{"report_id":"c3c3992e-85c8-48c5-b59f-b8b083d9548d","version":6,"status":"done","tags":[],"date":"2026-01-26T12:01:37Z","url":{"schema":"https","addr":"cryptosafeverify.com/","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"104.21.36.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cryptosafeverify.com/","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"title":"Mining Pool Connection","dom":{"size":19637,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14106)","md5":"c1e5a6ca202804f8659aee017f1eb187","sha1":"3975ee401d8c134ab157b4fb134fc4f93f847aa8","sha256":"78b47cda26e6b88b5eaf7e486ed5cabd5ab55c88b3d38b61a604012a993c02af","sha512":"c6dba5e41d909ef9892241764371981886f6fe72232f266ec54b31ee95379ac5014c071645c9a48d5f2d9787a5763e831ea00f44217c45db9df231ef5242a40e","ssdeep":"192:RTfhPU7JXeS7JXex/27xugn/+WbQ9v6jqwpIh5IWlX06FYNs5p6am5GoBqbtVgQn:lfQhL7ki/+WbQV6Wt51RFj695V8YSf","tlshash":"7492d7296a2460357d26c4eaf4d9be49711980c3c737d6b9f6ed6018efcb0bb4ad2344","dom_hash":"domhash9aee1b8c4d11a763cf994b429cdb9fc4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cryptosafeverify.com/","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"104.21.36.249","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T12:01:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-26","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cryptosafeverify.com/assets/code.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-26","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cryptosafeverify.com/assets/index-BAKR55uT.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-26","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cryptosafeverify.com/assets/index-Te6_j_JH.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tonapi.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-01-26T03:26:27.114953Z","alert_count":0,"request_count":2,"received_data":815970,"sent_data":832,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":2,"received_data":15926,"sent_data":961,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cryptosafeverify.com","ip":{"addr":"172.67.201.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-24","domain_rank":0,"first_seen":"2026-01-26T11:59:02.156081Z","last_seen":"2026-01-26T11:59:02.156081Z","alert_count":3,"request_count":6,"received_data":4227228,"sent_data":2684,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":2,"received_data":77182,"sent_data":1110,"comment":"","tags":null,"fingerprints":null},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-01-21T13:15:58.07038Z","alert_count":0,"request_count":6,"received_data":16018,"sent_data":3967,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"axaxaxaxaxxaaxxxaxa.xyz","ip":{"addr":"172.67.207.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-04T02:58:33.85388Z","last_seen":"2026-01-26T11:53:23.254094Z","alert_count":0,"request_count":4,"received_data":3590,"sent_data":2170,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tonapi.io","ip":{"addr":"104.18.34.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-04-24","domain_rank":37995,"first_seen":"2022-04-26T16:09:28Z","last_seen":"2026-01-26T11:42:07.158326Z","alert_count":2,"request_count":2,"received_data":35416,"sent_data":1068,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cryptosafeverify.com/assets/code.js","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"172.67.201.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74f6c772dcbef1406471167f1e085446","sha1":"ef7c8b838beb41821c1e87216dcfe1370e9e9535","sha256":"c8929885eefe45572625645b6e732a4792c5e899f24ba3ff034ca789f94839c0","sha512":"42e9af44bd922cfd22983defa7727de9bdcbf92320bb10e939556a5179e521639fe1a4a7484bc2095f0a681d654add55192e7751dcc7cd9f812df6a3bc8a6198","ssdeep":"192:eQ2wG87UsZSP5yBJTWgQJS0IFzgx9VkIJ8JbgkL:eWG87U2M56JTWgQJS0igTVkRdjL","tlshash":"4ed1ffc3cb942b6d1253df299d14d98de672889177c48b8af3c98f8f19fcb18a512670","size":6349,"data":"","first_seen":"2026-01-26T11:59:06.767049Z","last_seen":"2026-01-26T12:01:41.468176Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-26","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cryptosafeverify.com/assets/code.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-06-09T02:20:04.88052Z","times_seen":39868,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptosafeverify.com/assets/index-BAKR55uT.js","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"172.67.201.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fedadb08c7818eb35cec037d76dcc82","sha1":"dd706fa0e3f71b6da2ae888cd21ba64affb7329b","sha256":"2e55bd5de0da9bac465c33368ed992360d003006eceed81f0e713c78bc1fe472","sha512":"279ae4d3213cff6d6b912ad8c4ed9b5cf28e8f6850672249e40c7ad48260efc4d9b994767844b5c55ce03077422df358fe5efa3f8031d0293eaa6175b78c6e5a","ssdeep":"49152:D7eK8bJqCBMj2mCgFhQfCpL/HCyaqTlqYE:DL8bJ/iFywH2","tlshash":"1206c64063c0a84813479f7a771bb0e6f09e196e7858488be201fd7469e9727fbf9931","size":3921831,"data":"","first_seen":"2026-01-26T11:59:06.787423Z","last_seen":"2026-01-26T12:01:41.475663Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-26","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cryptosafeverify.com/assets/index-BAKR55uT.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptosafeverify.com/assets/index-Te6_j_JH.js","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"172.67.201.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0960caef335695e7fcae9e7a6c0a6875","sha1":"026ee9c169669426d52b0fd7a9f996be2e1908a9","sha256":"b06c5145873b801ab65c6beb4bdb3a7e53ac75a975409d1075098d7996a6dce8","sha512":"02d44e4d07c65f530a11f08964203bcf16f5ebe6fdd48c8da571bc2b04c31b9c6ea029c7a2fc90a3ef790e96011ecdb7b67fbd8c129e08a40b48a29790501db1","ssdeep":"6144:RaGIrqlHgEKtlbTPkM7bAzWGED2CsBwzh:RpIrqdKtNAmAkD29Bwzh","tlshash":"1234f78567d079582343cfbbb317b5e1e01a1c2a796d488be098be251cd7712eaf4b34","size":243653,"data":"","first_seen":"2026-01-26T11:59:06.781622Z","last_seen":"2026-01-26T12:01:41.465946Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-26","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cryptosafeverify.com/assets/index-Te6_j_JH.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:15.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 26 Jan 2026 12:01:15 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::g5ghl-1769428379930-164292437531\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 495\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIRVunJAHLZ0S7nvGYRYstl%2BDXTDnTEDP%2BgFQ19mqQXWPA7lbbBz5V2w21z2aymf3stTWLuvf%2FluBrIAA1DMyOJ7IpJ342KEf2X72z%2FZoj00MQ%3D%3D\"}]}\r\ncf-ray: 9c3fdac63b3f4c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-09T02:17:27.838118Z","times_seen":16256306,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:15.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:30 GMT","end":"Mon, 23 Mar 2026 19:52:29 GMT"},"fingerprint":{"sha1":"86:D6:34:52:EB:68:D5:4F:25:44:58:CF:88:1B:C8:55:D6:9A:23:A7","sha256":"4D:67:BD:08:81:96:64:4A:7A:02:51:95:46:0E:60:D7:FA:5D:84:3F:53:29:E5:C8:84:87:AC:12:B6:97:C2:8E"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 26 Jan 2026 12:01:15 GMT\r\ndate: Mon, 26 Jan 2026 12:01:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3854,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8fcdaed672fb4038bca844e28ff6ea99","sha1":"47e7696b87c24322a9e879c661aa5a65a750f82a","sha256":"1464ffe69e5b54c0459ee3df746803e9a66654f54e14419aa89fef64f196b6f7","sha512":"118f4964f1490206704820b46d4d6ae267f0841185aeb3ef13e51b95192a5c4ec5f2bcd51cdd93bdbeef39412835829ab10094c6d796382c07ed3e06d17b9953","ssdeep":"","tlshash":"cd81be91105be500e6472cc923cf7e26dd4e216674a4c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-05T05:39:48.225462Z","last_seen":"2026-06-08T16:42:04.741979Z","times_seen":3182,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":182,"dns":4,"connect":28,"send":0,"wait":45,"receive":0,"ssl":154},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptosafeverify.com/assets/index-Te6_j_JH.js","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"172.67.201.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:15.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptosafeverify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 17:06:31 GMT","end":"Fri, 24 Apr 2026 18:03:01 GMT"},"fingerprint":{"sha1":"4F:88:9C:D2:5C:1E:10:4D:AC:D4:00:1D:76:51:93:17:0A:80:49:CE","sha256":"20:AB:DB:70:C7:A1:31:F1:5A:65:8F:17:9A:0F:8F:24:63:FA:05:7E:1E:F5:B1:E8:08:2A:2C:9F:1D:27:D9:38"}}},"request":{"raw":"GET /assets/index-Te6_j_JH.js HTTP/1.1\r\nHost: cryptosafeverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 12:01:15 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sun, 25 Jan 2026 16:00:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69763e2c-3b7c5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m0ndSaZag239BwwLJ8PZjt%2BqRGhYSJBWoTIMm9nr8Vq9BMO4Ce9X3ffmdtwDuz8Ytc2l1nn1ZrlLlPhRPsuXTVSoKTGtirEiJGrueBIplSkcOQ%3D%3D\"}]}\r\ncf-ray: 9c3fdac62c8cb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243653,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22150)","md5":"0960caef335695e7fcae9e7a6c0a6875","sha1":"026ee9c169669426d52b0fd7a9f996be2e1908a9","sha256":"b06c5145873b801ab65c6beb4bdb3a7e53ac75a975409d1075098d7996a6dce8","sha512":"02d44e4d07c65f530a11f08964203bcf16f5ebe6fdd48c8da571bc2b04c31b9c6ea029c7a2fc90a3ef790e96011ecdb7b67fbd8c129e08a40b48a29790501db1","ssdeep":"6144:RaGIrqlHgEKtlbTPkM7bAzWGED2CsBwzh:RpIrqdKtNAmAkD29Bwzh","tlshash":"1234f78567d079582343cfbbb317b5e1e01a1c2a796d488be098be251cd7712eaf4b34","first_seen":"2026-01-26T11:59:06.781622Z","last_seen":"2026-01-26T12:01:41.465946Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-26","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cryptosafeverify.com/assets/index-Te6_j_JH.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:15.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 07:38:24 GMT\r\nexpires: Sun, 24 Jan 2027 07:38:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188572\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-09T02:19:36.693526Z","times_seen":509053,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":130,"dns":1,"connect":23,"send":0,"wait":54,"receive":2,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2176\r\ncf-ray: 9c3fdacf1cec0b41-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 156\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=16+2 c=0+1 v=2025.8.5 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-06-09T02:28:11.006426Z","times_seen":2959,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axaxaxaxaxxaaxxxaxa.xyz/api/crypto/settings/?chain=1","fqdn":"axaxaxaxaxxaaxxxaxa.xyz","domain":"axaxaxaxaxxaaxxxaxa.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axaxaxaxaxxaaxxxaxa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 10:24:25 GMT","end":"Sat, 28 Mar 2026 11:23:10 GMT"},"fingerprint":{"sha1":"02:DA:06:B4:21:C0:AD:24:DA:00:D3:24:60:42:41:62:EE:16:40:B4","sha256":"D5:09:1D:8D:95:6C:80:81:AE:76:AA:15:F1:A7:58:68:97:1D:78:8D:22:AE:7B:7E:DA:03:C0:9A:B7:EA:1B:E4"}}},"request":{"raw":"OPTIONS /api/crypto/settings/?chain=1 HTTP/1.1\r\nHost: axaxaxaxaxxaaxxxaxa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cryptosafeverify.com/\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with, ngrok-skip-browser-warning, referer, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, CF-Visitor, CF-IPCountry, X-Forwarded-Proto, CF-Connecting-IP, X-Forwarded-For, CF-RAY, Strict-Transport-Security\r\naccess-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3aPW9Ix1QbzrSstBqr9aOm0jeVqXsHyp91VpjTk8esCgt%2B3NA3YPWuGIJHmSySbY8wExASxBDBC48%2Fgpr8K%2FKF9TSQHjE%2FhjpAmIWnSsNWEkNQDv59Pz\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3fdacf5b45783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-09T02:17:27.838118Z","times_seen":16256306,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":33,"dns":5,"connect":1,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axaxaxaxaxxaaxxxaxa.xyz/api/users/domains/visits/?","fqdn":"axaxaxaxaxxaaxxxaxa.xyz","domain":"axaxaxaxaxxaaxxxaxa.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axaxaxaxaxxaaxxxaxa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 10:24:25 GMT","end":"Sat, 28 Mar 2026 11:23:10 GMT"},"fingerprint":{"sha1":"02:DA:06:B4:21:C0:AD:24:DA:00:D3:24:60:42:41:62:EE:16:40:B4","sha256":"D5:09:1D:8D:95:6C:80:81:AE:76:AA:15:F1:A7:58:68:97:1D:78:8D:22:AE:7B:7E:DA:03:C0:9A:B7:EA:1B:E4"}}},"request":{"raw":"POST /api/users/domains/visits/? HTTP/1.1\r\nHost: axaxaxaxaxxaaxxxaxa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptosafeverify.com/\r\nContent-Type: application/json\r\nContent-Length: 43\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"{\"code\":\"glX3UVDjdTC4mIYQ14AiSYhUwWaeeDRw\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept, origin\r\nallow: GET, POST, HEAD, OPTIONS\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9biNqDbIrPM%2B8uTiZi5J0KqmDQp3s2pRPIBRKka8DAxGPZr8IBsg8%2FVrd7WeXfe%2B8xXNKpuyv804ytFFfy2egfwXAAoCJZg2m3JoS66FK5xDhdx%2Bmb2\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3fdacfdcc1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9dfec0b7b34869a4bb6c5e030d9f6bc4","sha1":"76e1558c8d698fab1c9f350e2350b4d40c5951f1","sha256":"56587cffbb30e338497c9114f74803a530a713ebe374b69fcfa8551ad8dad1e9","sha512":"6857c3701190d054e551f288aca1e6c121392a4745448a01d62c80472e39cf2d3e9b52e2d19a2c8550f629a6b602fed77adb1ddf1aae03b9110a25dce3ac6ffd","ssdeep":"","tlshash":"9e600022000208208088008202202a228080203000002080000aa00880228000008002","first_seen":"2023-04-06T07:36:31Z","last_seen":"2026-06-06T07:20:43.613659Z","times_seen":553,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptosafeverify.com/assets/code.js","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"172.67.201.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:15.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptosafeverify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 17:06:31 GMT","end":"Fri, 24 Apr 2026 18:03:01 GMT"},"fingerprint":{"sha1":"4F:88:9C:D2:5C:1E:10:4D:AC:D4:00:1D:76:51:93:17:0A:80:49:CE","sha256":"20:AB:DB:70:C7:A1:31:F1:5A:65:8F:17:9A:0F:8F:24:63:FA:05:7E:1E:F5:B1:E8:08:2A:2C:9F:1D:27:D9:38"}}},"request":{"raw":"GET /assets/code.js HTTP/1.1\r\nHost: cryptosafeverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 12:01:15 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sun, 25 Jan 2026 16:00:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69763e2c-18cd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCosBP9Vkr0cQfvNEyqB5hhcpHBzTATwSZgCWBrl1CbImulQiadp90qKrkYgCYHVoK%2FfeC3lIwgRE03dKis9F0h9fW5mwTVWxsIWG3cMzaDd1w%3D%3D\"}]}\r\ncf-ray: 9c3fdac62c8db4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6349,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6349), with no line terminators","md5":"74f6c772dcbef1406471167f1e085446","sha1":"ef7c8b838beb41821c1e87216dcfe1370e9e9535","sha256":"c8929885eefe45572625645b6e732a4792c5e899f24ba3ff034ca789f94839c0","sha512":"42e9af44bd922cfd22983defa7727de9bdcbf92320bb10e939556a5179e521639fe1a4a7484bc2095f0a681d654add55192e7751dcc7cd9f812df6a3bc8a6198","ssdeep":"192:eQ2wG87UsZSP5yBJTWgQJS0IFzgx9VkIJ8JbgkL:eWG87U2M56JTWgQJS0igTVkRdjL","tlshash":"4ed1ffc3cb942b6d1253df299d14d98de672889177c48b8af3c98f8f19fcb18a512670","first_seen":"2026-01-26T11:59:06.767049Z","last_seen":"2026-01-26T12:01:41.468176Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-26","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cryptosafeverify.com/assets/code.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:15.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptosafeverify.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:15 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::gv5lr-1767495562922-401ec0c56245\r\nlast-modified: Sun, 04 Jan 2026 02:59:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1933311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQ5s%2BIJCP%2FHukq8N5vOxZ8tK%2BuzGRqyJkBsL2wuDHGAO8CAQADD8WuXUXEbPNL7GwzMLczZuA51fq3vR8doky9rx5lqE%2FDQyEetlqTaBJhFbLA%3D%3D\"}]}\r\ncf-ray: 9c3fdac66be34c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-06-09T02:20:04.88052Z","times_seen":39868,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptosafeverify.com/background.jpg","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"172.67.201.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:15.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptosafeverify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 17:06:31 GMT","end":"Fri, 24 Apr 2026 18:03:01 GMT"},"fingerprint":{"sha1":"4F:88:9C:D2:5C:1E:10:4D:AC:D4:00:1D:76:51:93:17:0A:80:49:CE","sha256":"20:AB:DB:70:C7:A1:31:F1:5A:65:8F:17:9A:0F:8F:24:63:FA:05:7E:1E:F5:B1:E8:08:2A:2C:9F:1D:27:D9:38"}}},"request":{"raw":"GET /background.jpg HTTP/1.1\r\nHost: cryptosafeverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 12:01:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44907\r\nlast-modified: Sun, 25 Jan 2026 15:57:22 GMT\r\npriority: u=4,i=?0\r\netag: \"69763d62-af6b\"\r\naccept-ranges: bytes\r\nage: 157\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QbtGR8c1fLBVo5TuVQG1z4iwMrJNYUPMnAd3kXo54ScoTX8AdSohRmlojGhYVD2gt2RX1wc%2FnuWGN7bdoCziBSxYQa%2FptejK5UkMPYrgirIx2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3fdaca2d19b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44907,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x634, components 3","md5":"d0420837342b1fcb500f0c2bed86e37a","sha1":"4fa02a11fef64558deed4a888c30d0ed7260e150","sha256":"9792fede42a37a97c960400514d15974db3264bea21996591e39422e9eaa9b67","sha512":"3c17f227a5a6b11b104ca35a4edc6add9031e7c2a90da600acb551b2bccb25c7b33f15846fb9cafd59ceacc0f209d63b6fb28a69546519061d76b3bd07cad14b","ssdeep":"768:LuLxR/5oqrOT9rkFR3nPA+Ihmws4csIhnJOpzbYTO0hCIw57JhA:LuL3GMOSFpPEQtcPYT13","tlshash":"7d13d06ae664e223cf0083f3ce554e97820f45b4a7e4d2978b25183704d6fbafdb9046","first_seen":"2026-01-26T11:59:06.772754Z","last_seen":"2026-01-26T12:01:41.469258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:15.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:23 GMT","end":"Mon, 23 Mar 2026 19:52:22 GMT"},"fingerprint":{"sha1":"5A:74:FC:38:D2:7B:9B:E5:E5:0D:67:25:F4:73:BC:BA:2E:12:A7:FD","sha256":"3B:19:CD:BE:44:E6:EE:DC:8D:33:2B:A2:1C:E4:13:F8:6F:7E:2E:52:5D:0E:75:F3:1A:ED:21:1B:7A:B7:2E:BA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 24 Jan 2026 07:38:24 GMT\r\nexpires: Sun, 24 Jan 2027 07:38:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188572\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-09T02:19:36.693526Z","times_seen":509053,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":104,"dns":1,"connect":22,"send":0,"wait":24,"receive":48,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4%2Cfbea6f68df4e6ce163c144df86da89f24cb244f19b53903e26aea9ab7de6393c","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4%2Cfbea6f68df4e6ce163c144df86da89f24cb244f19b53903e26aea9ab7de6393c HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptosafeverify.com/\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9c3fdacd5b9e0b41-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 157\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Mon, 26 Jan 2026 11:58:39 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4693,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"16289c457ac3db6c68c98815dde366b4","sha1":"272ff3455aa59d79478d502ce5a46d98684472a2","sha256":"4f31f5fb2343599696540d2ffa76a200131d85b81c28185c2fa4f66fc203969f","sha512":"3c1290eb50e2c37ea8447e65b157f40c4129d804f785f2d616abec3ab90cec120b586586d6a6492eacfecb836517484d7d4787a5ead40f722ce2db6d1b427743","ssdeep":"96:nNSNbhWYiO2MVMrhIL1WUIjls7UdVbqb+Oh+959Jwt2te72WFEBcE9hXEhc1wWZv:vOnoUPcfv9zQc5fn","tlshash":"83a145bb8f908f6e1f2007c5701d3a9c665e2407d7c46ce2f1808f6d80e9af66662562","first_seen":"2025-12-31T16:29:42.58767Z","last_seen":"2026-01-26T12:01:41.469877Z","times_seen":6,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":26,"dns":6,"connect":1,"send":0,"wait":80,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/4e7d6f52-f663-4fc1-4b88-eebe7fc72800?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/4e7d6f52-f663-4fc1-4b88-eebe7fc72800?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1638\r\ncf-ray: 9c3fdacf1ce90b41-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 156\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfwVowhypScApAcmoeznMTkZRzfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=15+2 c=0+1 v=2025.5.2 l=1638 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ccfb2325173637f538577b4cad23f43","sha1":"70060aadb98e9a950fb797ae0105460d184d7236","sha256":"b655ab554ceb7219eb8702f830dc7edd8492194e06eddcf2ccbea5fe180d2518","sha512":"ada7b30dcb5f784d6feb476033ccb6b435aa8c250bcf596b27372354594d7ffeeeb0d2dc9e5f2c322a4da07925dfee2c97239a9dcd0fc227145f8414e5794242","ssdeep":"","tlshash":"1e310a85ed51fd0e6fc02af8a8039d3500b5d802f51f05e9eea53891d7646f2107be98","first_seen":"2025-01-28T05:59:32.012212Z","last_seen":"2026-06-09T02:18:39.003007Z","times_seen":1086,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axaxaxaxaxxaaxxxaxa.xyz/api/crypto/settings/?chain=1","fqdn":"axaxaxaxaxxaaxxxaxa.xyz","domain":"axaxaxaxaxxaaxxxaxa.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axaxaxaxaxxaaxxxaxa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 10:24:25 GMT","end":"Sat, 28 Mar 2026 11:23:10 GMT"},"fingerprint":{"sha1":"02:DA:06:B4:21:C0:AD:24:DA:00:D3:24:60:42:41:62:EE:16:40:B4","sha256":"D5:09:1D:8D:95:6C:80:81:AE:76:AA:15:F1:A7:58:68:97:1D:78:8D:22:AE:7B:7E:DA:03:C0:9A:B7:EA:1B:E4"}}},"request":{"raw":"GET /api/crypto/settings/?chain=1 HTTP/1.1\r\nHost: axaxaxaxaxxaaxxxaxa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptosafeverify.com/\r\nContent-Type: application/json\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept, origin\r\nallow: GET, HEAD, OPTIONS\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OGgyadMFG69cSZUt8l%2FzxEzYfxfcvfoV4raN5D8s5dUe2tnkFSkux7O3XGZTlRRmjTj9u%2BzldOhCfC4p2tQmOus05Q0nljnyv2v4fzm1P1QaT9XUDb7j\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3fdad00d40783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5ba56341d3cbb10029230a8f8be1957d","sha1":"e66b8606d1084ef4f834629e4a7a4c172030ccde","sha256":"5d140d7f5d80e9884ea10fc68916777b370b715a9e51ab56ba599f91708fbe64","sha512":"77038566b47ddabae750af38ec6ef182372ce87ce5c6a59dc7fbfbcd367dbd2549dc26648e183fb3c736490edc64e9686cd44b61bce92525915f947670b806d1","ssdeep":"","tlshash":"4d90220b00cc22882ae020002808300202c80bf0882faa020208f30c00b00200202000","first_seen":"2026-01-26T11:42:12.072696Z","last_seen":"2026-02-04T19:31:30.597203Z","times_seen":6,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptosafeverify.com/assets/index-BAKR55uT.js","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"172.67.201.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:15.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptosafeverify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 17:06:31 GMT","end":"Fri, 24 Apr 2026 18:03:01 GMT"},"fingerprint":{"sha1":"4F:88:9C:D2:5C:1E:10:4D:AC:D4:00:1D:76:51:93:17:0A:80:49:CE","sha256":"20:AB:DB:70:C7:A1:31:F1:5A:65:8F:17:9A:0F:8F:24:63:FA:05:7E:1E:F5:B1:E8:08:2A:2C:9F:1D:27:D9:38"}}},"request":{"raw":"GET /assets/index-BAKR55uT.js HTTP/1.1\r\nHost: cryptosafeverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 12:01:15 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sun, 25 Jan 2026 16:00:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 156\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69763e2d-3bd7a7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IY0fAcNRoC0g%2BfpAscFlC%2BA5S4%2BX%2BhL4eii2c5DmyPdFNB5GPhSgsJb17SkYJcXYUoTl6JIN133i%2FqcJiq7Wzr0YCKQOYOPIlY4ZKxmAwCLIjg%3D%3D\"}]}\r\ncf-ray: 9c3fdac62c8bb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3921831,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39441)","md5":"384460e9d557f6e57af502a954a2f4d7","sha1":"c4b926026d86e8085a6aa5a27072881589165753","sha256":"0ec94c5d129c8d15945dc8a9dc20ad09409d7d3d254eda9c162c41e1066c1d92","sha512":"4a90c2fff0a7764f23c40958b51aac09c1070257cd8991ed68ed6bc39f2464ee70876913918ea4b05bbb3b4ec343c73cc9fb37190d63fb01ac52c3e2d8516e5f","ssdeep":"12288:fLo5nydgaTQgoXa/RWbJInRoZW+xi+HwYLB/RYE7ZoC3QkEGfFnDLCqrcvS2vxtD:D7ea98bJIRoZW+T4CB8TrL","tlshash":"7f25c75063d0a44813878f7a772bb4e6f05e196e7888484fe201fd782aa9717fbf5931","first_seen":"2026-01-26T11:59:06.779569Z","last_seen":"2026-01-26T12:01:41.471374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-01-26","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"cryptosafeverify.com/assets/index-BAKR55uT.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:30 GMT","end":"Mon, 23 Mar 2026 19:52:29 GMT"},"fingerprint":{"sha1":"86:D6:34:52:EB:68:D5:4F:25:44:58:CF:88:1B:C8:55:D6:9A:23:A7","sha256":"4D:67:BD:08:81:96:64:4A:7A:02:51:95:46:0E:60:D7:FA:5D:84:3F:53:29:E5:C8:84:87:AC:12:B6:97:C2:8E"}}},"request":{"raw":"GET /css2?family=Manrope:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 26 Jan 2026 12:01:16 GMT\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10720,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da3301dfd91fdc1be5ab43c54f09b29d","sha1":"9450ee235452602effc7b92c803fbd441e3d6686","sha256":"f67253a45f3086760a0c4c204f5dad9636a0c0e0984ab5584b8b96b2c1aeeccb","sha512":"f4767030466d6b0f5f49fe20b39fc0124072c3d573da3e764ad4241473996ddcf818e4d565a55bdde791c6ebb73b4f124cbcd3e45b31cf3c56bd44edb6df11fd","ssdeep":"192:zJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668hs:9wU+ME02EQJ","tlshash":"8a22a990002be804eb470cd677ce7e39ad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-06T21:49:31.167078Z","last_seen":"2026-06-09T01:05:01.017564Z","times_seen":4336,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonapi.io/v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions","fqdn":"tonapi.io","domain":"tonapi.io","tld":"io"},"ip":{"addr":"104.18.34.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonapi.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 05:36:27 GMT","end":"Sun, 05 Apr 2026 06:36:24 GMT"},"fingerprint":{"sha1":"BF:94:AB:BF:4C:57:A6:86:A3:17:02:50:10:66:50:F3:04:3A:28:22","sha256":"8F:41:B3:1E:9C:E8:F6:2A:3E:5C:CE:E1:B2:A8:FA:33:06:11:B5:1A:62:54:A3:2B:41:D1:5E:4D:57:8C:6D:2E"}}},"request":{"raw":"GET /v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions HTTP/1.1\r\nHost: tonapi.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptosafeverify.com/\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9c3fdaccdd938deb-OSL\r\naccess-control-allow-origin: https://cryptosafeverify.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Tonapi-Client\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c63691e67327b38ec496c54c52b1111c","sha1":"989210188d64a5ccc0c9f53d023a86a35e760281","sha256":"dee0c0879b367fb6afe1f79925ee13844db024b2d496c2c424e9c8c45db1853e","sha512":"0ff6fd2710b96cbf8a5217194c415f999bde85f10ca31dfc32f43a0d1d2a3b6fd065f8c6e88c09e2350f6d0119c7cb9df287b1ccbd5b3f884957cbe23b37fcd7","ssdeep":"192:eRv93R9P9mSOZqp7kP4R9oR5u21ePCvCGRD/7B6yRchs2iVApl4OY8N2xr/c94Vd:49vp7kPork7BuGAruF/c90kK9L","tlshash":"9c72fa20a798b5f7dbbf9501159f3e5721bc30bbd8c37c959bddc2901fa31aaa812105","first_seen":"2025-11-04T02:58:42.357951Z","last_seen":"2026-02-18T17:50:10.064396Z","times_seen":11,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":31,"dns":0,"connect":1,"send":0,"wait":158,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tonapi.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/7c2cee4e-a5bd-4ebd-277d-f496c69fa000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/7c2cee4e-a5bd-4ebd-277d-f496c69fa000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1508\r\ncf-ray: 9c3fdacf1ce60b41-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 156\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cf9e6rjyr-bBkWoPuSw_vsUwKifmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=843+2 c=0+1 v=2025.9.5 l=1508 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e8857769972441243d690548cf3e485","sha1":"38328c4d250c38d98763e7b89cfeca1b3b7bb2c2","sha256":"7e7be8edd769cd0ee13580176c51f034867846e592e3434e4b0f30f2cc8b709b","sha512":"121207c756badb363bc86cc8c09ab16965dd26c89d151bc25bdaf3cc106621ab5eed1ef14618394595d80309e2b322e853b20a0f55baada496a60aade841a670","ssdeep":"","tlshash":"7231b59e09441c24511aaaff2ccaa4ab32b5249268afd635c30b5ae6a65454d383f1c8","first_seen":"2025-10-02T02:13:48.566179Z","last_seen":"2026-06-09T00:33:18.651155Z","times_seen":505,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonapi.io/v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions","fqdn":"tonapi.io","domain":"tonapi.io","tld":"io"},"ip":{"addr":"104.18.34.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonapi.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 05:36:27 GMT","end":"Sun, 05 Apr 2026 06:36:24 GMT"},"fingerprint":{"sha1":"BF:94:AB:BF:4C:57:A6:86:A3:17:02:50:10:66:50:F3:04:3A:28:22","sha256":"8F:41:B3:1E:9C:E8:F6:2A:3E:5C:CE:E1:B2:A8:FA:33:06:11:B5:1A:62:54:A3:2B:41:D1:5E:4D:57:8C:6D:2E"}}},"request":{"raw":"GET /v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions HTTP/1.1\r\nHost: tonapi.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptosafeverify.com/\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9c3fdaccddaa8deb-OSL\r\naccess-control-allow-origin: https://cryptosafeverify.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Tonapi-Client\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c63691e67327b38ec496c54c52b1111c","sha1":"989210188d64a5ccc0c9f53d023a86a35e760281","sha256":"dee0c0879b367fb6afe1f79925ee13844db024b2d496c2c424e9c8c45db1853e","sha512":"0ff6fd2710b96cbf8a5217194c415f999bde85f10ca31dfc32f43a0d1d2a3b6fd065f8c6e88c09e2350f6d0119c7cb9df287b1ccbd5b3f884957cbe23b37fcd7","ssdeep":"192:eRv93R9P9mSOZqp7kP4R9oR5u21ePCvCGRD/7B6yRchs2iVApl4OY8N2xr/c94Vd:49vp7kPork7BuGAruF/c90kK9L","tlshash":"9c72fa20a798b5f7dbbf9501159f3e5721bc30bbd8c37c959bddc2901fa31aaa812105","first_seen":"2025-11-04T02:58:42.357951Z","last_seen":"2026-02-18T17:50:10.064396Z","times_seen":11,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":23,"dns":2,"connect":1,"send":0,"wait":214,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"tonapi.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: 9c3fdacf0ce00b41-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 156\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-06-06T21:30:11.571202Z","times_seen":1649,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/2e181ba3-bf6f-4599-5349-f7409bc62100?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 08:35:13 GMT","end":"Sun, 08 Mar 2026 09:35:11 GMT"},"fingerprint":{"sha1":"9A:4E:F9:52:35:79:70:FD:85:E6:2D:13:85:19:6A:C7:D8:BA:02:CB","sha256":"2E:13:A5:10:27:76:B3:13:95:EC:3A:92:D4:36:FC:06:76:06:42:8C:3C:FF:F7:34:3B:92:46:11:09:BB:64:63"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/2e181ba3-bf6f-4599-5349-f7409bc62100?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: image/webp\r\ncontent-length: 520\r\ncf-ray: 9c3fdacf1cee0b41-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 156\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfx8sZ_gQjxblo6S9ktOMr7R0BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept, Accept-Encoding\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=1519+3 c=1+2 v=2025.2.4 l=520 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"22c97b9c571498a31f52c5b262ba0a8f","sha1":"b28e5ef85b5bfed3fe034611dc208590c6af7d7b","sha256":"aba7699c972ec5e808625798c34ecb0e8017768cfdc5852bd13e94b7664c253c","sha512":"8ffec6e75b574d13b5a3a70ffd27763bf26f024ebb7ed5738015abdf7176f7aebe37442bb8e82177969c72b622e2bbc4e5a9593a85fa59689d0e02ed301d5ed4","ssdeep":"","tlshash":"a1f0059de63d010eda77072c6b53951318d62a65b027924c345d4c02528dfecbbecbd3","first_seen":"2025-12-31T16:29:42.661268Z","last_seen":"2026-05-25T18:44:03.025745Z","times_seen":15,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axaxaxaxaxxaaxxxaxa.xyz/api/users/domains/visits/?","fqdn":"axaxaxaxaxxaaxxxaxa.xyz","domain":"axaxaxaxaxxaaxxxaxa.xyz","tld":"xyz"},"ip":{"addr":"172.67.207.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axaxaxaxaxxaaxxxaxa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 10:24:25 GMT","end":"Sat, 28 Mar 2026 11:23:10 GMT"},"fingerprint":{"sha1":"02:DA:06:B4:21:C0:AD:24:DA:00:D3:24:60:42:41:62:EE:16:40:B4","sha256":"D5:09:1D:8D:95:6C:80:81:AE:76:AA:15:F1:A7:58:68:97:1D:78:8D:22:AE:7B:7E:DA:03:C0:9A:B7:EA:1B:E4"}}},"request":{"raw":"OPTIONS /api/users/domains/visits/? HTTP/1.1\r\nHost: axaxaxaxaxxaaxxxaxa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cryptosafeverify.com/\r\nOrigin: https://cryptosafeverify.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with, ngrok-skip-browser-warning, referer, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, CF-Visitor, CF-IPCountry, X-Forwarded-Proto, CF-Connecting-IP, X-Forwarded-For, CF-RAY, Strict-Transport-Security\r\naccess-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sxJRyDUlYQ0yftdNVAyu%2BHntoNTnRoTZ%2B%2Bub2UB%2FPde90Wy%2BocPVMPspvEsYNDlx6BVQMihToPKzQpFfTp03sewSveOdhk3wlM9Z0lMFIP%2B5G2tZGEJe\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c3fdacf5b32783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-09T02:17:27.838118Z","times_seen":16256306,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptosafeverify.com/favicon.ico","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"172.67.201.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptosafeverify.com/","date":"2026-01-26T12:01:16.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptosafeverify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 17:06:31 GMT","end":"Fri, 24 Apr 2026 18:03:01 GMT"},"fingerprint":{"sha1":"4F:88:9C:D2:5C:1E:10:4D:AC:D4:00:1D:76:51:93:17:0A:80:49:CE","sha256":"20:AB:DB:70:C7:A1:31:F1:5A:65:8F:17:9A:0F:8F:24:63:FA:05:7E:1E:F5:B1:E8:08:2A:2C:9F:1D:27:D9:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cryptosafeverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptosafeverify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 12:01:16 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 25 Jan 2026 16:04:48 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4998\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ni3gABW%2BsrbH1VAK95JPOAm86pDzEqQ4dqeSecLfFYaRPqYAgvmiCwIXN%2Brk3GLeRjXAiBUnJSF1Zi5Hcl48aNZsqbaapfPH%2BEnO3SGq2xBlRw%3D%3D\"}]}\r\ncf-ray: 9c3fdad0cd66b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3210,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (538), with CRLF line terminators","md5":"eed6f0bf46657a20057acdb586b43ee8","sha1":"09b96899e2fe9f9c7fb6e6f15ed073667dabe5c1","sha256":"4e38e664fbfd7939b8c1df868f4b8a97d634269bcc26e9715c99b27b9af09e6a","sha512":"ed5e5daadc82b53b73180af8d77bd1f22c984bee4109bc4966ecb0a6bc40af528d855b2c980d24c6b38cfd1830bb525c8650a4e40ef339bb6d338aab065eceba","ssdeep":"","tlshash":"846174215880251ae137e1b82f71ab06dbaa8043c703c51e3aed72977ff6914c6d3e98","first_seen":"2026-01-26T11:59:06.777687Z","last_seen":"2026-01-26T12:01:41.474571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptosafeverify.com/","fqdn":"cryptosafeverify.com","domain":"cryptosafeverify.com","tld":"com"},"ip":{"addr":"172.67.201.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T12:01:14.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptosafeverify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 17:06:31 GMT","end":"Fri, 24 Apr 2026 18:03:01 GMT"},"fingerprint":{"sha1":"4F:88:9C:D2:5C:1E:10:4D:AC:D4:00:1D:76:51:93:17:0A:80:49:CE","sha256":"20:AB:DB:70:C7:A1:31:F1:5A:65:8F:17:9A:0F:8F:24:63:FA:05:7E:1E:F5:B1:E8:08:2A:2C:9F:1D:27:D9:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptosafeverify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 12:01:15 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 16:04:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=izHBWrwbDTP6LSt5azULrhT6Le65JMqoDLdXagwFSJWhamBzQhLqxggyNN9lb8sAM5G26wswBCVFkdmTmJ3x%2Bk6Ud23Kt8mC0f%2BFf645Wqglcg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c3fdac48e7956c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}],"data":{"size":3210,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (538), with CRLF line terminators","md5":"eed6f0bf46657a20057acdb586b43ee8","sha1":"09b96899e2fe9f9c7fb6e6f15ed073667dabe5c1","sha256":"4e38e664fbfd7939b8c1df868f4b8a97d634269bcc26e9715c99b27b9af09e6a","sha512":"ed5e5daadc82b53b73180af8d77bd1f22c984bee4109bc4966ecb0a6bc40af528d855b2c980d24c6b38cfd1830bb525c8650a4e40ef339bb6d338aab065eceba","ssdeep":"","tlshash":"846174215880251ae137e1b82f71ab06dbaa8043c703c51e3aed72977ff6914c6d3e98","first_seen":"2026-01-26T11:59:06.777687Z","last_seen":"2026-01-26T12:01:41.474571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":90,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}