/03c0faed87f1c177.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"25f46999dcb5d0c25c538a73345250f6","sha1":"ad3e389f4d4575fdb4866e6b2bc0e84fa57789af","sha256":"cd9052a0185965be268ac11080e9bef9463079744ebf79b004a2b46cb10456e7","sha512":"e1a29598fa53ad3df0c374ad54819b7ea1561db90b0db2ae53f9ab2dd6e84e3bf4759e7ea7046a05207a5917f21e60fa84e6cf17dc9f634756207470616bb0b0","ssdeep":"384:hi65ANV0Olkh0ZZL8SCQ4IAxADAli2ygAXAzObYQiYCKe9esaMOuMgEZroZT:hi6YV0Olkh0ZZL8SClk2ygAgt5FhaT3S","tlshash":"0162099472aeb96c51e3d4e0d43b4062f60e69b0b80cc8bdb9bddcd46969c40d573b71","size":15828,"data":"","first_seen":"2025-09-27T03:59:31.734017Z","last_seen":"2026-02-16T13:36:40.33322Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/5de4b7ae090d2aaf.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5b32de6c598f5788363ab3858d874a7","sha1":"09f0838c39c10d3dc1aa556b7b6dfac15a613a0f","sha256":"ce248bc8eb08b981798c65cbce022ac7248c4b713f510b331ceaf481f70efde1","sha512":"1ffb958bc37d70d49c3ed0ab54359821b26c00c6a5508091b5eebaba43f53a589a177b672176b8812adf6ec488fa898de5ad466d970a9c32f39bba594953dce8","ssdeep":"1536:BgwL0HZeCZpG4y2sCKM+1E82IAh89VaSh0d8ERe:BgwL4G4y2sCKM+1E82IAK9Vaw0d8P","tlshash":"14d3095ae7a72cad93626c79cc36e6acb4cf3cb18060d1b55e3484975d1422fc82f936","size":134367,"data":"","first_seen":"2025-09-27T03:59:31.737068Z","last_seen":"2026-02-16T13:36:40.289576Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/583e10ac20611d44.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7b6c08f1f4d00f2bc580e2f8fa9234b","sha1":"02520963b5597b68efa2dd66b5cb0263469ddaa0","sha256":"308d3ca86873406c1add56e991d1cb69c6e7903fb7c86645e3beebc3ad7a9249","sha512":"e378ce474249f1a45ed7bd86f166b2a1f04774c87b8a7bcd548fbf2c2f3c27f4f96b89caab8b2436fd1f1f73dd55bc28ab6bbb3f42fdef42d8bba59e12a75e31","ssdeep":"","tlshash":"aae0e5cc6a44fc03b0d272e4d14a6a3641b7842a7814efc7a0a01dbd48fb5498329975","size":412,"data":"","first_seen":"2025-08-04T13:09:09.65043Z","last_seen":"2026-05-03T15:23:57.484122Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/9420cbebe04060cf.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"186f1c7c78c8df6da3381641835a081e","sha1":"830f79f5a7a536ec4938f96b4f5238da7d445620","sha256":"77814cdbb9c0a3ffe1df318746e143690dedb42aef740cc9fcdf74927bbd59b2","sha512":"8c9dc3ad25f41546ade1e0226bbc7fce817105dc012c0f0572647fac9c601568997c906db934d048de348a1ba89041558119f8ee986d9e5e88e64dc8a60d1c72","ssdeep":"768:kovPYGpSzjCWReWr9ELmKW3jffzym1/2Ge4cL9p9AHYvlCWtjIjYHVjrNb6oSre1:JHEzXzhRe4cLu4iYHVjrt6yN","tlshash":"cfe2a4c872e7f81a8766d4e1003b1187f6795ce0f08c58bdf5a94dd2ba25c0691baf78","size":34095,"data":"","first_seen":"2025-09-27T03:59:31.727538Z","last_seen":"2026-02-16T13:36:40.318345Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/548ec4bcdaf17be2.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1e1623577a03c800f586ae6adc2cefa","sha1":"46a12e08a9df55dd7c1395f0abe21ec48445ed6a","sha256":"18b14940a4e5b18678612c48a74041b4d758d0be081c1a80cf41912012e70b66","sha512":"da37033bb9677527b53bd2abcd5ab2f76a50f5ecec928213ebdf5056499416763a956f2cdc725c71ced9b835aaeac2f149a4189043fbdd5d214237a33a5c72e7","ssdeep":"","tlshash":"46e0e58c6a44fc02b09272e4914e7a3641b7942a7814efc7a0a02dbd48fb5498325875","size":412,"data":"","first_seen":"2025-08-04T13:09:09.68595Z","last_seen":"2026-05-03T15:23:57.417151Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/cb814c6450e6b499.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c497d3a2180d32c562127bc470c330a2","sha1":"ea421f23056c314f78a022b0ba79409065cf3edf","sha256":"9d59af319b0311e97d6eb8286a62b0244978c33a541049d133783b6be56dd7cb","sha512":"2bd597aad77b56e2821cd123c2497b0432ac11f1683d8236a82590dcaa8e7f4b9d7900f59fe5b23c7bf5bf5d661196bb110e8b2c6e3bf64ec3dbdea255ea233d","ssdeep":"","tlshash":"4a51a64df194f8379950d1d4863f1e232193b40cb44998fef6f52cce6aa59889332b78","size":2925,"data":"","first_seen":"2025-09-27T03:59:31.764909Z","last_seen":"2026-02-16T13:36:40.287318Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/02e3f38daf0cd968.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"84c42521ac02643898bacb8667f0b15a","sha1":"6a1e6e5db4206bdb6a92b617b26a5d13d45bbd60","sha256":"30ad0edad9a4f3d2da3b73db6857c200e5b7766ff157e19f731e41f0b4424d5d","sha512":"8477deaa32e442aa411874410b4314a23b176d1a789f378e680000dc0879b8ba01188ab4da5ae0624276dabb9a44b56330a40942375fe26ca4e980ceeed9a904","ssdeep":"","tlshash":"6f31528c7dec7e06b022b7d0856a291252eea17df853b9cf84741dac0875809632ee39","size":1454,"data":"","first_seen":"2025-09-27T03:59:31.743043Z","last_seen":"2026-02-16T13:36:40.288426Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"aea51246150a462c847020ac7af711cd","sha1":"71f7d654f4742a62b5b9228b633d335883986c7d","sha256":"2a1f3e28d054a69b049e1bc8e1e23ca089ae68aaf10354c14fd635cb7598f870","sha512":"eda341c3d526b6bdd6c498c7b5400b3fc8213d152dc9bc463c5ac2a4ee3c5cc23350c74a1708cbd2c041a12cae68c119af156959aec81b97015e87bb70f7baa7","ssdeep":"","tlshash":"bbd02e835a0fdeaac4a709204e0a63f006314b22a23a02b64944658e69ee11a95ca82b","size":271,"data":"","first_seen":"2026-02-16T13:32:12.784253Z","last_seen":"2026-02-16T13:32:12.784253Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/5350645b4524b84e.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0d47d29ee5dc551d382f6a73f253e7d","sha1":"5020b1c32bf3e88b3bfd7bd64e1463d211ae8677","sha256":"4dce2f69a22975ded5833d2f5dacb9b1ece9f488a88e1428e35bf4d3ed4e85ad","sha512":"c106b6194ed190ecdb48318da40320e8fdb6abf556047c8ccb75274ec4140a970a2ac2a245f0692d5897b8eb3e6e02c9e8c8aedc8b3189af3936f0b0d2adf4d0","ssdeep":"","tlshash":"5401f19e685dfc03e09052e2e48b7d1264fa84a67140ff8f60b079ed8697ccd4238971","size":798,"data":"","first_seen":"2025-10-13T23:57:17.157899Z","last_seen":"2026-02-16T13:36:40.323208Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"975575a9756c66f755af323c9ebe5b09","sha1":"5ffe7811d2c9ca914961eabb4a8fb0dc7320bc13","sha256":"87ac847199cb241d0f4e9d3259cfee338e17696f065ea1d453412f47c067d913","sha512":"d7cf87ea9c70a530db8aef03258b6312aeba6eb91478a701c7e2ab3e7884c63b7be0c1cff578d4eb90040b0dd34888784382959a60c634518b2819355c69ced0","ssdeep":"","tlshash":"92e0c23658a6047122bb81392f9bea0227202183ae05ea5dbb4d4a891f40d1c92b06d5","size":299,"data":"","first_seen":"2024-11-08T09:02:36.362715Z","last_seen":"2026-06-05T01:37:36.226497Z","times_seen":2010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/048fabf844817206.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd1a314d1f3f0d71b91ba86f21d0bdbc","sha1":"184a53ce77ed86cd18e565138da1fa9f0d81a8fe","sha256":"e36ef6ee8810321b2c78ed31390e8d974dfae50d612c1f18e1665126cafc1719","sha512":"1a510f4d8fa658e2664fd4ede0673210b0187a89e01d52738a9973942c5dda33e134a0a0d45e13dc516f22939176cd60a902e520a19cf6c7718ae1f9a0e1c393","ssdeep":"","tlshash":"daf07b8c7558fc02e052f7d4910f292747b74451b805eecbf1502da85eb6489c222b34","size":649,"data":"","first_seen":"2025-09-27T03:59:31.71217Z","last_seen":"2026-02-16T13:36:40.28784Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/2a3e01af158cf547.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"80fc7e5870b784ee52c5ed41a6c5a88d","sha1":"4672b0727e7b2cb3352125eb76663243f9f63f64","sha256":"1e77c2dcfb61768d01c6a85c4e96f68392c75b34941619c0d14d05bb3ae6619a","sha512":"e071393828ead19ffa4f248cf8d0380f5d8f291929b6d03d8355fd8ba31990901073fb5e6393c0752dd8ebd7b0ffca025fde6a70c6870fd31019c009b5fffb8f","ssdeep":"","tlshash":"5d11c04cbe59bc3390a222f0811f9d2641b6401478059feab4d51df888ba04dd321db5","size":856,"data":"","first_seen":"2025-09-27T03:59:31.750191Z","last_seen":"2026-02-16T13:36:40.321251Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/c7f2d6a691399b4c.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f14d3d977ea3ef4cc7e553fc3676f84e","sha1":"efa67a6e7eef155ecb88c8450b38e86efde9a260","sha256":"7cb96d72e47d500f0645d30a7482dbc4436829eccbc3736913af7c1f80ba6ece","sha512":"99fe417487dccbf0d54dc1dbe46dbc6f78f03042a687ac8c7eb0ebc6c3051a8409fcb08b05434b2c776a8206661231204082f7b8f837c00c5e5153bd788a738a","ssdeep":"768:2CqvHfOmLpGbN/zFykJR5g1Bb4yAPsCKMWhqqkWt0mZDGp8Sd2143u7DVIEkh:Wv/OIYvNG4y2sCKM+0W+dpy1Jm","tlshash":"fbc3e85ae7e72cad97616c75cc36f6acb4cf3ca18060d1b95e74889b9c1412fc82f921","size":123399,"data":"","first_seen":"2025-09-27T03:59:31.722275Z","last_seen":"2026-02-16T13:36:40.324854Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/796af7b5149b1234.en-IN.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef1b071060a9e1898dafbda61b6bb7d7","sha1":"5eb2e00632b134cf0bb34c2f23b66f6810ecad76","sha256":"6c0eda414bafff6f52f252f2f8303d699d7627670c8ce35135aec22c237883b8","sha512":"a6da4da4550edb9b603e3d5ef76e53e82b2930290b32609932e1bb628526e2f4169dd952c8797249feab2360e06f32b81b5be2ea3655895457ee2114122a7385","ssdeep":"","tlshash":"47d05b570095e6e5ff770eb9d39636c6180147150491e6ac4470057537f5c43c6700a8","size":265,"data":"","first_seen":"2025-08-04T13:09:09.695567Z","last_seen":"2026-02-16T13:36:40.284303Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b59064fb8f1aa77295f59a4f5e226565","sha1":"0506e6562d14f79db6ce5fbbc93ac692d7bd9213","sha256":"ef98aaeb8a0712d424de5b5202b02b51914837bac061ca4087e83dbe1a6119fe","sha512":"b1b7c5dbc2bc6c45e0dff93734204de88810f58fd86872b629fd26e983775268f91c5618da3b0f3037274292f40979bf7845ebbe4ada3d867775f31a3f3ff0f8","ssdeep":"","tlshash":"7041cf7e18a9b57111ff24fe929bc6c97a306886fd455c96386c9f512f428c2402abcf","size":2279,"data":"","first_seen":"2025-11-21T02:46:50.382594Z","last_seen":"2026-06-01T18:42:29.421879Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/43bb58a6e2f38471.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7ad3b2d378ba0a4122e41f1e489c787","sha1":"538a860f5b55350b5237c06a847859a8a75261d5","sha256":"9160d23d7ff729289e1cc7d89168783e716038f188a34fa29d2f96d78b28ebe1","sha512":"0a4861c10eb9f5e113c05a1eae3e773045ead7b6d7332aeafd353c9f81420d6e45a2f94d4cc787200454cfd17d1bcc86f8e9086281752d06be60a198c3cb2c9f","ssdeep":"49152:kBXqBnAw1YGdnBN2ycp/8P466SaPMMi5HZBrvs8evbCfwG9Vqt0tTFkI2KZQkI1W:Cel","tlshash":"b2a55c8472e674568222d8d1c07f0247f526bd45f00cc8bcf6ae9ce77a64e0552bbb7a","size":2080102,"data":"","first_seen":"2025-09-27T03:59:31.813433Z","last_seen":"2026-02-16T13:36:40.342625Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/44454a9cb494a260.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"19a3d40e81969b2d40769c2146cc35f1","sha1":"abae212285f2ca5cc633d98648711e086ced6c33","sha256":"3a2e3a26184c74f17feae76ff9b448f1388065bceb5e3f9ca40253cae6041c4e","sha512":"d708de1148509d5800f5bc65d57f84bae13428606d0160cc0b036b3b5fcf3100366e4b7d1ce42d17c31952a46ab8beb0905653c8be42f597c82ae31d42ef689c","ssdeep":"","tlshash":"526186587398f91a5037cfd0b04f3607619b81c1fa0a8ecab674bc2c547989d763ae69","size":3468,"data":"","first_seen":"2025-09-27T03:59:31.779571Z","last_seen":"2026-02-16T13:36:40.28904Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/b618d854facdac17.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"276bb249c89a55060f39c8aa299e1c2e","sha1":"ecca02f2cccd4843ade381b11f0a4f283e3a0b0e","sha256":"a89402f00aee2474503fac721689a45c27ffafd81458e3ad100d2a8106b2c00b","sha512":"7c8f1d83e0fe7ba33eb2bad01f993773353527e6e1c61c8ee3b7e761c27423f1f2afe77e97c43cf229c7093462b840ab3936c4c3dc987e80b6c91af7f1872abf","ssdeep":"192:jYLKeLCj/b1Ifl3Vtk5UgYLrpvzGH/PbKcDSpFwylGFbQa1dm8UsSThyMolx8:ELlIb1wl38q6H/TfADlGFUa/LUtQ8","tlshash":"ba22f758b07d349280aae8e8d07b261ab931b814b54cecfcb169dcd99b70d532376739","size":10449,"data":"","first_seen":"2025-09-27T03:59:31.780943Z","last_seen":"2026-02-16T13:36:40.309038Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"59b4c3d34d32500470aec2f1d67fe685","sha1":"887c0c5b4c9d7142292f9b5e6bf8b64096f0cb09","sha256":"55378ae71af2ecd6bbc1e3ed2b7bd32d9d0fe222140e3b3d5904fb84935306ba","sha512":"2f2d86b492687ddf3ac507de931fb19b49227b233ee29e6a950d4a9deda5671557458a3848fb0fd3bfcaa1e28f736366c7d23d4a751eb35ac46dc7f74cf22329","ssdeep":"","tlshash":"5e900204945a9125491c14181641d615d45244a245ded95b192085361be72d7d400bb1","size":52,"data":"","first_seen":"2023-03-07T12:59:30Z","last_seen":"2026-06-02T00:43:17.198167Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c1f008b1f21b570659d95bdc14efd8f","sha1":"62986772bb708dfb996aa9731fdfc94dc98ba6e8","sha256":"546ac5ca85800e20521ebbeffa3e5856022e3b56a11cfbd743696364d1137755","sha512":"a5f62aa12b8e2d7fa22c491e12e9fb72bed26097c54b6556c947d6200fd35ac2f51de0e66b400d2b48c76ea98bc83bb79463f62393b9e046c36a109e6fa06ee6","ssdeep":"","tlshash":"12a0112028880232cca888808e820020c83080aa08ac0a002a280a3a2aae0a2c800280","size":72,"data":"","first_seen":"2025-07-01T23:02:20.504231Z","last_seen":"2026-06-02T00:43:17.199197Z","times_seen":210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4c890ff2243345821db61118c0c0cd7","sha1":"223edd9d7dbada9ec1f1fa370e35edd55b4a8036","sha256":"74afcdcda43f659c79d9c447f71bb1f4b8cb6eb27d5b614d360c46eab14b9df7","sha512":"268d2c15c43d496de4ab4794270cabc4c98380476f7e23748c7adaf3077231562c19ad606d99dfcebcc986a369f98b2da5c3caf0e61f779a3f573e88c91b1919","ssdeep":"","tlshash":"22c09bbc1515243f1955565c7157daf43d36147261711510e55c502d4465d9790438d5","size":133,"data":"","first_seen":"2024-02-16T21:25:19Z","last_seen":"2026-06-08T11:52:54.358101Z","times_seen":3080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/dd84e58b378b9584.strings.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"49fb1bdc97ff87c5807375812b419b51","sha1":"a420d7a1d3084c99f37937e03def9cdfbaf0e1ff","sha256":"5995e435f7973adf88b19c6db9e085c4ce75d1a54c1e2d5b4f03b9932e205139","sha512":"9b81b64fb1a685be31828f59c1183b234c451a475024596d17183f4f67b6038076e602b39c6af8c7e77d95c2d4264575cb7be85f88a45b020177d4d21998fa6a","ssdeep":"384:b7+hWwXaCxK7QaaUsAxpTb5K314KIaYI0PCTYi:2gIaeKMAnNK9fYi","tlshash":"a562c609a641c22cc6524e4e12beaef4f95bc29997a01375fc9ac469d35383c3fb78d4","size":15064,"data":"","first_seen":"2025-08-04T13:09:09.659864Z","last_seen":"2026-02-16T13:36:40.333987Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/7ffd63f8c1780da1.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c81df075bd215081d3555131292ced1","sha1":"2414641ccedf8de3e812e4eff76b5912bc6ffb30","sha256":"8dfcc5b51bbaf15cb2bebca9b3c0bfe7ad1e11ebd074021b4f328acd87e7123e","sha512":"a6edff2087bba01b31ce4a731568cbf8a402c1c4bdf39a036df4006eaecd2dc07f499d0e187d561fe644ab50295d01361823b31aba0e1225f78be4ab8e0a01e6","ssdeep":"","tlshash":"9a21f1ac386efc02d056b1b2202f5d172cebc851f4445dfb94a9e4ac5db64998233f94","size":1152,"data":"","first_seen":"2025-09-27T03:59:31.716236Z","last_seen":"2026-02-16T13:36:40.304792Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/63b771d9bc6ed258.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca17112345bb84d2377458bd4609b78e","sha1":"30076cf15527adcb4db523b6a84d261d93a2ef7d","sha256":"ef969c3048ab4659bcaf674ebbb16330ca979f50b4f19905fccef8993abc183a","sha512":"c20327b284b7b80d2302d192bcae83ab147edcec451b87324c333b8654f2ffe237a7bd5fa2fa394b1fcfbce477fc58ff5e3b7f00970b06e73ba373f4c0314959","ssdeep":"","tlshash":"fc41cbc472d7f81b937834e958a60742db2e1ac2e41cc1fdf8a419d27d51c06827aa78","size":2255,"data":"","first_seen":"2025-09-27T03:59:31.767391Z","last_seen":"2026-02-16T13:36:40.331195Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"44dad1d9b7be1965bb484ce765d030fc","sha1":"3ee0392c83e97799b36b127798735ebe43bf8027","sha256":"ac87dece42f075e9964704b0d696b6b5085fe6ca1c134df94fdc0bf82fa70cce","sha512":"09301f7243bfa6b7df8f503bb2d3cf2b24560f42ffdb34b01a760951f77c701f53be7b73c204899adf24025917a774ab2955600aff612789c565c82a395234bb","ssdeep":"96:koXTt3gJF5ArfEDw16RKNXDMmGdVJobw9IdgVsobwgVj+iobweV2CVn/wbwSeWDA:BR3gJFmmwdgtEbhaDbHwbP2CWb2Ww3mm","tlshash":"57b191198d13a17b0b8bb0d2d2473c3293cc921eb1dc6c42c6d7951c67960ef06a7b2b","size":5583,"data":"","first_seen":"2026-02-16T13:32:12.789156Z","last_seen":"2026-02-16T13:36:40.341662Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/cb43e4c21b5b6695.i3d79q.vendor.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf710ee746b1f5eb1eea51941011e223","sha1":"17d21dbafdc7413f4615cdfd236a4342d15dc0de","sha256":"d04f2d30e17b79b420ab9fd77599f2486c9e20d82a8799760f32c5f5c9520358","sha512":"5ad482462254318c5ad71e113daacaf898e8be7939dce9d7becc6a73ee79d4de768bfb53934ae3ddbfedac3ebc0b3fdd11a1e89d1edc2664466b8aae85bee7be","ssdeep":"3072:L2SsRRbZsBfL/xQQX+b2pzheWQOVedfeMep2TUWL9PM:xfDxQQub2pMWNVedFccn+","tlshash":"be24e7d87996f1a157b352b740af1407b33d2a1b280c8960f611fcc979b841ea17bfad","size":210098,"data":"","first_seen":"2025-06-12T09:54:25.744337Z","last_seen":"2026-05-03T15:23:57.468571Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/fb0e24e56e55fa0f.runtime.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b2eb08dc175967b72ad4e618cf4b458","sha1":"6e2fe5a6530b6224508f8e12a7a170665a069869","sha256":"d498555b570b31ed49ba0f92eb77a882b45a5b6dc347ade9e134cbaa3fc51919","sha512":"f664572148f793eeb7fa6f01cb26beceb841bf4e64cd242aee8bbde58f3e24ce512fe9afdd1a205f1d90d751b9cbfd54a009954f6caaa0d0fdbd753582f023ec","ssdeep":"768:Li0dW1UiLcGMdSDyGB65w2V3sEIFgzvAPjMzlBX5SlQBC+gcCpph5PIqG:LiTP+Z53y1Mzn0iBiPhIh","tlshash":"0cf2d7d936b341b5e0e12ea4b996c457394d1cea24ad1ad0e7d739e8ff10f72e023522","size":34791,"data":"","first_seen":"2025-09-27T03:59:31.768741Z","last_seen":"2026-02-16T13:36:40.330498Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/76d4afe67582a8de.vendor.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"039a6faae1f79d30009d2842254bab9b","sha1":"27e2873bd23af978252816d63cc2bac58d790a94","sha256":"38df7807cf64d8c8c9fbdd80df40e8b1bef9ae703503b8c7598139e68d8565b8","sha512":"d4c2bfe049a306bb36bae8541ee6d375c70fd4578f63a44b1c7aa19b5f44d1d22cf2daa7b7d986febb089b9ba0a37583a32404d16b7ab7da1b931bf1917bb98c","ssdeep":"6144:ms6cT6XRNGPVHoMFfZKtb2o+5jwbzF0je4awmAlOdn1VwtmWwMgWfI:mrcTGMXfKbBWj/gWfI","tlshash":"11a4fbc8b291f4b157e761e5402f050bf33a7869704d80a4f268ece56cb998e617bf39","size":451028,"data":"","first_seen":"2025-08-04T13:09:09.65301Z","last_seen":"2026-05-03T15:23:57.482397Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/fa3e3745a22bc340.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"13ed02d0970adcbab2a422ba09f28298","sha1":"09c301cb68e0ad0fea4708f3736486aadd6900b0","sha256":"29fbb428bb2c535d8246ad0502706f0870b649ddb642fb8d66d0e7a92e78542a","sha512":"856574514a9cde2d648589410709fd8fa2fc16a139fcd42cc3fcb4dcbd528f85c11f6dd5cf6af6f5c54e4d23c424f25c6da1c79cde7309aecce3a720e6512269","ssdeep":"768:qFULb+ZyPe4pgrtUbTJToDSOXHcgqJqmDJ0ilbAHaDj1P1C8s1JTrIxm6vEp0I2W:yULbayPe4pgr9DrXHMJPlk6Dt1CQgVCS","tlshash":"6723fa88e47d7878c166dcd4c0bf11a779027d0d7908c8b8b63b9cd71a68a42627fb76","size":45592,"data":"","first_seen":"2025-09-27T03:59:31.724519Z","last_seen":"2026-02-16T13:36:40.328287Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/909cc58b17d2ad11.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b55bbbc771e6dbdfe5076eb4c973786","sha1":"2893de1f9587553ccc5d6a9dfd66c8047b160cdb","sha256":"4588e1d65c486e247df2e5bfbd1e887e0f89b8251d52aef925c946d33c264a75","sha512":"17d163f9f6049ab136734ee33a21fbf37223e1cbf16eef0a79738753b85347f4fbd967ca1fe6d4cb655a37d0e9b6ede6342bd47e467553a944a27c629b5ff94a","ssdeep":"","tlshash":"35e0e5cc6a45fc17b09372e4910a6a2641f784267814ffc7a0a01dad48fb5898325875","size":412,"data":"","first_seen":"2025-08-04T13:09:09.683628Z","last_seen":"2026-05-03T15:23:57.481072Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/02e3f38daf0cd968.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/02e3f38daf0cd968.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6841f8c43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1454,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (505)","md5":"84c42521ac02643898bacb8667f0b15a","sha1":"6a1e6e5db4206bdb6a92b617b26a5d13d45bbd60","sha256":"30ad0edad9a4f3d2da3b73db6857c200e5b7766ff157e19f731e41f0b4424d5d","sha512":"8477deaa32e442aa411874410b4314a23b176d1a789f378e680000dc0879b8ba01188ab4da5ae0624276dabb9a44b56330a40942375fe26ca4e980ceeed9a904","ssdeep":"","tlshash":"6f31528c7dec7e06b022b7d0856a291252eea17df853b9cf84741dac0875809632ee39","first_seen":"2025-09-27T03:59:31.743043Z","last_seen":"2026-02-16T13:36:40.288426Z","times_seen":16,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/fa3e3745a22bc340.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fa3e3745a22bc340.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68425a863181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45592,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1842)","md5":"13ed02d0970adcbab2a422ba09f28298","sha1":"09c301cb68e0ad0fea4708f3736486aadd6900b0","sha256":"29fbb428bb2c535d8246ad0502706f0870b649ddb642fb8d66d0e7a92e78542a","sha512":"856574514a9cde2d648589410709fd8fa2fc16a139fcd42cc3fcb4dcbd528f85c11f6dd5cf6af6f5c54e4d23c424f25c6da1c79cde7309aecce3a720e6512269","ssdeep":"768:qFULb+ZyPe4pgrtUbTJToDSOXHcgqJqmDJ0ilbAHaDj1P1C8s1JTrIxm6vEp0I2W:yULbayPe4pgr9DrXHMJPlk6Dt1CQgVCS","tlshash":"6723fa88e47d7878c166dcd4c0bf11a779027d0d7908c8b8b63b9cd71a68a42627fb76","first_seen":"2025-09-27T03:59:31.724519Z","last_seen":"2026-02-16T13:36:40.328287Z","times_seen":16,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_footer?lang=en-US","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:47.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_footer?lang=en-US HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: text/html\r\ncache-control: public, max-age=604800, immutable\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6842dcfa3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18340,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2437)","md5":"d811ec3de9ac080fc67fd73f524772b5","sha1":"75f20e5a37924b0549cd572e67c184a0cc906d8a","sha256":"dc0a7e2e1c3d2ac8ad8143e21d8c76902e2b284dfaa1e368eca5329f77d908ad","sha512":"5a222797d993c8497bbc348ec99adf8f2af45db3e49576c0e22979363fff20c371fc43fd6062aa49f01082ce712e70256a09c42ff36e41b40c6d6d1c4e04c685","ssdeep":"192:73Xvn49EYidpk/4+M4RpScLF00x7qwaDBVxArRoLSN69EUHSN69E9LydZ4KEI0Af:CFSj2liw9XG67Uw6v/VCU","tlshash":"8182d89eaaf30119788bd98dfbe76358373ac003da15cdbab6cc135a4fc346448567a4","first_seen":"2025-11-12T00:34:06.973874Z","last_seen":"2026-06-01T18:42:29.337941Z","times_seen":132,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/cb814c6450e6b499.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/cb814c6450e6b499.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6841f87f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2925,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1117)","md5":"c497d3a2180d32c562127bc470c330a2","sha1":"ea421f23056c314f78a022b0ba79409065cf3edf","sha256":"9d59af319b0311e97d6eb8286a62b0244978c33a541049d133783b6be56dd7cb","sha512":"2bd597aad77b56e2821cd123c2497b0432ac11f1683d8236a82590dcaa8e7f4b9d7900f59fe5b23c7bf5bf5d661196bb110e8b2c6e3bf64ec3dbdea255ea233d","ssdeep":"","tlshash":"4a51a64df194f8379950d1d4863f1e232193b40cb44998fef6f52cce6aa59889332b78","first_seen":"2025-09-27T03:59:31.764909Z","last_seen":"2026-02-16T13:36:40.287318Z","times_seen":16,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/images/b46630e470f4040eba7033cf2435edce.woff","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/images/b46630e470f4040eba7033cf2435edce.woff HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://raydium-io.my.canva.site/_assets/5c5d1f697318d154.ltr.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1136\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ced6842193b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1136,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format, CFF, length 1136, version 1.0","md5":"b46630e470f4040eba7033cf2435edce","sha1":"ba26d2e1dc5bbc01a80446ac65bffb991953764a","sha256":"3e32aea52247a81c38b4735e84a28ba27b0cbc33f007a1d14e81e64ba766eadd","sha512":"eff809cc87517f9048f1c7a16561ef6f956ed0fe50b3382afaf111b6f159e769dd88af0dc0d8a03b748d407c5c554789b6148a137ac700f776a260fd153c0ae7","ssdeep":"","tlshash":"6321b6a2ea60c260dc4506707ae89bee732490ce2657be851e6b043bb48a304e380066","first_seen":"2023-04-08T14:15:10Z","last_seen":"2026-06-08T21:22:53.384142Z","times_seen":3279,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/03c0faed87f1c177.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/03c0faed87f1c177.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68426ad23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15828,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3812)","md5":"25f46999dcb5d0c25c538a73345250f6","sha1":"ad3e389f4d4575fdb4866e6b2bc0e84fa57789af","sha256":"cd9052a0185965be268ac11080e9bef9463079744ebf79b004a2b46cb10456e7","sha512":"e1a29598fa53ad3df0c374ad54819b7ea1561db90b0db2ae53f9ab2dd6e84e3bf4759e7ea7046a05207a5917f21e60fa84e6cf17dc9f634756207470616bb0b0","ssdeep":"384:hi65ANV0Olkh0ZZL8SCQ4IAxADAli2ygAXAzObYQiYCKe9esaMOuMgEZroZT:hi6YV0Olkh0ZZL8SClk2ygAgt5FhaT3S","tlshash":"0162099472aeb96c51e3d4e0d43b4062f60e69b0b80cc8bdb9bddcd46969c40d573b71","first_seen":"2025-09-27T03:59:31.734017Z","last_seen":"2026-02-16T13:36:40.33322Z","times_seen":16,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/media/2ece46c1637e862e5ea21b6abbb49453.jpg","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:47.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/media/2ece46c1637e862e5ea21b6abbb49453.jpg HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65737\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ced68433f043181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65737,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1366x768, components 3","md5":"b98db38c933d5f46fb53413e26c03cbc","sha1":"d41377fb160d808e2254b8afbfde4ad74b89cd0f","sha256":"87da9539b066b98366adf77ec3475b2d4bbb726f903d03b711289466e1498f12","sha512":"687ef01bc7a63fbe054c69da1629b48c730f1f405b361b1de2d3590473cfd0903a0ed18ba309e216de9bd4b86e2bc676769ab43f644f58ad64038ad894451749","ssdeep":"1536:t7H/qxuhdRdQ/JujUrf+mppJkKo6QGpyYlR:ZRe/AUTXJ19pymR","tlshash":"df53d06267f0255ac6ece0f11b1ea711461c5d6a43c98e318ed88eb5736f3e3943b4a2","first_seen":"2026-02-09T12:12:09.80534Z","last_seen":"2026-02-16T13:36:40.309769Z","times_seen":4,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/82a10fe01b3171ad.ltr.css","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/82a10fe01b3171ad.ltr.css HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6841e86f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bca12ad7aadadbc2869f0344ab4dc7fe","sha1":"65a0d33f500fe8b2952af55d0ee3716b391410d7","sha256":"cc7c182247be4ef8696736902fa052f47ffca67ee649a4cf491c8f877eae675b","sha512":"0b35731fa62f2ae0533581c88e8e6618c91fbc9174897167ee7837383df0b32c68a07dad6b476950f188017bb6836b2c97348e8a376d84e88a15129b371e1710","ssdeep":"","tlshash":"89d0eb380b7176b8d236d332daf213c3783b8010f3a0470eb601fb2ad29f4006c54a81","first_seen":"2025-06-09T14:04:57.186593Z","last_seen":"2026-05-24T05:37:25.183721Z","times_seen":95,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/5c5d1f697318d154.ltr.css","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:45.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/5c5d1f697318d154.ltr.css HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:45 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6838d97a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159501,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b9ebc750872dc1e46daa6815be310cb5","sha1":"e2a7b36dec0e9b82d2f8a1c710e19e87e57cabd4","sha256":"f41f09b89a25d8790a5829735a126c5309cad32816a33c7c8ad070c597dccddc","sha512":"6413d797a2fb2aa382d4624d17ce2cf81e6570885220be47eebb95e84f6447df77aad88aecba28f98d8b997279ec811aa1deb20bff026c43c172662099c5fccc","ssdeep":"1536:Xkbak4GmJZD9Cqdka0GLoKmIVG+OOXzx9UUXD9xhQMolIje7SgmB:QS9zjmIVG+OOoG5+hmB","tlshash":"1af329a84a20f13cfc2bb11267dd8a9c1179b111ee230bded666be2196c7ff515b024c","first_seen":"2025-08-04T13:09:09.636707Z","last_seen":"2026-05-03T15:23:57.465222Z","times_seen":21,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/static_font_4.ltr.css","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:45.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/static_font_4.ltr.css HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:45 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6838d9833181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1446)","md5":"d1437e0251d431b3a3080cb68d66c610","sha1":"e40f425d2630e3d7c770d913457b1209b7b81327","sha256":"138b5385f644aacbff65a59c31cdd4f12856f422ebf852afb7477230e9e002c8","sha512":"31045fca87d9d8f7c5015713d8a1d74e6f179524727855c1d488a644133d876ea2e9bcec8ab1fd1d253b1cccafec599d743b5a402f727af6825a50673f8d5d5e","ssdeep":"","tlshash":"4131ac341419918ed862795334df76721f3e10256f88622bdf1c58944fabca6f150f9e","first_seen":"2024-08-20T09:48:06.054128Z","last_seen":"2026-06-08T01:55:19.853291Z","times_seen":2186,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/dd84e58b378b9584.strings.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:45.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/dd84e58b378b9584.strings.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:45 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6838d9ac3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15071,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14706)","md5":"49fb1bdc97ff87c5807375812b419b51","sha1":"a420d7a1d3084c99f37937e03def9cdfbaf0e1ff","sha256":"5995e435f7973adf88b19c6db9e085c4ce75d1a54c1e2d5b4f03b9932e205139","sha512":"9b81b64fb1a685be31828f59c1183b234c451a475024596d17183f4f67b6038076e602b39c6af8c7e77d95c2d4264575cb7be85f88a45b020177d4d21998fa6a","ssdeep":"384:b7+hWwXaCxK7QaaUsAxpTb5K314KIaYI0PCTYi:2gIaeKMAnNK9fYi","tlshash":"a562c609a641c22cc6524e4e12beaef4f95bc29997a01375fc9ac469d35383c3fb78d4","first_seen":"2025-08-04T13:09:09.659864Z","last_seen":"2026-02-16T13:36:40.333987Z","times_seen":7,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/9c2d7662cdc5de7f.ltr.css","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/9c2d7662cdc5de7f.ltr.css HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced684208e23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1063)","md5":"0929975abd75ece4850eca29671078e2","sha1":"1b1a2b2e1c86edde74deefcf3f3ceac442a4c8f1","sha256":"f57f83a3deea764b0bbb85b69b026a41067a84c7f6c0796c03e98a9da3173788","sha512":"05e09cf636b625634f5e80d66de3af15ad4b575381b17ec809bfee04fab34ed319d19b4e1b3f5113e91001c2a7898b65084f06921cd4789d8c48d6c34a31fc95","ssdeep":"","tlshash":"9f21e1259ba3b239766be29456d54fdd00395690b9134bddf938713402c78ee2c36988","first_seen":"2025-06-11T19:49:23.96732Z","last_seen":"2026-05-03T15:23:57.405892Z","times_seen":26,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/b618d854facdac17.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/b618d854facdac17.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68426aee3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10449,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1376)","md5":"276bb249c89a55060f39c8aa299e1c2e","sha1":"ecca02f2cccd4843ade381b11f0a4f283e3a0b0e","sha256":"a89402f00aee2474503fac721689a45c27ffafd81458e3ad100d2a8106b2c00b","sha512":"7c8f1d83e0fe7ba33eb2bad01f993773353527e6e1c61c8ee3b7e761c27423f1f2afe77e97c43cf229c7093462b840ab3936c4c3dc987e80b6c91af7f1872abf","ssdeep":"192:jYLKeLCj/b1Ifl3Vtk5UgYLrpvzGH/PbKcDSpFwylGFbQa1dm8UsSThyMolx8:ELlIb1wl38q6H/TfADlGFUa/LUtQ8","tlshash":"ba22f758b07d349280aae8e8d07b261ab931b814b54cecfcb169dcd99b70d532376739","first_seen":"2025-09-27T03:59:31.780943Z","last_seen":"2026-02-16T13:36:40.309038Z","times_seen":16,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/a0684b0780c739e9.vendor.ltr.css","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:45.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/a0684b0780c739e9.vendor.ltr.css HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:45 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6838d96f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10359,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10099)","md5":"4eb0cc037aa215c5fa2eb3c1b342613d","sha1":"97d135c19209077c0335065f35d53fffc62caa88","sha256":"e8fb139770ec251e750403322d40db96c027b9feb48f4489b76a735f9f0869e5","sha512":"270302a621dd93de4ca144dab5f699270b2dcde0e759fbd63098b09d2c597cf9a07827b8caf40343e38d3108c8cbf1edef6af44e6944fa0bd99d8467a5d2dd56","ssdeep":"192:FFS+oMcpO2BMKGwLsreI0keXg6moYyfJWh:S+oMz2BMKGwLsreI0keXg6moYkQ","tlshash":"9022af6a3f57307f8393857ff042aae150c9e396a0e98515f0a5ef0429db4e5921af3c","first_seen":"2024-04-10T03:14:53Z","last_seen":"2026-06-08T21:22:53.348497Z","times_seen":2456,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/fb0e24e56e55fa0f.runtime.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:45.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/fb0e24e56e55fa0f.runtime.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:45 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6838d9923181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34791,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34727)","md5":"9b2eb08dc175967b72ad4e618cf4b458","sha1":"6e2fe5a6530b6224508f8e12a7a170665a069869","sha256":"d498555b570b31ed49ba0f92eb77a882b45a5b6dc347ade9e134cbaa3fc51919","sha512":"f664572148f793eeb7fa6f01cb26beceb841bf4e64cd242aee8bbde58f3e24ce512fe9afdd1a205f1d90d751b9cbfd54a009954f6caaa0d0fdbd753582f023ec","ssdeep":"768:Li0dW1UiLcGMdSDyGB65w2V3sEIFgzvAPjMzlBX5SlQBC+gcCpph5PIqG:LiTP+Z53y1Mzn0iBiPhIh","tlshash":"0cf2d7d936b341b5e0e12ea4b996c457394d1cea24ad1ad0e7d739e8ff10f72e023522","first_seen":"2025-09-27T03:59:31.768741Z","last_seen":"2026-02-16T13:36:40.330498Z","times_seen":16,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/63b771d9bc6ed258.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/63b771d9bc6ed258.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6841f88a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2255,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (567)","md5":"ca17112345bb84d2377458bd4609b78e","sha1":"30076cf15527adcb4db523b6a84d261d93a2ef7d","sha256":"ef969c3048ab4659bcaf674ebbb16330ca979f50b4f19905fccef8993abc183a","sha512":"c20327b284b7b80d2302d192bcae83ab147edcec451b87324c333b8654f2ffe237a7bd5fa2fa394b1fcfbce477fc58ff5e3b7f00970b06e73ba373f4c0314959","ssdeep":"","tlshash":"fc41cbc472d7f81b937834e958a60742db2e1ac2e41cc1fdf8a419d27d51c06827aa78","first_seen":"2025-09-27T03:59:31.767391Z","last_seen":"2026-02-16T13:36:40.331195Z","times_seen":16,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/c26b2c36671e4247.ltr.css","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/c26b2c36671e4247.ltr.css HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68425a813181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3774,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3711)","md5":"22854b2bd3dd4ec7f6964de7c390bd95","sha1":"361db03bc9eb5c869d337c4e7507a2d74e78c41b","sha256":"9b7597d4709afcad297c64c6db2bfa9e634ddc122e0da56f6eac11f29cc9cbe8","sha512":"74f10ca552f2051bfba55db7455af4cf04fc6b6b57f3d1903e0852cec89f2cfb3405af4884e7cc825cc26e4fa8b369a02203b67ee0facf709b13f6e557917dad","ssdeep":"","tlshash":"cd71b4704661b6bc7613972ae690ef8800b35044de6707fef990f6a585c38bc15ab8cd","first_seen":"2025-06-09T14:04:57.182726Z","last_seen":"2026-05-24T05:37:25.147784Z","times_seen":175,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/d91a5d9f7563792d.ltr.css","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/d91a5d9f7563792d.ltr.css HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68425a8e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1060,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (997)","md5":"17832f619d1e7c3038ee581662b6a697","sha1":"00311eaaaee8c93ae922a11c7000f0401f648fef","sha256":"8f9c9afaca48033a638c96495211c518b386d334d98dc0730e83a218162e0619","sha512":"61722ed9f5a4f7bed91fa54c0fc0de8e96a5fc06435681902982c9e7b48cdf4079eeba771204f4d2a543f825bd44aa88948a30a271f1833a19aa3518e34815b9","ssdeep":"","tlshash":"501123a93a59c13cfc26d1256f8c508c72a4f222d8201a58a8d87061c6c32f70d7ba19","first_seen":"2025-06-11T19:49:23.909564Z","last_seen":"2026-05-18T22:45:40.885802Z","times_seen":47,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/796af7b5149b1234.en-IN.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:45.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/796af7b5149b1234.en-IN.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:45 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6838d9b13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":265,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"ef1b071060a9e1898dafbda61b6bb7d7","sha1":"5eb2e00632b134cf0bb34c2f23b66f6810ecad76","sha256":"6c0eda414bafff6f52f252f2f8303d699d7627670c8ce35135aec22c237883b8","sha512":"a6da4da4550edb9b603e3d5ef76e53e82b2930290b32609932e1bb628526e2f4169dd952c8797249feab2360e06f32b81b5be2ea3655895457ee2114122a7385","ssdeep":"","tlshash":"47d05b570095e6e5ff770eb9d39636c6180147150491e6ac4470057537f5c43c6700a8","first_seen":"2025-08-04T13:09:09.695567Z","last_seen":"2026-02-16T13:36:40.284303Z","times_seen":7,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/43bb58a6e2f38471.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:45.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/43bb58a6e2f38471.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:45 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6838d9c83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2080102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (569)","md5":"f2d36d4e4cc171ea5f09a02ba0aa0f31","sha1":"901b8d03647a2070c8162ee14ca4ad3a08c6d952","sha256":"6eda30e3d7b31cf13213397771d79629b203c0449bc37b63c0351e56fbef6f10","sha512":"997328bb83b8ca7b6383bfc95ff062e602ad488a8b1335ee815da0f2613bd383091feb0791c52486d00ac310ee3f51e14b717de7a034959f38d44d92b2e6a2a4","ssdeep":"24576:jwpBXqBnAn+D1YGdnBxX2ycp/8P466SaPMMi5HZBrvs8evbCfwG9Vqt0tTFkQB2S:kBXqBnAw1YGdnBN2ycp/8P466SaPMMiL","tlshash":"56251a8471e774968263e8e1803f0147f83aac91b04c9cb8f5add9d67e21d0592bbb7d","first_seen":"2025-09-27T03:59:31.759312Z","last_seen":"2026-02-16T13:36:40.312432Z","times_seen":16,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/5350645b4524b84e.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/5350645b4524b84e.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:46 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68416db53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":798,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (578)","md5":"a0d47d29ee5dc551d382f6a73f253e7d","sha1":"5020b1c32bf3e88b3bfd7bd64e1463d211ae8677","sha256":"4dce2f69a22975ded5833d2f5dacb9b1ece9f488a88e1428e35bf4d3ed4e85ad","sha512":"c106b6194ed190ecdb48318da40320e8fdb6abf556047c8ccb75274ec4140a970a2ac2a245f0692d5897b8eb3e6e02c9e8c8aedc8b3189af3936f0b0d2adf4d0","ssdeep":"","tlshash":"5401f19e685dfc03e09052e2e48b7d1264fa84a67140ff8f60b079ed8697ccd4238971","first_seen":"2025-10-13T23:57:17.157899Z","last_seen":"2026-02-16T13:36:40.323208Z","times_seen":7,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/76d4afe67582a8de.vendor.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:45.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/76d4afe67582a8de.vendor.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:45 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6838d9a63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":451028,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65432)","md5":"039a6faae1f79d30009d2842254bab9b","sha1":"27e2873bd23af978252816d63cc2bac58d790a94","sha256":"38df7807cf64d8c8c9fbdd80df40e8b1bef9ae703503b8c7598139e68d8565b8","sha512":"d4c2bfe049a306bb36bae8541ee6d375c70fd4578f63a44b1c7aa19b5f44d1d22cf2daa7b7d986febb089b9ba0a37583a32404d16b7ab7da1b931bf1917bb98c","ssdeep":"6144:ms6cT6XRNGPVHoMFfZKtb2o+5jwbzF0je4awmAlOdn1VwtmWwMgWfI:mrcTGMXfKbBWj/gWfI","tlshash":"11a4fbc8b291f4b157e761e5402f050bf33a7869704d80a4f268ece56cb998e617bf39","first_seen":"2025-08-04T13:09:09.65301Z","last_seen":"2026-05-03T15:23:57.482397Z","times_seen":21,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 5971\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ced6840482a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"001d04d8ffff08f82d461fe590aa5616","sha1":"9a777f2dd6d963c8b385e118e7127c1403a6dfd4","sha256":"dc823dfb52c77818de9bd6eedcebd92839aee78ca4580a108b1ecda2f7bf64cf","sha512":"b3ce5cdf0ecd94d0e689c24c4f16d9148e7c04a8d78faa622e4b663c29a661a72db3038d65057ea438a603cfc7a109ca746d76a0718e8f3203065d7c541e4234","ssdeep":"96:9MQp/qSMCAHsS5AxLqiX6IbvYeinhgvIy0tTVAhaSIfcdBZ5r+G:Jp/qlHH4LlKuALMR0tTVAh+fcdR+G","tlshash":"d2c18e5b382eb1c7dad467fe03aea0aac5375d4b7608e9913d4276bc5361c543208a0b","first_seen":"2024-12-09T21:44:15.849099Z","last_seen":"2026-06-05T01:37:36.02691Z","times_seen":1035,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/048fabf844817206.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/048fabf844817206.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6841f8853181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (429)","md5":"bd1a314d1f3f0d71b91ba86f21d0bdbc","sha1":"184a53ce77ed86cd18e565138da1fa9f0d81a8fe","sha256":"e36ef6ee8810321b2c78ed31390e8d974dfae50d612c1f18e1665126cafc1719","sha512":"1a510f4d8fa658e2664fd4ede0673210b0187a89e01d52738a9973942c5dda33e134a0a0d45e13dc516f22939176cd60a902e520a19cf6c7718ae1f9a0e1c393","ssdeep":"","tlshash":"daf07b8c7558fc02e052f7d4910f292747b74451b805eecbf1502da85eb6489c222b34","first_seen":"2025-09-27T03:59:31.71217Z","last_seen":"2026-02-16T13:36:40.28784Z","times_seen":16,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/7ffd63f8c1780da1.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/7ffd63f8c1780da1.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6841f8923181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1152,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (733)","md5":"6c81df075bd215081d3555131292ced1","sha1":"2414641ccedf8de3e812e4eff76b5912bc6ffb30","sha256":"8dfcc5b51bbaf15cb2bebca9b3c0bfe7ad1e11ebd074021b4f328acd87e7123e","sha512":"a6edff2087bba01b31ce4a731568cbf8a402c1c4bdf39a036df4006eaecd2dc07f499d0e187d561fe644ab50295d01361823b31aba0e1225f78be4ab8e0a01e6","ssdeep":"","tlshash":"9a21f1ac386efc02d056b1b2202f5d172cebc851f4445dfb94a9e4ac5db64998233f94","first_seen":"2025-09-27T03:59:31.716236Z","last_seen":"2026-02-16T13:36:40.304792Z","times_seen":16,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/9420cbebe04060cf.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/9420cbebe04060cf.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6841f89f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34095,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1152)","md5":"186f1c7c78c8df6da3381641835a081e","sha1":"830f79f5a7a536ec4938f96b4f5238da7d445620","sha256":"77814cdbb9c0a3ffe1df318746e143690dedb42aef740cc9fcdf74927bbd59b2","sha512":"8c9dc3ad25f41546ade1e0226bbc7fce817105dc012c0f0572647fac9c601568997c906db934d048de348a1ba89041558119f8ee986d9e5e88e64dc8a60d1c72","ssdeep":"768:kovPYGpSzjCWReWr9ELmKW3jffzym1/2Ge4cL9p9AHYvlCWtjIjYHVjrNb6oSre1:JHEzXzhRe4cLu4iYHVjrt6yN","tlshash":"cfe2a4c872e7f81a8766d4e1003b1187f6795ce0f08c58bdf5a94dd2ba25c0691baf78","first_seen":"2025-09-27T03:59:31.727538Z","last_seen":"2026-02-16T13:36:40.318345Z","times_seen":16,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/c7f2d6a691399b4c.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/c7f2d6a691399b4c.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced684208f03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123399,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60399)","md5":"f14d3d977ea3ef4cc7e553fc3676f84e","sha1":"efa67a6e7eef155ecb88c8450b38e86efde9a260","sha256":"7cb96d72e47d500f0645d30a7482dbc4436829eccbc3736913af7c1f80ba6ece","sha512":"99fe417487dccbf0d54dc1dbe46dbc6f78f03042a687ac8c7eb0ebc6c3051a8409fcb08b05434b2c776a8206661231204082f7b8f837c00c5e5153bd788a738a","ssdeep":"768:2CqvHfOmLpGbN/zFykJR5g1Bb4yAPsCKMWhqqkWt0mZDGp8Sd2143u7DVIEkh:Wv/OIYvNG4y2sCKM+0W+dpy1Jm","tlshash":"fbc3e85ae7e72cad97616c75cc36f6acb4cf3ca18060d1b95e74889b9c1412fc82f921","first_seen":"2025-09-27T03:59:31.722275Z","last_seen":"2026-02-16T13:36:40.324854Z","times_seen":16,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/909cc58b17d2ad11.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/909cc58b17d2ad11.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68426ad43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":412,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3b55bbbc771e6dbdfe5076eb4c973786","sha1":"2893de1f9587553ccc5d6a9dfd66c8047b160cdb","sha256":"4588e1d65c486e247df2e5bfbd1e887e0f89b8251d52aef925c946d33c264a75","sha512":"17d163f9f6049ab136734ee33a21fbf37223e1cbf16eef0a79738753b85347f4fbd967ca1fe6d4cb655a37d0e9b6ede6342bd47e467553a944a27c629b5ff94a","ssdeep":"","tlshash":"35e0e5cc6a45fc17b09372e4910a6a2641f784267814ffc7a0a01dad48fb5898325875","first_seen":"2025-08-04T13:09:09.683628Z","last_seen":"2026-05-03T15:23:57.481072Z","times_seen":21,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/583e10ac20611d44.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:47.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/583e10ac20611d44.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6844ae1e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":412,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f7b6c08f1f4d00f2bc580e2f8fa9234b","sha1":"02520963b5597b68efa2dd66b5cb0263469ddaa0","sha256":"308d3ca86873406c1add56e991d1cb69c6e7903fb7c86645e3beebc3ad7a9249","sha512":"e378ce474249f1a45ed7bd86f166b2a1f04774c87b8a7bcd548fbf2c2f3c27f4f96b89caab8b2436fd1f1f73dd55bc28ab6bbb3f42fdef42d8bba59e12a75e31","ssdeep":"","tlshash":"aae0e5cc6a44fc03b0d272e4d14a6a3641b7842a7814efc7a0a01dbd48fb5498329975","first_seen":"2025-08-04T13:09:09.65043Z","last_seen":"2026-05-03T15:23:57.484122Z","times_seen":21,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/cb43e4c21b5b6695.i3d79q.vendor.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:45.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/cb43e4c21b5b6695.i3d79q.vendor.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:45 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6838d99d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":210098,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65448)","md5":"bf710ee746b1f5eb1eea51941011e223","sha1":"17d21dbafdc7413f4615cdfd236a4342d15dc0de","sha256":"d04f2d30e17b79b420ab9fd77599f2486c9e20d82a8799760f32c5f5c9520358","sha512":"5ad482462254318c5ad71e113daacaf898e8be7939dce9d7becc6a73ee79d4de768bfb53934ae3ddbfedac3ebc0b3fdd11a1e89d1edc2664466b8aae85bee7be","ssdeep":"3072:L2SsRRbZsBfL/xQQX+b2pzheWQOVedfeMep2TUWL9PM:xfDxQQub2pMWNVedFccn+","tlshash":"be24e7d87996f1a157b352b740af1407b33d2a1b280c8960f611fcc979b841ea17bfad","first_seen":"2025-06-12T09:54:25.744337Z","last_seen":"2026-05-03T15:23:57.468571Z","times_seen":35,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/images/e53c4bd8da5e491d9ab09e7cf0daf874.png HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 5971\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ced6840484a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5971,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"001d04d8ffff08f82d461fe590aa5616","sha1":"9a777f2dd6d963c8b385e118e7127c1403a6dfd4","sha256":"dc823dfb52c77818de9bd6eedcebd92839aee78ca4580a108b1ecda2f7bf64cf","sha512":"b3ce5cdf0ecd94d0e689c24c4f16d9148e7c04a8d78faa622e4b663c29a661a72db3038d65057ea438a603cfc7a109ca746d76a0718e8f3203065d7c541e4234","ssdeep":"96:9MQp/qSMCAHsS5AxLqiX6IbvYeinhgvIy0tTVAhaSIfcdBZ5r+G:Jp/qlHH4LlKuALMR0tTVAh+fcdR+G","tlshash":"d2c18e5b382eb1c7dad467fe03aea0aac5375d4b7608e9913d4276bc5361c543208a0b","first_seen":"2024-12-09T21:44:15.849099Z","last_seen":"2026-06-05T01:37:36.02691Z","times_seen":1035,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/44454a9cb494a260.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/44454a9cb494a260.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68425a943181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3468,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1037)","md5":"19a3d40e81969b2d40769c2146cc35f1","sha1":"abae212285f2ca5cc633d98648711e086ced6c33","sha256":"3a2e3a26184c74f17feae76ff9b448f1388065bceb5e3f9ca40253cae6041c4e","sha512":"d708de1148509d5800f5bc65d57f84bae13428606d0160cc0b036b3b5fcf3100366e4b7d1ce42d17c31952a46ab8beb0905653c8be42f597c82ae31d42ef689c","ssdeep":"","tlshash":"526186587398f91a5037cfd0b04f3607619b81c1fa0a8ecab674bc2c547989d763ae69","first_seen":"2025-09-27T03:59:31.779571Z","last_seen":"2026-02-16T13:36:40.28904Z","times_seen":16,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/5de4b7ae090d2aaf.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/5de4b7ae090d2aaf.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68426b0d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134367,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56957)","md5":"d5b32de6c598f5788363ab3858d874a7","sha1":"09f0838c39c10d3dc1aa556b7b6dfac15a613a0f","sha256":"ce248bc8eb08b981798c65cbce022ac7248c4b713f510b331ceaf481f70efde1","sha512":"1ffb958bc37d70d49c3ed0ab54359821b26c00c6a5508091b5eebaba43f53a589a177b672176b8812adf6ec488fa898de5ad466d970a9c32f39bba594953dce8","ssdeep":"1536:BgwL0HZeCZpG4y2sCKM+1E82IAh89VaSh0d8ERe:BgwL4G4y2sCKM+1E82IAK9Vaw0d8P","tlshash":"14d3095ae7a72cad93626c79cc36e6acb4cf3cb18060d1b55e3484975d1422fc82f936","first_seen":"2025-09-27T03:59:31.737068Z","last_seen":"2026-02-16T13:36:40.289576Z","times_seen":16,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-16T13:31:45.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:45 GMT\r\ncontent-type: text/html\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: frame-ancestors 'self' *.canva.com canva.com; report-uri https://csp.canva.com/_cspreport?app=websites; base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'nonce-47d5eb21-4d54-478b-bcee-f82c35274ea5' https://www.google.com/recaptcha/api.js;\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: all\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr; HttpOnly; Secure; Path=/; Domain=canva.site; Expires=Mon, 16 Feb 2026 14:01:45 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6836fdc932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":13950,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7332)","md5":"eec17ca216290e2c01324b32abf7e0b5","sha1":"bfc29ee809d5dd4667ae00525669c09c695c6d0c","sha256":"5a8fd99edc3c053181d36b21f8f0698ede99723557b10743d11186400f7258dc","sha512":"58463d40c0ab6e80615d39edcf8831d73371f5f5a66ccc00fb58f39e195cc2d41d1aee1a431c004a3ddbe3a6ec6227b8f3008e846f4d082edd2194fa681ac5ae","ssdeep":"384:7Z1AFJtavtNpHV5lgruRaEmwdAE4DTwqCWo3mDG:11AFJQVNp17gUCE4DTwqCWuj","tlshash":"df52e9161c11a02107e724d5d2a7f8e777c8767ff0e4bc9174ff9a582b81aca4025ab7","first_seen":"2026-02-16T13:32:12.780794Z","last_seen":"2026-02-16T13:32:12.780794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":30,"dns":8,"connect":1,"send":0,"wait":154,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/9c7eeb1ccee41a07.ltr.css","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/9c7eeb1ccee41a07.ltr.css HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: text/css\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68425abb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2627,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2564)","md5":"16116951b25f23b87349cc664e6aa7f1","sha1":"395ccd4bc971411bb9db8c32912cb1d7fa303286","sha256":"43de378c6421fde29c3f2288d3761a0f9da569b4bd53d1dc8e5fc05f4312bf58","sha512":"1f75a70827c8b83f9872a1671ed4a786d2cab7aa41c90622a773c127c79eff2077fff4e53b9353bf4b11917479430c9c1a36441bc407400c2ad0cbf48274c7d6","ssdeep":"","tlshash":"3851436896a432b44272f234dad12b8c4a3ec026c47b579fa220b638c9cb66d1d3641c","first_seen":"2025-06-28T20:41:09.144063Z","last_seen":"2026-05-18T22:45:40.900122Z","times_seen":43,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/548ec4bcdaf17be2.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/548ec4bcdaf17be2.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68426ade3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":412,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f1e1623577a03c800f586ae6adc2cefa","sha1":"46a12e08a9df55dd7c1395f0abe21ec48445ed6a","sha256":"18b14940a4e5b18678612c48a74041b4d758d0be081c1a80cf41912012e70b66","sha512":"da37033bb9677527b53bd2abcd5ab2f76a50f5ecec928213ebdf5056499416763a956f2cdc725c71ced9b835aaeac2f149a4189043fbdd5d214237a33a5c72e7","ssdeep":"","tlshash":"46e0e58c6a44fc02b09272e4914e7a3641b7942a7814efc7a0a02dbd48fb5498325875","first_seen":"2025-08-04T13:09:09.68595Z","last_seen":"2026-05-03T15:23:57.417151Z","times_seen":21,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-io.my.canva.site/_assets/2a3e01af158cf547.js","fqdn":"raydium-io.my.canva.site","domain":"raydium-io.my.canva.site","tld":"my.canva.site"},"ip":{"addr":"103.169.142.6","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://raydium-io.my.canva.site/","date":"2026-02-16T13:31:46.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.canva.site","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 22:26:06 GMT","end":"Fri, 10 Apr 2026 23:25:57 GMT"},"fingerprint":{"sha1":"8D:3C:36:30:78:FE:C4:40:94:5E:43:DC:DB:50:84:C8:1A:19:0D:CB","sha256":"7E:50:50:D3:24:CB:95:F9:C1:5B:9D:EE:67:FC:2D:49:C4:0D:F9:71:0A:FE:A6:ED:D3:95:B4:04:0F:03:12:B3"}}},"request":{"raw":"GET /_assets/2a3e01af158cf547.js HTTP/1.1\r\nHost: raydium-io.my.canva.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://raydium-io.my.canva.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=nCPaWq.1f5rdK934X3_bjQSkTtDxBOrGM34wtUEIYCY-1771248705.1146646-1.0.1.1-vmaYC.CHzcB2RN7cunTMzexRScWQuqSQ7ltUEGig3bvMMGFV8w_fIkcv0_7xPgpKr0gZXYSCjkvM2.mjuuo53Bs8kgQNEWYdhHrWoLkQaGSNdITKyYSdRpQYft.5CTbr\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:47 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=604800, immutable\r\nstrict-transport-security: max-age=31536000\r\nx-deployment-id: 88e04ac8f227143a93b3aa29664d8cd886d1ce3ff17e7b1693aa785e7b717572\r\nx-robots-tag: none\r\nvary: accept-encoding\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced68426afb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":856,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (636)","md5":"80fc7e5870b784ee52c5ed41a6c5a88d","sha1":"4672b0727e7b2cb3352125eb76663243f9f63f64","sha256":"1e77c2dcfb61768d01c6a85c4e96f68392c75b34941619c0d14d05bb3ae6619a","sha512":"e071393828ead19ffa4f248cf8d0380f5d8f291929b6d03d8355fd8ba31990901073fb5e6393c0752dd8ebd7b0ffca025fde6a70c6870fd31019c009b5fffb8f","ssdeep":"","tlshash":"5d11c04cbe59bc3390a222f0811f9d2641b6401478059feab4d51df888ba04dd321db5","first_seen":"2025-09-27T03:59:31.750191Z","last_seen":"2026-02-16T13:36:40.321251Z","times_seen":16,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"raydium-io.my.canva.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}