{"report_id":"c0fedb9d-3373-4b80-a319-01411aa4eb6f","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-09-11T15:58:35Z","url":{"schema":"https","addr":"dapp-aic2.pages.dev/","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"title":"SafePal Starter"},"submit":{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-16T15:58:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":2,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T15:58:14Z","timestamp":1757606294,"ip_dst":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.2","port":54036,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-09-11T15:58:14.033783+0000\",\"flow_id\":2060089411659455,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":54036,\"dest_ip\":\"172.66.47.62\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"dapp-aic2.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3469,\"start\":\"2025-09-11T15:58:14.026303+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-11","alert":"Detects file containing Telegram Bot API","trigger":"dapp-aic2.pages.dev/app.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"dapp-aic2.pages.dev","ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-09-11T15:58:35.482535Z","last_seen":"2025-09-11T15:58:35.482535Z","alert_count":2,"request_count":7,"received_data":97600,"sent_data":3129,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/app.js","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"77949f968d2375c4be079805a53a1cef","sha1":"d57e528763e632e9275698b1bef3f94d49e8c21b","sha256":"6eb7229b7f2467fe7b33a998b34617aa1e378f12cc061c076f8f0d4bee9bf208","sha512":"e770c16cdc9f1ad712a3dc419f98ba4ac449385f97e8e9ff755b157301ea0c379e159cc88e1f134603a0a75f309b97f243505fa1a4f30de9cce88fbb57600728","size":21261,"token":"5677710241:AAGNZEWBd8dSleFuoEEk-CMCHK5AgYLApdQ","is_revoked":false,"bot":{"token":"5677710241:AAGNZEWBd8dSleFuoEEk-CMCHK5AgYLApdQ","user_id":"5677710241","username":"SpicyChickenCheesySwipesBot","first_name":"Spicy Chicken Cheesy Swipes","last_name":"","chat":{"chat_id":"-4974345429","title":"1","type":"group","bot_is":"member","total_users":3,"active_members":null,"admins":[{"user_id":1454555206,"username":"smthbeautifoul","first_name":"Ромчік","last_name":"","is_bot":false}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-11T15:58:14Z","timestamp":1757606294,"ip_dst":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.2","port":54036,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-09-11T15:58:14.033783+0000\",\"flow_id\":2060089411659455,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.2\",\"src_port\":54036,\"dest_ip\":\"172.66.47.62\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"dapp-aic2.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3469,\"start\":\"2025-09-11T15:58:14.026303+0000\"}}"}]}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"703b05fb3750b2bea57ae9e10150ec2a","sha1":"a3b6c7c9bc914e27c62c23d7ca60623085e1f114","sha256":"2c1d1ef3787aace1d25bfefd82dfdd37afc2df581794811bf992e8c4ba40505f","sha512":"a0a8bb9025d0c7578d2028cdbe3357afe19a0b614bcdb5c2ba1840291f3afc4a184fcda604c827bc9217c86796f58e25df26f5dd062782012c6841aba23807f5","ssdeep":"","tlshash":"5bf04f8e8ffa8c370aa3702e1d0b4206223b46074085d954bfad57a25f82534d6abad8","size":480,"data":"","first_seen":"2025-09-11T15:35:41.14862Z","last_seen":"2025-09-11T15:58:37.219823Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/app.js","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"77949f968d2375c4be079805a53a1cef","sha1":"d57e528763e632e9275698b1bef3f94d49e8c21b","sha256":"6eb7229b7f2467fe7b33a998b34617aa1e378f12cc061c076f8f0d4bee9bf208","sha512":"e770c16cdc9f1ad712a3dc419f98ba4ac449385f97e8e9ff755b157301ea0c379e159cc88e1f134603a0a75f309b97f243505fa1a4f30de9cce88fbb57600728","ssdeep":"384:FwO876HHhH4vDL0lu8EUj0LFtAhkOZl/DVrGKsmyI3:FBy7QsUjotAhBRTsY","tlshash":"bda2736825fb14314a2361bfab9f610a3232401b3445ee193e5cc7551fc1b74abb6fea","size":21261,"data":"","first_seen":"2025-09-11T15:35:41.147468Z","last_seen":"2025-09-11T15:58:37.215692Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-11","alert":"Detects file containing Telegram Bot API","trigger":"dapp-aic2.pages.dev/app.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/bip39-wordlist.js","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69e1b1d6339a22882503ab3c492b950a","sha1":"0755d969c84560d066dfb7e82304b544bab91123","sha256":"d59ef1cc395b421baa5159917c2138342d2fe5c9f0eea838d7845ee802d6969c","sha512":"1051c1f1695902c89daf11cb851f3fe145ec56842e0f2f708d38d886235be55535180132d93e9e8a76ea54efab98073f25c0f9ddf01bbe69ec05cec5a4e3c3ab","ssdeep":"384:wI+5dcf49aVneJ+p8KFgZVGfITv9uRJc8NBkw93f2EH7JsoC7IChoXCKuYgebYvb:v4uYwtf2G7u2YebYva4ZGat","tlshash":"6e928e3cf617051b04e2d5583cd50582bba88b1a4386be1e579e826437cec3eb85f7ad","size":19654,"data":"","first_seen":"2025-09-11T15:35:41.146425Z","last_seen":"2025-09-11T15:58:37.213514Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/favicon.ico","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp-aic2.pages.dev/","date":"2025-09-11T15:58:14.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic2.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 15:24:37 GMT","end":"Sun, 07 Dec 2025 16:22:56 GMT"},"fingerprint":{"sha1":"AD:AC:1B:B0:7B:D2:0B:79:7C:CB:24:43:98:D2:5A:F6:48:73:6C:D8","sha256":"74:5E:29:DE:3E:50:55:53:0E:B6:D5:E6:BA:CC:98:DD:74:D0:E7:6C:A4:C1:32:BF:DD:35:AD:EA:F1:EA:61:4D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dapp-aic2.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic2.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:58:14 GMT\r\ncontent-type: null\r\ncontent-length: 15406\r\ncf-ray: 97d85d8d0e63712b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"deea3d35ee4de4d60d445e3a4f2ac644\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Gven13akW4e4OgM5TbEPvTfV6ARtFIbQExv3pAqmtF4kmqM6W7yLYGWOuVpG61A0qWGfR3p8pe1IO7zDTiazYN%2FeOtaPAl8Y9e7%2B1LFccZ2silWDwn3z36lV%2FzcYS9MTVxcxPYp3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2597\u0026min_rtt=1405\u0026rtt_var=1257\u0026sent=53\u0026recv=18\u0026lost=0\u0026retrans=0\u0026sent_bytes=41438\u0026recv_bytes=2798\u0026delivery_rate=6612497\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=07da63819c0a980e\u0026ts=333\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"3b468ec40e5baba25b38387ba9bdfde7","sha1":"322d14894a93143d3cf90c941fc97b882438ced3","sha256":"d2620726769cc36a7b5e21733dcbeeb710e20d9ea6a4360f288feb48e0d434c5","sha512":"d471894a2a3efc9fa1adbcf8af32b1ca5b634ccf924d09b2cdac476eb048b0186706a556995cab86d35f14c0d4e0632567d3d8e759c1734e73b172b7b55c6724","ssdeep":"24:nG4l4PjsDkn/pbBMS7709EN3wE3m2frsnDr/r/r/J9gobbWLw3M/fYzBBd7aix0p:lujsDEp6GfLAnDDDDTgWlB7LxGcnwD","tlshash":"5c62a183a6a3d88ddcc8eb7440214b765e769f8aa6915a35743fb03213b7442ecb3831","first_seen":"2025-09-11T15:35:41.141132Z","last_seen":"2025-09-11T15:58:37.203623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-11T15:58:14.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic2.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 15:24:37 GMT","end":"Sun, 07 Dec 2025 16:22:56 GMT"},"fingerprint":{"sha1":"AD:AC:1B:B0:7B:D2:0B:79:7C:CB:24:43:98:D2:5A:F6:48:73:6C:D8","sha256":"74:5E:29:DE:3E:50:55:53:0E:B6:D5:E6:BA:CC:98:DD:74:D0:E7:6C:A4:C1:32:BF:DD:35:AD:EA:F1:EA:61:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dapp-aic2.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 11 Sep 2025 15:58:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U%2FPlvd%2FK5jy97a2BM%2ByTTRmqpbiUqIwZnkNe%2FfEmh0aSAHTapQlDByu1yffn3i0gRFM4Cx8lE%2FSBrIy3zj64R3ayh55XAEHa%2FoOUxD1iP1AD56Yj%2F46fbDYAjLeGUtMm%2BIG%2Bt8nc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97d85d899a71712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5935\u0026min_rtt=540\u0026rtt_var=10831\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3224\u0026recv_bytes=1128\u0026delivery_rate=6672811\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=1c2071e7239796af\u0026ts=277\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7431,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (361)","md5":"9ad046cf18eb4b3b7a85f98de49d82f3","sha1":"bdf2eeed9fa9827fb715145084c389abc49aaee1","sha256":"fa255adf5369428e0f8a90ba9a23a78d99303fb17931bcd86842c547224865e9","sha512":"bc79191979e4d206c2d1a2d2ecd01063eb94f2d8b246c18d4a0ed8a63a01623465b3b6ef393e15c3373ec502daeaad807308ce1dece82b516507de9cbf70eb92","ssdeep":"96:AgmHjoNai0zD95x7H2qz0NUFHpo+MX5qm5IDTZfI1bWZyLytBVe:ZwjOC9zmHXJ5qIiELytTe","tlshash":"9ee1526002fa1c3a2113419aeb56761a3eb6a167974d12007aec6fe01fc3d9edc771dd","first_seen":"2025-09-11T15:35:41.142283Z","last_seen":"2025-09-11T15:58:37.20723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":36,"dns":22,"connect":1,"send":0,"wait":262,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/styles.css","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dapp-aic2.pages.dev/","date":"2025-09-11T15:58:14.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic2.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 15:24:37 GMT","end":"Sun, 07 Dec 2025 16:22:56 GMT"},"fingerprint":{"sha1":"AD:AC:1B:B0:7B:D2:0B:79:7C:CB:24:43:98:D2:5A:F6:48:73:6C:D8","sha256":"74:5E:29:DE:3E:50:55:53:0E:B6:D5:E6:BA:CC:98:DD:74:D0:E7:6C:A4:C1:32:BF:DD:35:AD:EA:F1:EA:61:4D"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: dapp-aic2.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic2.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:58:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"72fc50bcd598c81ba44f3cdcc3be7a45\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GbOrEuDx4ba5B1AsJRfYRO7K8BZddd9bZE5vlkBqQl%2FAqRVg1XPD3wLT2LQGBKQZI5MAvWNDGoImwEJg0ew%2BXvVNLY%2Bgp9ksz%2Braez4aB8IPVfk8j8W0uGh985RAhbZpIqKqgzHw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97d85d8c5dc9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3434\u0026min_rtt=3185\u0026rtt_var=1372\u0026sent=14\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=4173\u0026recv_bytes=1997\u0026delivery_rate=862791\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=07da63819c0a980e\u0026ts=231\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8647,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dd93609e2f15bd70180f8e01b4fd01e3","sha1":"74a952fce0aa4d05c86a31becb2274413f98536d","sha256":"1d317cfdd2a5d7037c05eff19862edfb02566f8cb13377864a8c8c76bffec131","sha512":"4b63c8443dbd33e21c7cdd1fe547bb7db1394ef3363af454f39dfd2544593be425660a5aff05e5925ca470709f3fe6650358082aaf69fa8bb38298dc999d2196","ssdeep":"192:qr1L+6+fEcRPcLMIphknPEfOb+unXgKfWSE9zyFd9/d4rnR/iWEVQ5HEqERr:qB82G","tlshash":"400221952ab32644741bd5e51ff7875823acc043804fcd6c37da368c8f4b2dd6592b89","first_seen":"2025-09-11T15:35:41.143565Z","last_seen":"2025-09-11T15:58:37.209687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/icons/splash.png","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp-aic2.pages.dev/","date":"2025-09-11T15:58:14.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic2.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 15:24:37 GMT","end":"Sun, 07 Dec 2025 16:22:56 GMT"},"fingerprint":{"sha1":"AD:AC:1B:B0:7B:D2:0B:79:7C:CB:24:43:98:D2:5A:F6:48:73:6C:D8","sha256":"74:5E:29:DE:3E:50:55:53:0E:B6:D5:E6:BA:CC:98:DD:74:D0:E7:6C:A4:C1:32:BF:DD:35:AD:EA:F1:EA:61:4D"}}},"request":{"raw":"GET /icons/splash.png HTTP/1.1\r\nHost: dapp-aic2.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic2.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:58:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 14127\r\ncf-ray: 97d85d8c5dcd712b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f0ae8eb80ae1a10e74c828dfa2cb3cdb\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=htiQDOFo4GdNoQO0RodoHY7vJEXdW3N56S6hpYMdZQGoRTIVCCl3r66w3WmoykrVJZ9otmccqLh2p0gZwBMLSKUtXjMWSP4h34ZZdzoQEPJG9%2Fpl8%2FQOWy5OuZ7%2B0W0SET%2BjDhhx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3236\u0026min_rtt=1854\u0026rtt_var=1423\u0026sent=17\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=7113\u0026recv_bytes=2041\u0026delivery_rate=1585131\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=07da63819c0a980e\u0026ts=235\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14127,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b398eeb7494ba3824b4b157d95bb9112","sha1":"108340e3a161a188278774f108a16fe5993ec520","sha256":"be22c46bdc3d3eb523c8b23b793c4057debbcdccbd54b306c2d47e8648faf217","sha512":"a132fce8a47d329e8bc3e5348e7d285cd03074900c8e728c69f8b581f9e0bb3d7226f91c94e9971c53f7e05c4d1ca99ea04a6cf332accf27f131305a89e8d83c","ssdeep":"384:wOJNu1/Nnc+2Ul846vC16esVEy4ZavMkRMUgYRaMOOOOOAJ:wOLSk1vC8e1y/MjmaC","tlshash":"77521a24c19218bae4432f29bbb528c7869ad67de53de54873df0c872e47b50fd20c68","first_seen":"2024-01-08T00:36:04Z","last_seen":"2026-08-02T03:28:24.197015Z","times_seen":161,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/bip39-wordlist.js","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp-aic2.pages.dev/","date":"2025-09-11T15:58:14.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic2.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 15:24:37 GMT","end":"Sun, 07 Dec 2025 16:22:56 GMT"},"fingerprint":{"sha1":"AD:AC:1B:B0:7B:D2:0B:79:7C:CB:24:43:98:D2:5A:F6:48:73:6C:D8","sha256":"74:5E:29:DE:3E:50:55:53:0E:B6:D5:E6:BA:CC:98:DD:74:D0:E7:6C:A4:C1:32:BF:DD:35:AD:EA:F1:EA:61:4D"}}},"request":{"raw":"GET /bip39-wordlist.js HTTP/1.1\r\nHost: dapp-aic2.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic2.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:58:14 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"ccb796c5ada48f6c1d6acaf088251dd9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5cLY3iN8dO9ogCzeq8iNAdMowCmhM9IV2%2Bx1QlAs0G75ncIbJwUDL4N0pu1ajaOeiIkJNF3OG%2FFWDM0QCf9d7z38aPYlok1UceLKVPb6LFbrNmTgqScXubMaRoDfFFPo8SHWVriQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97d85d8c5dce712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3236\u0026min_rtt=1854\u0026rtt_var=1423\u0026sent=28\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=19113\u0026recv_bytes=2041\u0026delivery_rate=1585131\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=07da63819c0a980e\u0026ts=237\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19654,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"69e1b1d6339a22882503ab3c492b950a","sha1":"0755d969c84560d066dfb7e82304b544bab91123","sha256":"d59ef1cc395b421baa5159917c2138342d2fe5c9f0eea838d7845ee802d6969c","sha512":"1051c1f1695902c89daf11cb851f3fe145ec56842e0f2f708d38d886235be55535180132d93e9e8a76ea54efab98073f25c0f9ddf01bbe69ec05cec5a4e3c3ab","ssdeep":"384:wI+5dcf49aVneJ+p8KFgZVGfITv9uRJc8NBkw93f2EH7JsoC7IChoXCKuYgebYvb:v4uYwtf2G7u2YebYva4ZGat","tlshash":"6e928e3cf617051b04e2d5583cd50582bba88b1a4386be1e579e826437cec3eb85f7ad","first_seen":"2025-09-11T15:35:41.146425Z","last_seen":"2025-09-11T15:58:37.213514Z","times_seen":2,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/app.js","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dapp-aic2.pages.dev/","date":"2025-09-11T15:58:14.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic2.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 15:24:37 GMT","end":"Sun, 07 Dec 2025 16:22:56 GMT"},"fingerprint":{"sha1":"AD:AC:1B:B0:7B:D2:0B:79:7C:CB:24:43:98:D2:5A:F6:48:73:6C:D8","sha256":"74:5E:29:DE:3E:50:55:53:0E:B6:D5:E6:BA:CC:98:DD:74:D0:E7:6C:A4:C1:32:BF:DD:35:AD:EA:F1:EA:61:4D"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: dapp-aic2.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic2.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:58:14 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"227dd219e2d9ed2f958146fddb3befaa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=weLw5hh6H8Ca6gmSJXE0AiLPvjxK0q6LwdQiBTMXpt%2FzoSPqNwa7auVsCALjTqLXaZ7d745dxbiu1mT6qBy2Fya4NoYeLRgSxWyA7%2Bgl8WQ0RNYLx4X4gmmD0cYrZGisnDTolfnj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97d85d8c5dcf712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3060\u0026min_rtt=1824\u0026rtt_var=1421\u0026sent=32\u0026recv=13\u0026lost=0\u0026retrans=0\u0026sent_bytes=23036\u0026recv_bytes=2084\u0026delivery_rate=6577663\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=07da63819c0a980e\u0026ts=237\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21261,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"77949f968d2375c4be079805a53a1cef","sha1":"d57e528763e632e9275698b1bef3f94d49e8c21b","sha256":"6eb7229b7f2467fe7b33a998b34617aa1e378f12cc061c076f8f0d4bee9bf208","sha512":"e770c16cdc9f1ad712a3dc419f98ba4ac449385f97e8e9ff755b157301ea0c379e159cc88e1f134603a0a75f309b97f243505fa1a4f30de9cce88fbb57600728","ssdeep":"384:FwO876HHhH4vDL0lu8EUj0LFtAhkOZl/DVrGKsmyI3:FBy7QsUjotAhBRTsY","tlshash":"bda2736825fb14314a2361bfab9f610a3232401b3445ee193e5cc7551fc1b74abb6fea","first_seen":"2025-09-11T15:35:41.147468Z","last_seen":"2025-09-11T15:58:37.215692Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-09-11","alert":"Detects file containing Telegram Bot API","trigger":"dapp-aic2.pages.dev/app.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"dapp-aic2.pages.dev/icons/apple-touch-icon.png","fqdn":"dapp-aic2.pages.dev","domain":"dapp-aic2.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dapp-aic2.pages.dev/","date":"2025-09-11T15:58:14.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dapp-aic2.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 15:24:37 GMT","end":"Sun, 07 Dec 2025 16:22:56 GMT"},"fingerprint":{"sha1":"AD:AC:1B:B0:7B:D2:0B:79:7C:CB:24:43:98:D2:5A:F6:48:73:6C:D8","sha256":"74:5E:29:DE:3E:50:55:53:0E:B6:D5:E6:BA:CC:98:DD:74:D0:E7:6C:A4:C1:32:BF:DD:35:AD:EA:F1:EA:61:4D"}}},"request":{"raw":"GET /icons/apple-touch-icon.png HTTP/1.1\r\nHost: dapp-aic2.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dapp-aic2.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 11 Sep 2025 15:58:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 4026\r\ncf-ray: 97d85d8d0e5d712b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0ce51829ed14209d5291a7b701ba9328\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iG5EljyS4ZTvatYI2VF8wFSNkW%2FHedS7NtbLC5Rt1OzAZvZyHzszJaxWiHr9WGJ7EVqscIaEZ%2B2qocy7CIxqulo3fZ%2FSrNSCMxwMAWBqfYSUXcOJs60inYr94g3ThzRzoBTbRMoF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2676\u0026min_rtt=1405\u0026rtt_var=1465\u0026sent=48\u0026recv=17\u0026lost=0\u0026retrans=0\u0026sent_bytes=36576\u0026recv_bytes=2754\u0026delivery_rate=6612497\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=07da63819c0a980e\u0026ts=328\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"aac6c392db98d7c2ccc364b9346916d6","sha1":"58549168b34f7173fb07d1c1dc33410bd26c76e6","sha256":"97e32f8c2b01b651105c96f51027a1bb09258e86725b57c97207e2a8b4284a39","sha512":"154465dfc7b6ec4a8ac37ba4f3856d463a8df8dddc59cafc16c4d6dfa5600c69bd304ce8f8d50c387b80c6f9425c064e46d5854450cc6e9b84878b594ae2063b","ssdeep":"","tlshash":"338108d4eb81bc1bf8b4614fc494f0964a08335054f84bd260d228bc2e07dea8ab3e65","first_seen":"2025-09-11T15:35:41.139648Z","last_seen":"2025-09-11T15:58:37.218221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}