{"report_id":"cbc01670-fd90-4bba-8675-ce33ea0de5f2","version":6,"status":"done","tags":[],"date":"2026-05-11T18:20:35Z","url":{"schema":"http","addr":"app.across.to.en.v4.autos","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"title":"Across Protocol – Transfer Assets Between Layer 2s and Mainnet","dom":{"size":247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"3d6440a417cd2495bebd9a61e98400f3","sha1":"c86e62882a76d3e577cd82a3db9e35930e296dc2","sha256":"878e41d7b8ab21135bea244b15546e7ac47bd8cf0e5f581fdb91e34602468a3e","sha512":"56e0126915a0ecc5dc32ab9b9066cc2d3b27fc5bcb4aeb7cf590a386c2b2b63b1e1062059fc0c263a61ca8cdfba03dead7d97904c5393956604da72227637708","ssdeep":"","tlshash":"08d09712c805892fac0246a0cb63f380c481872dec31ac30ecf17a30e28d6248a22189","dom_hash":"domhash6238018188ee0df98fb91538b75d7a75","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"app.across.to.en.v4.autos","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":0,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-15T18:20:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.dynamicauth.com","ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-24","domain_rank":1824779,"first_seen":"2023-07-05T19:07:58Z","last_seen":"2026-05-09T15:20:37.465065Z","alert_count":0,"request_count":6,"received_data":12662,"sent_data":4282,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"spongebob.varekuta.top","ip":{"addr":"104.21.21.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-01","domain_rank":0,"first_seen":"2025-12-24T06:53:19.250994Z","last_seen":"2026-05-02T12:47:15.033457Z","alert_count":0,"request_count":2,"received_data":1771,"sent_data":1080,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iconic.dynamic-static-assets.com","ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":1804516,"first_seen":"2023-03-28T18:24:46Z","last_seen":"2026-05-05T03:42:15.322269Z","alert_count":0,"request_count":1,"received_data":2162253,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"spngbeb.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-01-19T23:55:31.832342Z","last_seen":"2026-05-02T12:47:14.809777Z","alert_count":0,"request_count":1,"received_data":7381953,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"dynamic-static-assets.com","ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":62467,"first_seen":"2023-06-27T20:50:44Z","last_seen":"2026-05-09T15:20:36.419964Z","alert_count":0,"request_count":2,"received_data":778932,"sent_data":979,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-10T22:41:13.190184Z","alert_count":0,"request_count":1,"received_data":14924,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"metamask-sdk.api.cx.metamask.io","ip":{"addr":"104.18.31.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-02","domain_rank":907454,"first_seen":"2024-11-22T07:39:53Z","last_seen":"2026-04-28T11:27:47.096791Z","alert_count":0,"request_count":1,"received_data":1140,"sent_data":616,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"app.across.to.en.v4.autos","ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-05-11","domain_rank":0,"first_seen":"2026-05-11T18:20:43.544453Z","last_seen":"2026-05-11T18:20:43.544453Z","alert_count":12,"request_count":12,"received_data":220105,"sent_data":5879,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"preview.testnet.across.to","ip":{"addr":"104.26.2.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-02T12:47:14.269189Z","last_seen":"2026-05-02T12:47:14.269189Z","alert_count":0,"request_count":1,"received_data":351131,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-05-11T18:23:33.646181Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a04c5d31083c64a2e4377618af60947","sha1":"34c7abef378cb001d2f84423b0071562e6457d03","sha256":"243e5db894e0578e39548c927ae0ceb6dc0cc4797b6a762a0edc0fb445c93eca","sha512":"b89e2c6a5741309128c99ed3527a1e922bc2d989beaecc6e662f4cc1fc550449e7c54adfb0bfc5bf3cf93680ab7c7745798f2b661827f91a4f7ca31e33fe2be5","ssdeep":"","tlshash":"ccd0a7182030716914ce282d0c4f08ca7f328411e20849c9d5dc84547ef1f6401d0848","size":216,"data":"","first_seen":"2023-11-18T15:49:03Z","last_seen":"2026-05-11T18:23:33.620847Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-05-12T11:12:04.38059Z","times_seen":3098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spngbeb.b-cdn.net/assets/index.js","fqdn":"spngbeb.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"34cb9fa78cf8e4ec2b0bb0855f34117c","sha1":"ae596ff0d224c9f70f58a4beb74f943b0aef5f3c","sha256":"3e68cc4a96a12ac2454481550734b4d1e7ff3f053c79bfc86c868284662c8fb7","sha512":"6ba216715d9620178aff3779efa2b783450aaf13a899535baa8c7f0abc06bbd04f182da75514f77b26e06af3d63cffbf17a9d7a79d19b8bfa0add8d28a943a1e","ssdeep":"24576:PnnR1A4VCfAJ00qByDTIfxBY0Q6zh31z/3qKiLjyl0bjqVA7uYmDE6QkQ+QuWkQ6:d5Kjj9FzLDZ+6tj5","tlshash":"87769f7e49fa21172b0720f26e04d52a74c99ea8b4d201267ee02f46504dfbdeb74f67","size":7380994,"data":"","first_seen":"2026-05-11T18:20:52.767626Z","last_seen":"2026-05-11T18:23:33.640077Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-05-11T18:23:33.642131Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-05-11T18:23:33.655397Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-12T12:02:36.990823Z","times_seen":307036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-05-11T18:23:33.62409Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-05-11T18:23:33.623068Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c67fe508d0a100174b807fba9c73d514","sha1":"2a9f02dcf3e7adc49ba3b0c03e7ea76dee1b3db3","sha256":"45a0d8a5c1f1ac00c56b30a92aa74e75177dd21aaad3623fc8c168e1075b4e5e","sha512":"450c5122a96bc051b7e846bc6512c3107236b72f8d29eaf9799c1e414b77da1c9a4aa84e8c63d7895a2abd54ef423fab7511d5ab16b12ee8ce97ef3dba3394c8","ssdeep":"","tlshash":"b7319e2f893c75152c1622319d653de08f8519a6397970f22db12064964fc3c37abded","size":1828,"data":"","first_seen":"2025-11-19T22:32:11.255975Z","last_seen":"2026-05-11T18:23:33.65462Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-05-11T18:23:33.651143Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-05-11T18:23:33.643309Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-05-11T18:23:33.644885Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-05-11T18:23:33.621915Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-05-11T18:23:33.648632Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/e1026fa3-fed6-4bdd-9cd3-f4622d85f2c1","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"46528ffbe0e05754c21fca4734a5cd35","sha1":"724c3aecbb2da216a0dc4bfdb26b82ef91336916","sha256":"7d2b5c1633723a9179cb675b5a21a74f8ccdb5e1123bbec6e1d535ac98847901","sha512":"7eda085dcc18d83c9bd91a7bf40d2b0f67b803a1d221a08f04910d996bb6e9c74183e12241c6c0ec16ead1100477fc31ac96074b1868d7a5d35a2c405bf56949","ssdeep":"98304:/mBofUzsoNydUmvFbB2D+ndPydLNVF3T8:/mifUJNydUmvFbwD+ndPydLNVF3T8","tlshash":"70468ed4b395b174479346e4943b1101f2386c44b80d80a8f6bccdeb6fb5989a67bf3a","size":5535435,"data":"","first_seen":"2026-05-11T18:20:52.786844Z","last_seen":"2026-05-11T18:23:33.653614Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-05-12T12:02:36.990823Z","times_seen":307036,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-05-11T18:23:33.655973Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-05-11T18:23:33.643309Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-05-11T18:23:33.649649Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-05-11T18:23:33.625324Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"0d4fe79d0bc7a5ce6e2d288caa5e81ca","sha1":"c9520c0a72709e01c40438bf4afc230291b49549","sha256":"cd204fa04d7b722e832de0928e59c9bd9808fe7d0d4d14037c49c759e4da2271","sha512":"131bb0897d33fb81f03b9311d4e76c265a59bdd3b752d5b03ea65cccb543e0e4e2f35d2a90bb91fe84d2ef415d6aaf45e02ebcc76d8c67b053af887b62b3f305","ssdeep":"192:FZThXn6JgvirA9adYm2Mlrvxcvy50FSivCf0DrXEowov30ae2XFFPJADVOTl:FHeVWRK1GfRGW4bGbiq","tlshash":"bb323a0f1ab46502296364345e9d28d4ad208db7332968e53ead21545f8bd383bf9ff2","size":11840,"data":"","first_seen":"2025-08-19T02:44:28.508937Z","last_seen":"2026-05-11T18:23:33.619772Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/Barlow-SemiBold.woff2","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /Barlow-SemiBold.woff2 HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38400\r\nlast-modified: Sun, 15 Mar 2026 16:46:11 GMT\r\netag: \"69b6e253-9600\"\r\nexpires: Tue, 11 May 2027 18:20:12 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38400, version 1.0","md5":"2006a22e6f02c20ae1c78f99ef46c95c","sha1":"1d0e5ceb5e0e9b9d00afadd5ae2c1d8359bd807c","sha256":"a258cde5a53ad91fc29875484d9d7d2e56e7664d329583d8f9860f561a7f516d","sha512":"838f11cfa98c2b306127147580c12a56971fa1ac70f1c38fac4945d30d2ab104cce26044ee7b56b06e437f14f4f5bf7d5c5a3a643949da944ceb896e3a38acb6","ssdeep":"768:rdf/Z94htJWQJqvp5Zu7Iour/uhye1gl+RH4YnYldE2toq+1:pHZ94hf/Jq1u6/uhQ+RHLncG2toqi","tlshash":"2903f1bfb2d5c915e04fbdbcf81a6f7c49069228a706af8a1b341dcc56015d858eaed0","first_seen":"2023-07-06T09:52:02Z","last_seen":"2026-05-12T07:51:11.311823Z","times_seen":217,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:17.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"OPTIONS /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://app.across.to.en.v4.autos/\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://app.across.to.en.v4.autos\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=elAPKVxNo8I_m4NEy7zZB4PfKucMvKqmEKNtsK6zVCo-1778523617.4582043-1.0.1.1-LAgu_m2UkWYwTltkCq852.EBM0z.aHBvqhQqIo6jnQJCyVd7zc4my7WNMPAKFOfaoAob0YCSLxZu4qduOLuyGn3NqTfl.wYi5S3Gmunqd2pUkx2QMKUohDQFYhTyPRjv; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Mon, 11 May 2026 18:50:17 GMT\r\nserver: cloudflare\r\ncf-ray: 9fa3326119a835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":55,"dns":34,"connect":1,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spongebob.varekuta.top/api/config","fqdn":"spongebob.varekuta.top","domain":"varekuta.top","tld":"top"},"ip":{"addr":"104.21.21.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:17.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varekuta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 03:54:41 GMT","end":"Sat, 25 Jul 2026 04:51:05 GMT"},"fingerprint":{"sha1":"30:28:15:59:22:50:11:F7:AD:6C:7C:6A:6C:82:F8:61:CB:7E:6C:94","sha256":"86:E0:FB:A2:91:6F:72:93:4E:C9:ED:C0:82:1B:C3:CF:CF:ED:45:D1:00:23:56:6B:A6:6D:B8:C4:15:C3:E5:53"}}},"request":{"raw":"OPTIONS /api/config HTTP/1.1\r\nHost: spongebob.varekuta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://app.across.to.en.v4.autos/\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type,Authorization\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZtxjpF1H96iX%2Fungr60Eg4u%2Fk848py1FAjWBssUwYpxhc7XJ%2FLl5XVTjyIhtbp%2BdoXJAwgS%2F%2FD2r6PQ7GmKXtWMzL%2BVEQ38hrO2T604D4lvnC1uxtscjTBrK7tmgshUsEenXb9cvbZ3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fa332621ba756c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":47,"dns":18,"connect":1,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/nonce","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:17.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"OPTIONS /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/nonce HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://app.across.to.en.v4.autos/\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://app.across.to.en.v4.autos\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=AtBut4L04hQsx2EaQa5nrdvlKNSnIwwVk.Daot.ljrU-1778523617.5726206-1.0.1.1-00dgKqbFyGi9QBxFGiPdh6BvZ4TOeyvDJixTrtgBOsiuGtiJBzQNAvr8iTO3RgsE4vlbIhCKUIgNmM0yA6KU3W.GKsJb1HsLWIfc4K0mayf4K0K8rdx0PDReE8bAhcqz; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Mon, 11 May 2026 18:50:17 GMT\r\nserver: cloudflare\r\ncf-ray: 9fa33261dbe035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/Barlow-Medium.woff2","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /Barlow-Medium.woff2 HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40564\r\nlast-modified: Sun, 15 Mar 2026 16:46:14 GMT\r\netag: \"69b6e256-9e74\"\r\nexpires: Tue, 11 May 2027 18:20:12 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40564, version 1.0","md5":"25662b56578add1e67ae0bba3be27c27","sha1":"5d7a2cf4be9c19b72b66cc84d9163ae833a94de5","sha256":"40c00d311fa3fde13e4cff43e436a923c1dbcf975462922098b132331b4f42df","sha512":"04fdb181dac399f620d5a17ad946c8bd5b156c7dd7ddd0cc0783dac4ea4e8c8f939cdc9f59b95c721c5f1efcc77833f5b3951b7db3afae163c27a4ebee3f201d","ssdeep":"768:TU7muFVRBd05N727kv9Z9tztgQpRk2rXTzCECKsZK7NMkpi97x/3N0IHEf6BN:q1FV7Ch/9tzCj2LJMkC13N0byBN","tlshash":"1b03e188479866f0611c8f31d0f2273406e1c1b0fe3ce6bb985d12f686da71bbd5e098","first_seen":"2023-05-11T20:02:22Z","last_seen":"2026-05-11T18:23:33.599211Z","times_seen":81,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/Barlow-Light.woff2","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /Barlow-Light.woff2 HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36816\r\nlast-modified: Sun, 15 Mar 2026 16:46:12 GMT\r\netag: \"69b6e254-8fd0\"\r\nexpires: Tue, 11 May 2027 18:20:12 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36816, version 1.0","md5":"6db853756aa18d4aa6a4a839246c6098","sha1":"cce9a3ae77fbc276e528f3bb0b298a0fc50af5e0","sha256":"267da4be97ec3941d64b1859f071de01aecddbc67c429cb346201758e73aacd8","sha512":"e666251f3644ea884a2dd5ad74e2b6a8c0a9fea591c13b547da25a8d061e4e32156eebb1f190dbd5501a698d89c9b2933c977e1ce662fb2abbb33298e3348c77","ssdeep":"768:gAUq8rt8FFpiC6ecihGb6TWH0rLvpoZ/kKR6/v3tGylyJyN:gBqBcnLi9iUxZKAdGylyJyN","tlshash":"5df2f18845a91cbc9f70fe12b4e957caf474b28b59c54384b033beb254ea090038772b","first_seen":"2025-06-09T20:45:29.788294Z","last_seen":"2026-05-11T18:23:33.615033Z","times_seen":33,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:17.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 11 May 2026 12:51:50 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Mon, 11 May 2026 18:30:17 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 19706\r\nx-static-request-id: RB4W72V9SFFT87VG\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"6f9da2559de1cb4b6920bb5083443d26\"\r\ncontent-encoding: br\r\ncf-ray: 9fa3325fcefd783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2161659,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34c27e8480ac0a703049366975925116","sha1":"ad565e549815eb4b16e19d0d99608ec14656be15","sha256":"43a596818a7d65db0c43d8db1218035ce4989194642350a07c51afa0bb29de72","sha512":"3e5b2c14c6f22ca853104e908dbf7e1fadfd9fbe50686ed7ac3fa209b6de1da9464de06fd142291e3d88929208ca99d18bf1cb69fbc7d6f023ce911367921673","ssdeep":"12288:8HamqgPQRaujhzJJuDeXNqY8GS8my92nxZiFsO2OsoF5fAF09:0P3ujhzJJuDeXNqY48my9SxZiiOWCf79","tlshash":"342508ba5c1c6b4e766a4d3ddb26307d2e4b70eeb24481dfa9ce72ecc153451e921ca0","first_seen":"2026-05-11T18:20:52.727664Z","last_seen":"2026-05-11T18:23:33.584337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/nonce","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:17.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"GET /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/nonce HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.across.to.en.v4.autos/\r\nContent-Type: application/json\r\nx-dyn-request-id: Xn1Kb8S47BhQju4-oBaDo4kkg350OBX8nvBEKwtd1yYojBXZhb\r\nx-dyn-version: WalletKit/4.47.3\r\nx-dyn-api-version: API/0.0.823\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 44\r\nx-frame-options: DENY\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://app.across.to.en.v4.autos\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"2c-+udjhPeHxa2tddYfH7WFeCPJE7k\"\r\nset-cookie: __cf_bm=OfBciKNHxUsLCFNX6xkbj9yC_tWs_6R534y5Kbc7a7w-1778523617.7256603-1.0.1.1-g_Dt4rmcVy8K1Wcvz5IWbm8MvfQk2GcBiVhCC0Vt4EMtycAJJEeCnVtI46NAGigrMJ9u6nf7q8K4afGMXXhN80rh3DBYTiQ0Zjm3kJ0HS_1eSCyFLXHDQm8f31Bl1cY0; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Mon, 11 May 2026 18:50:17 GMT\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9fa33262ced435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c6ec421375b24a43e6a31298daa0ddca","sha1":"fae76384f787c5adad75d61f1fb5857823c913b9","sha256":"452e5b9d3aebe237dd1b52081f6b401013c768e119cc2f5a538d8e00a7f5789c","sha512":"42eb1f15f6d964012cfa806fc55e6fc623e276fdc0e28fa45a37851d114d4fe713284a9d9d26f616e331849d9457b463367f1055182533373c8f96a11d0af766","ssdeep":"","tlshash":"a690044155547dc4df5c43011c511f4151044511c0555fd43035f130535c4d03055cd0","first_seen":"2026-05-11T18:20:52.738625Z","last_seen":"2026-05-11T18:20:52.738625Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spngbeb.b-cdn.net/assets/index.js","fqdn":"spngbeb.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index.js HTTP/1.1\r\nHost: spngbeb.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 18:20:15 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5007570\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"69ff8405-70a002\"\r\nlast-modified: Sat, 09 May 2026 18:59:17 GMT\r\ncdn-storageserver: DE-634\r\ncdn-fileserver: 1151\r\ncdn-proxyver: 1.52\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 05/11/2026 18:20:12\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 61258e4a6c6bdc6c2d7046b339bdcc31\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7380994,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"820325e9c58ea4628aaecce1e06fd137","sha1":"5ddaa1ac991cc84d120d1396a580fac3f9c27402","sha256":"3b58889e3e084095c707922c1e9cd99f0b56a2f58d2d148cf3e4c9781893c1c7","sha512":"4870bfc3ee01e65f7a8f5e0f02d280682ccfb455fb4b5764afd64126262051c1280e10a6e045d536329967eea38c5e5ccc5f1cc0b132f41470c9244d7c5b9913","ssdeep":"12288:WVn2oKnlv9nGtqq6HA4V34tOHMFzB8QMYAeM00qgoyINpvmJT/enzNzrfl7BYV5D:PnnR1A4VCfAJ00qByDTIfxBY0u","tlshash":"a0256c3a0eab351b374720e16f49d55b34c99da868d202657ed11f46a00cbbceab4f73","first_seen":"2026-05-11T18:20:52.741303Z","last_seen":"2026-05-11T18:23:33.571098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3492,"timings":{"blocked":121,"dns":57,"connect":1,"send":0,"wait":3242,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/cross-13aea53d.svg","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /cross-13aea53d.svg HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Mar 2026 16:46:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e255-2b0\"\r\nexpires: Tue, 11 May 2027 18:20:12 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":688,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d875b0d7857799e7cd38a0a9f594722","sha1":"2c3c8e2fa19f1fd0b7854f6a0e895d2b7b61d17c","sha256":"13aea53de42a1b92ddeb2b4a80d5e9ae6a2bfd97b798c605446cbe631393be30","sha512":"6df39f975346c37ebced0577490ae8cb43324f5d2b8f804a7f0eefaa1d8732793dd59071c59d32d36af0fba408bd4c962325e8db0d90d168344f9a435671e771","ssdeep":"","tlshash":"4a017bffe24afe86920457689e3f949520f7a5ff4407059ac08235b1fb943b2121d5c1","first_seen":"2025-07-12T22:37:05.028668Z","last_seen":"2026-05-11T18:23:33.61151Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/index_2.html","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 15 Mar 2026 16:46:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e253-12c\"\r\nexpires: Sat, 07 Nov 2026 18:20:12 GMT\r\ncache-control: max-age=15552000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":300,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"b3cb4073d87581163693d72c010dc5f9","sha1":"9a6dc06840199066c3165be13cfed45601cc13a6","sha256":"daaf5c2b889bf52c805ca06168ce90bbc874c66aa5522d7a481d52f757cf39bb","sha512":"d38518545d89e93d0d8d9308b1fb5a331f19eb1732a512a233cd5429515f16b0af503e55e3f9f5a580ce2dc1903b47a002904dbd986be8711ccc27ace6cac6f0","ssdeep":"","tlshash":"84e072ebc22200002a40ab404ac2b4100c8abb5eb5018f69ae6370b8a8ae2b1d023344","first_seen":"2026-05-02T12:47:20.348575Z","last_seen":"2026-05-11T18:23:33.575176Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/Barlow-Regular.woff2","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /Barlow-Regular.woff2 HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14036\r\nlast-modified: Sun, 15 Mar 2026 16:46:12 GMT\r\netag: \"69b6e254-36d4\"\r\nexpires: Tue, 11 May 2027 18:20:12 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14036,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14036, version 1.0","md5":"d003a09026cb3ac99be896ec83df4bcc","sha1":"e5da7bb2e5012469a0f43e8d87f046264432ff9d","sha256":"15b7ba238dc0b8e0c6ea63409a42d8b6fa68475cbc3a8d80388d6bae7beb833d","sha512":"0901ee607b5a08ed0ea04116c9b83f273790769c9c8404d2a7b8138de87b52232ba9f6c70f6a23a9198c2ee8c735b885e476c5de8694ffcddce1f20666e3db1b","ssdeep":"384:D2y414GSk33gqy4ToR7gBf9DaXrgnRuE8f5cu6:DJ414MHr9ToxYJ8rgnRu5BB6","tlshash":"7c52bfa477c9f073f17235b9207297efea4df205a286827d4101d28b66340e87d955bf","first_seen":"2023-05-11T20:02:23Z","last_seen":"2026-05-11T18:23:33.605977Z","times_seen":27,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/favicon.svg","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:13.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Mar 2026 16:46:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e255-296\"\r\nexpires: Tue, 11 May 2027 18:20:13 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":662,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4e78ca3ca494b9c160ebae8ccd682ba","sha1":"a6706a54eb69617aeab722239849e2be9c3f4c46","sha256":"abb692d7977eb5afbd9827dfa828feaa5014f64bf0feded9907f981629bd1abd","sha512":"993d30a0b4ec3b8f26d8e1fbaa480dfb5b81d356a8fe8dc821d717c8599b55076f23043397d7d9018de58427dc44cb851c900fb987ae02d4041f1b5a2596cf32","ssdeep":"","tlshash":"200126f8855085d481090b798a1890a56c9130f7380758f8bbe928f4bbf63b7405d6d6","first_seen":"2024-08-20T15:06:20.180703Z","last_seen":"2026-05-11T18:23:33.578959Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:17.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 11 May 2026 12:51:49 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Mon, 11 May 2026 18:30:17 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 19706\r\nx-static-request-id: RB4VV42R2XSZ35WP\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"8e0ba4750c604b11ccadb820073f862f\"\r\ncontent-encoding: br\r\ncf-ray: 9fa3325fcef1783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":18,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:17.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"GET /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.across.to.en.v4.autos/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.823\r\nx-dyn-request-id: 2sRjUeRnifEiOmj4ArNRYQLOYFUs9ssX_D8r-v3vRSYGsAJ0lF\r\nx-dyn-version: WalletKit/4.47.3\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://app.across.to.en.v4.autos\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"1af3-ZzG2jiDK8Pbbdi6q9kUYfrApLQc\"\r\ncontent-encoding: br\r\ncache-control: max-age=30\r\nx-frame-options: DENY\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=UQ5b8w_jrA3Cdy2zB8YsBMKlS9tnDXv4Od1CDD7rVlM-1778523617.5920029-1.0.1.1-GmhedsO9xkyHfbctiIeQQoFYjRqq8VMoqakAGIjeRJ3pOQ6DCy8CG3lV2OI1K33v33uZ8qDHnepwl7B6ztsRXzhUFy4HImkNPgMAUSE6COu8Zgu7cJpivu.oZGAvg_bU; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Mon, 11 May 2026 18:50:17 GMT\r\nserver: cloudflare\r\ncf-ray: 9fa33261fc3835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6899,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2986af9e280ba36ac079d8135a1f253b","sha1":"6731b68e20caf0f6db762eaaf645187eb0292d07","sha256":"eb020516ca48b03c6cf4c0c66b7e4c4192ea094e93fd07562b03b048a51eb23b","sha512":"853638602005fc4b40b61b3a4824d25b33dfb23651caf5acb6baa9c491d580f6390ac6c4056c40f49c7726b9b6d95a16d43bb6b2089a3caa9720083952a09ab6","ssdeep":"96:ssT3zK3iuLnemsPKTq1hlGvu6+HOr6MA9ja+oEe4TmPctRfooUxZkJEtYo1Ju:Ld1blGvuZHO4T6ctRlUx8EtjJu","tlshash":"78e1e15e29242cfd9742d688c41d3b4b46398c3232ea3cfcd5b88a6c51fba950735923","first_seen":"2026-05-11T18:20:52.749141Z","last_seen":"2026-05-11T18:23:33.617254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spongebob.varekuta.top/api/config","fqdn":"spongebob.varekuta.top","domain":"varekuta.top","tld":"top"},"ip":{"addr":"104.21.21.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:17.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varekuta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Apr 2026 03:54:41 GMT","end":"Sat, 25 Jul 2026 04:51:05 GMT"},"fingerprint":{"sha1":"30:28:15:59:22:50:11:F7:AD:6C:7C:6A:6C:82:F8:61:CB:7E:6C:94","sha256":"86:E0:FB:A2:91:6F:72:93:4E:C9:ED:C0:82:1B:C3:CF:CF:ED:45:D1:00:23:56:6B:A6:6D:B8:C4:15:C3:E5:53"}}},"request":{"raw":"POST /api/config HTTP/1.1\r\nHost: spongebob.varekuta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.across.to.en.v4.autos/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"payload\":\"e30=\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,Authorization\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jWLYK7QEle2lAgMm17u%2BnaEo6e8XZRLOsAi00q8bQc%2BHYxWrMAn4emYbNgEj%2FK0nsZPXNBusPW%2BnGKRofoQ0FgEji8ffcvZU34HQYf0ChV4X%2Fa0a8z6SW5IxRsDO8CmLNP1WhDe0Q4F\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fa332629c2956c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c31314f73b8b49482364c87fcaf3480f","sha1":"b63913c04998c29e9f675934d23b31f9d6fd1740","sha256":"d89766690e354024ce18a107e5eca4f13c44e3c430fd55b0c66539316169115a","sha512":"d9ec7f524b36402ddeefc449bb2d4062f08c439af503474ef718c1a0d1a9b19dabb9eb0323c2deb159716d28793d874677795dfa75a72fadc570598ac13c5652","ssdeep":"","tlshash":"f5e0a30643552f17865e8700b0132db7004001b413c40c3616848d7c63ecfc4bcc379f","first_seen":"2026-05-11T18:20:52.752421Z","last_seen":"2026-05-11T18:23:33.607428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/eth-4706363e.svg","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /eth-4706363e.svg HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Mar 2026 16:46:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e253-2d4\"\r\nexpires: Tue, 11 May 2027 18:20:12 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":724,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43204834f5ecc40e8afe9b7dfcc0ac68","sha1":"7ce763ef1588a388d4a736125d27edbf96483306","sha256":"4706363e664e5d9610f8b2aed887541c6fd3ae1eed19f0112a6e8ed73850d2a1","sha512":"2ef6e60b6d076730ce6d400a4df55afb91ddbbdef8647243fa7e55272ecb6fd4252d7d879f39b297417cda646e7ee8afe8a2028c763a8ec158835d4dc0152cf9","ssdeep":"","tlshash":"9a014cb1610cd08088089fa71a5a10758477dcdec79d9b948b03364bfca95f71cbc5fa","first_seen":"2025-07-12T22:37:05.042375Z","last_seen":"2026-05-11T18:23:33.612731Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/usdc-174196f9.svg","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /usdc-174196f9.svg HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Mar 2026 16:46:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e256-87c\"\r\nexpires: Tue, 11 May 2027 18:20:12 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2172,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fe128c7103fe60b1fe6a53e0ae04511","sha1":"a6e2f8cda7077686584ac7bdbd789e84defcaa1a","sha256":"174196f91a7e1e42b85f80e926b2505cc502826e3ed9ad37ee27fcf5cc54648b","sha512":"c5b6044f761d5eea88cab19fb403da041f55edcda8d9b4c86fcb32a76f68805da354d7ed6255265b0c4ca77b33ee7975b337040f7af517741ed25560f9929f70","ssdeep":"","tlshash":"5a411ee057ece1f5f606f7118121a5213a9b20f9be25cf818760aff8ab1187f655dc84","first_seen":"2026-05-02T12:47:20.345756Z","last_seen":"2026-05-11T18:23:33.613922Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preview.testnet.across.to/logo-small.png","fqdn":"preview.testnet.across.to","domain":"across.to","tld":"to"},"ip":{"addr":"104.26.2.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:13.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"preview.testnet.across.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 20:20:40 GMT","end":"Thu, 11 Jun 2026 21:20:39 GMT"},"fingerprint":{"sha1":"F3:92:27:12:7D:5D:7C:FE:E8:2E:2E:D8:66:DE:DA:25:10:C0:3B:FE","sha256":"C5:51:0B:0A:1A:07:69:0C:A2:AB:4B:78:A9:CF:4D:0F:83:1D:AB:2A:20:4F:D6:14:96:20:C4:8E:A1:35:3E:63"}}},"request":{"raw":"GET /logo-small.png HTTP/1.1\r\nHost: preview.testnet.across.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 18:20:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 349215\r\naccept-ranges: bytes\r\naccess-control-allow-headers: X-CSRF-Token, X-Requested-With, Accept, Accept-Version, Content-Length, Content-MD5, Content-Type, Date, X-Api-Version\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-origin: *\r\nage: 15397\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-small.png\"\r\ncontent-security-policy-report-only: default-src 'self' *.across.to across.to wss://api.blocknative.com; font-src 'self' fonts.gstatic.com assets.vercel.com data:; img-src 'self' *.walletconnect.com assets.vercel.com data:; connect-src wss://*.walletconnect.com *.walletconnect.com wss://api.blocknative.com mainnet.infura.io *.across.to across.to *.wallet.coinbase.com *.alchemy.com *.infura.io api2.amplitude.com *.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' platform.twitter.com vercel.live; style-src 'self' 'unsafe-inline'; frame-src 'self' vercel.live platform.twitter.com *.walletconnect.com; frame-ancestors 'self'; report-uri https://umaproject.uriports.com/reports/report; report-to default\r\netag: \"54ff805fb704e93cc9f35f7c552147db\"\r\nlast-modified: Mon, 11 May 2026 14:03:35 GMT\r\nnel: {\"report_to\":\"default\",\"max_age\":2592000,\"include_subdomains\":true,\"failure_fraction\":0.5}\r\npermissions-policy: geolocation=(self), microphone=(), camera=()\r\nreferrer-policy: strict-origin\r\nreport-to: {\"group\":\"default\",\"max_age\":10886400,\"endpoints\":[{\"url\":\"https://umaproject.uriports.com/reports\"}],\"include_subdomains\":false}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::z9cm7-1778523613513-f4ff296c23e5\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\ncf-ray: 9fa332481c4a568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":349215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"54ff805fb704e93cc9f35f7c552147db","sha1":"23e3b153ce3f8f0d9eb9ac337658f08d50cd3c5d","sha256":"b231cd23640c030c802bf3521b156f59b5e525f40ebab28b590043c9595d909f","sha512":"fd0b44016240d51b5f11777674042802f2c598fce7ede389025cc1580c022b517cfd5d78e8ac16a9083658f090577c168c705fd892a6089bb75e0654811a7c0f","ssdeep":"6144:ILpunpcSfg6+OLl8mFl61n2l/O7nc5GwTgwzS7Z5WKfN3BU2m8zl2XQa:ILHGnFlEG/O78G2gwzCx13+z8z8Aa","tlshash":"2a747bd17cac7dab8b8463cc2f23e64d8343669c236794d73538b50b29c1a8d6db1867","first_seen":"2024-08-20T15:06:20.181487Z","last_seen":"2026-05-11T18:23:33.576847Z","times_seen":8,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":67,"connect":1,"send":0,"wait":86,"receive":20,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:16.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 01 May 2026 04:02:13 GMT","end":"Thu, 30 Jul 2026 05:02:10 GMT"},"fingerprint":{"sha1":"51:30:1D:2B:3C:E1:78:BC:AC:E9:D9:B5:9C:BD:3F:6D:46:A8:23:16","sha256":"7D:01:65:2E:8D:61:49:8B:2B:DB:A3:7E:CF:C4:D6:F1:18:E6:F2:97:2B:59:94:A6:2D:A8:D4:39:87:44:9B:06"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.across.to.en.v4.autos/\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Mon, 11 May 2026 12:51:49 GMT\r\nx-static-request-id: GNYPFQQSVSS5RVMY\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Mon, 11 May 2026 18:30:17 GMT\r\nage: 4184\r\nserver: cloudflare\r\netag: W/\"8e0ba4750c604b11ccadb820073f862f\"\r\ncontent-encoding: br\r\ncf-ray: 9fa3325e4ecb120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":777662,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e0ba4750c604b11ccadb820073f862f","sha1":"7a402556caf9f98f23a8ecc8d19de953caf26fb1","sha256":"016c706823ce840477ee894ab9ace6bf62625d20d1622c80f85f675fea49ea40","sha512":"b7f9392763ce7fc00f966192fdd259c121d610ea250237abfecbcae9d2481f5e0faf23871aaed6ea7420610cec2c29c0839989feba98fbca71d0a272280dc738","ssdeep":"3072:4Qu/pnoYw27us0aSt4rhtFJhnvyxKKiKA:4QuBnoYw2770cvF/nvyxKKiKA","tlshash":"50f46184ca200d8210b5a359dc6ed4d6a424d6578eda3c683bbd45bc4f6c82f25fcafd","first_seen":"2026-05-09T15:20:43.891232Z","last_seen":"2026-05-11T18:23:33.61599Z","times_seen":5,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":39,"dns":22,"connect":1,"send":0,"wait":96,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:17.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"OPTIONS /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://app.across.to.en.v4.autos/\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://app.across.to.en.v4.autos\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=qmPpbvzOxpf7LKsmc1aFcatAp0CECZ8SNY8MwrTDe6Y-1778523617.5697486-1.0.1.1-8ITM4ff_dYKJ5gRsCJ0nZpWlILECLa98xeCmaUSSPOM9Vyfn8jL8uZXuygrfHKcRsvP135ppkQI4N4dpemYMva3Z.8sYLf.5.yvk9_bRclejl4v935BHJboOZHL0DJd6; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Mon, 11 May 2026 18:50:17 GMT\r\nserver: cloudflare\r\ncf-ray: 9fa33261cbcc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:17.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 19:03:08 GMT","end":"Sun, 12 Jul 2026 20:02:51 GMT"},"fingerprint":{"sha1":"5C:10:22:02:E7:06:99:E0:11:14:8C:B0:45:61:EA:3D:B4:87:7E:6A","sha256":"53:F7:75:75:30:CF:61:F0:B5:F5:80:93:64:89:6F:A4:AF:35:DF:BC:A8:5A:96:CB:53:E7:8F:14:04:B7:E1:28"}}},"request":{"raw":"POST /api/v0/sdk/c25e9e46-2a0e-47eb-9812-83df4462fef4/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://app.across.to.en.v4.autos/\r\nContent-Type: application/json\r\nx-dyn-request-id: jEwEVIfXOi3qgEaandWJh3qgagEEJUe2PfbDZ_Ctv3neaMnKAn\r\nx-dyn-version: WalletKit/4.47.3\r\nx-dyn-api-version: API/0.0.823\r\nx-dyn-is-global-wallet-popup: false\r\nContent-Length: 1590\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1590,"data":"{\"dynamicContextProps\":{\"settings\":{\"environmentId\":\"c25e9e46-2a0e-47eb-9812-83df4462fef4\",\"walletConnectors\":[\"aNn\"],\"evmNetworks\":[{\"chainId\":1,\"networkId\":1,\"name\":\"Ethereum\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://eth.merkle.io\"],\"blockExplorerUrls\":[\"https://etherscan.io\"]},{\"chainId\":8453,\"networkId\":8453,\"name\":\"Base\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://mainnet.base.org\"],\"blockExplorerUrls\":[\"https://basescan.org\"]},{\"chainId\":42161,\"networkId\":42161,\"name\":\"Arbitrum One\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://arb1.arbitrum.io/rpc\"],\"blockExplorerUrls\":[\"https://arbiscan.io\"]},{\"chainId\":999,\"networkId\":999,\"name\":\"HyperEVM\",\"nativeCurrency\":{\"name\":\"HYPE\",\"symbol\":\"HYPE\",\"decimals\":18},\"rpcUrls\":[\"https://rpc.hyperliquid.xyz/evm\"],\"blockExplorerUrls\":[\"https://explorer.hyperliquid.xyz\"]},{\"chainId\":11155111,\"networkId\":11155111,\"name\":\"Sepolia\",\"nativeCurrency\":{\"name\":\"Sepolia Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://11155111.rpc.thirdweb.com\"],\"blockExplorerUrls\":[\"https://sepolia.etherscan.io\"]}],\"dynamicUserProfileConfiguration\":{\"showDisconnectedButton\":false},\"initialAuthenticationMode\":\"connect-only\",\"cssOverrides\":\"\\n    .goodbase-dynamic-hidden {\\n      display: none !important;\\n    }\\n    .connect-button {\\n      display: none !important;\\n    }\\n  \",\"customPrivacyPolicy\":false,\"customTermsOfServices\":false,\"policiesConsentInnerComponent\":false}},\"frameworkSettings\":{\"react\":{\"version\":\"18.3.1\"}}}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 11 May 2026 18:20:17 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://app.across.to.en.v4.autos\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=JZZli1g.YeHrOJF.ZCMyYrojI9yj6I4VikjvO_jTpO8-1778523617.730405-1.0.1.1-_NHYKoemZxjz9g_oNrh6EpwehgUuwLz0tMJ7HfAnUnpXxMVKkC4UCZzV.LN9yJL5Mk9QeUoepXyEWG5dfROFA0ccEAxMFBrPsA2SPnlfzY8kQygoAdqhUFMUsa33GMUk; HttpOnly; SameSite=None; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Mon, 11 May 2026 18:50:17 GMT\r\nserver: cloudflare\r\ncf-ray: 9fa33262cee235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:18.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://app.across.to.en.v4.autos\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\naccept-ranges: bytes\r\ndate: Mon, 11 May 2026 18:20:18 GMT\r\nage: 16034\r\nx-served-by: cache-fra-etou8220087-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 14200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-05-12T10:00:16.524352Z","times_seen":2073,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":88,"dns":53,"connect":13,"send":0,"wait":15,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"metamask-sdk.api.cx.metamask.io/socket.io/?EIO=4\u0026transport=websocket","fqdn":"metamask-sdk.api.cx.metamask.io","domain":"metamask.io","tld":"io"},"ip":{"addr":"104.18.31.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:19.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cx.metamask.io","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 00:01:47 GMT","end":"Sun, 12 Jul 2026 00:01:46 GMT"},"fingerprint":{"sha1":"59:0D:BF:6B:3C:82:5C:03:D7:A9:70:A2:32:3D:89:4C:9A:1C:F9:E8","sha256":"78:DD:F6:CC:64:96:55:AD:04:13:9D:C4:BF:41:16:DE:92:B4:17:D9:4B:2A:04:4E:C9:F1:7E:78:50:58:52:6E"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: metamask-sdk.api.cx.metamask.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://app.across.to.en.v4.autos\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: enrDpxhO2eiyeZcYekh5Jw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 11 May 2026 18:20:19 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: dHztnJm2QAUNzu4pxRamK4XxR88=\r\nAccess-Control-Allow-Origin: https://app.across.to.en.v4.autos\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: AWSALB=1NVhWpQ2VO+VZasU0HrtP7QgpaPPbeMsIX3JpxksYdrd84OzTbZtjsQK3ebCAuagu1+jRfgYPMOUsG0Toq9oW2oV/ZTuyOIPRM/oPm3Aila4mY88ILHWk2tzjxXt; Expires=Mon, 18 May 2026 18:20:19 GMT; Path=/\nAWSALBCORS=1NVhWpQ2VO+VZasU0HrtP7QgpaPPbeMsIX3JpxksYdrd84OzTbZtjsQK3ebCAuagu1+jRfgYPMOUsG0Toq9oW2oV/ZTuyOIPRM/oPm3Aila4mY88ILHWk2tzjxXt; Expires=Mon, 18 May 2026 18:20:19 GMT; Path=/; SameSite=None; Secure\n__cf_bm=ubnOnzJCttI8MRHN5EH5rTsB4dOu5AjiOWvfBi9gjKg-1778523619-1.0.1.1-pK3M12HbwL6vJxIMrrUmKcNl4FylGnkaik_F5XIg6QYtNvWVW3_FSEifZ6LhXfLM6Qdm4K_9PRflbKFz61XKWV7MICzom2tFVFB2fHtzYhA; path=/; expires=Mon, 11-May-26 18:50:19 GMT; domain=.api.cx.metamask.io; HttpOnly; Secure; SameSite=None\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9fa3326b3f14c759-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-12T12:03:06.825144Z","times_seen":15057527,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":0,"dns":14,"connect":15,"send":0,"wait":427,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-11T18:20:11.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:11 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 15 Mar 2026 16:46:14 GMT\r\netag: W/\"132af-64d12d721e00b\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":78511,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20946)","md5":"a54a88dce1d021b023f6109a8eeb33a0","sha1":"8b857d46a925f77b4ee49e035fd9cfe4fe03f509","sha256":"08ae00f8a7f07b1ee2a601e16a7dccdd26017b46f7ebf216a26aeba16b60ec1c","sha512":"e8471e34b5583eb4ccd0b993fcb4544209118ec32ee04f6381f9b78b0777a60f35dfc54e316cf76458475521bb9c62ff2a03258d73e5407a4cfe3c0c7ca7b750","ssdeep":"768:e88wNeaDuoM1c/dg2Q0T7Exoy/LSoS/JYtZwTZwHZwbZwssBQJVLp64ujOiC7HiM:e8BEaaogWq2QBJ/Ei/g3np2x4WwvzoCx","tlshash":"a0732b76531031746017fbb8b695df0eb36ab027e70652b8e9e51848c3cfeb449a36c6","first_seen":"2026-05-02T12:47:20.31747Z","last_seen":"2026-05-11T18:23:33.610654Z","times_seen":4,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":147,"dns":68,"connect":20,"send":0,"wait":39,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/solana-3d340110.svg","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /solana-3d340110.svg HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Mar 2026 16:46:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e256-9d7\"\r\nexpires: Tue, 11 May 2027 18:20:12 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2519,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1451c141117d732b103931641401bea1","sha1":"303503a4fd0b3c3b49182e8f5c72d1a6d1294d90","sha256":"3d3401109aa061dec40a8659f1847817a8e647f98de1e65e76e86a95bbe1f08a","sha512":"273bc0f2835b65bb58d9e9fd18fd04acd65eb0226283d98f5c63696452158749280eb5abec859cd30871c728e0d7291994d64ee53d0241c20c19a57d99ce6b59","ssdeep":"","tlshash":"ac51569a37f492fb700ed6e8de694456315f66e75c40e0f0c2a4ed0be10a0ce1e19ac5","first_seen":"2023-12-25T15:56:59Z","last_seen":"2026-05-11T18:23:33.594599Z","times_seen":68,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.across.to.en.v4.autos/index_1.html","fqdn":"app.across.to.en.v4.autos","domain":"v4.autos","tld":"autos"},"ip":{"addr":"35.214.208.5","port":443,"asn":15169,"as":"GOOGLE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://app.across.to.en.v4.autos/","date":"2026-05-11T18:20:12.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.app.across.to.en.v4.autos","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 11 May 2026 13:10:12 GMT","end":"Sun, 09 Aug 2026 13:10:11 GMT"},"fingerprint":{"sha1":"B4:77:C0:8F:B0:EE:DE:1C:5E:0D:20:97:3C:6D:8C:99:4A:F4:30:30","sha256":"D4:09:82:E3:90:0C:89:EC:AD:15:BD:1C:D1:7A:4B:7C:59:6E:DD:D6:23:64:38:C0:98:CF:9A:17:41:7B:EE:0A"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: app.across.to.en.v4.autos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://app.across.to.en.v4.autos/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 11 May 2026 18:20:12 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 15 Mar 2026 16:46:13 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b6e255-f7\"\r\nexpires: Sat, 07 Nov 2026 18:20:12 GMT\r\ncache-control: max-age=15552000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":247,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"3d6440a417cd2495bebd9a61e98400f3","sha1":"c86e62882a76d3e577cd82a3db9e35930e296dc2","sha256":"878e41d7b8ab21135bea244b15546e7ac47bd8cf0e5f581fdb91e34602468a3e","sha512":"56e0126915a0ecc5dc32ab9b9066cc2d3b27fc5bcb4aeb7cf590a386c2b2b63b1e1062059fc0c263a61ca8cdfba03dead7d97904c5393956604da72227637708","ssdeep":"","tlshash":"08d09712c805892fac0246a0cb63f380c481872dec31ac30ecf17a30e28d6248a22189","first_seen":"2026-05-02T12:47:20.310182Z","last_seen":"2026-05-11T18:23:33.591047Z","times_seen":8,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"app.across.to.en.v4.autos","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}