{"report_id":"ce4414d8-783e-456a-b12b-872bda71dcef","version":6,"status":"done","tags":[],"date":"2026-02-14T00:11:03Z","url":{"schema":"https","addr":"cryptocart-snapshot.xyz/","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"172.67.217.182","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"title":"Home - CryptoCart","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T02:04:44.628897Z","times_seen":17911053,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"172.67.217.182","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T00:11:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cryptocart-snapshot.xyz","ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-03","domain_rank":0,"first_seen":"2026-02-13T03:08:37.90451Z","last_seen":"2026-02-13T03:08:37.90451Z","alert_count":238,"request_count":119,"received_data":10623685,"sent_data":54875,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:26.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-16T02:04:43.718477Z","times_seen":420414,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/three-r154.min.js","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f6d9f20f8ad8aa937879a27b27cf47d","sha1":"b9826f15a2c8e84c33dcd62fbaabbe2b11086a7b","sha256":"610519ddcbecea143647b9dd066aea4cba892a7beb831500ad29d6fb4c0a888f","sha512":"0f92cb98279b688dfb61609c355cbc1b281134fa26b3be349c6e9e47a6142dff3ef2fb4102b5ff8c42b5744eafd066d2fe1a8a548bf264165717247eaa2b1ae6","ssdeep":"768:lu3VLctT2CmoTYDaGI+Vs9bCk2cYGJLcwcj5cTqYUb4izAg4jUNiOwcGcQcWc2cH:/26GxVE7vgZ4kuds2u","tlshash":"3d7382d9681bd0d48e5620ded473e805e4280a23cdadf2a3a67cdec1745ef66c48763b","size":74861,"data":"","first_seen":"2026-02-12T21:20:14.378178Z","last_seen":"2026-02-14T07:32:54.797733Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/ec8eba86-2681-40e2-9dfb-2d70bb376489","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-13T18:03:54.375268Z","times_seen":5113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/LUFFY_TOKEN-200x200.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /LUFFY_TOKEN-200x200.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-f5d2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32A6NAqjGRsc5Wyjo9ZaXT2Ng5VlqyB5vE4%2FzgLEDJs1dESsWJ3CzjR8NzxIveJBvkvsTD77iEnuHRTI9%2BfkO5RXct%2Bb0TfIs%2FnzcsHXgRdPIw6WMsLs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbba2db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62930,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fab0a293cd89273471c0c7c9bc148ab9","sha1":"ddbe3140cf4445b3842b5c82c4d045700383cf36","sha256":"4c25da63f82b597f2780c1cec1ea1c7cb26f3221b2120b2684bbef75444ef7fc","sha512":"ce3cbbe221e1d2b2b6dd32c0fd3097127fa857bc57bba36a9e10361dcf8b75b8136f98023a35525bcfea3676c1e82f2866524f6d63ba2f4e086070d9e428d21b","ssdeep":"1536:ipjPbe4IAAdxk1gSrg7lrk7zRosrupn5Pznp22M:iV6BCECRrup57g2M","tlshash":"37530120c60a4b81475b34dfcf0a23a29ae64848e7d45f1fe55c5318d293ce19fa76c7","first_seen":"2026-02-13T03:08:47.159035Z","last_seen":"2026-02-14T00:11:09.722842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/floki.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /floki.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 15936\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-3e40\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzj72nf58BTqB%2BryTVWeqwn2VLCBL%2B5U7Lv1gGFxZk9ny%2FQS4SZSwDpSq8BugxrytBZpf5rEzo%2FrlKvALA%2B5U9OMColTDJhqkHSoFt34W98AaEXUa8JV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbba32b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"0e4e34ff24395498b93ea6d26a686229","sha1":"3cc820f21a5c5c5071fee6824ee2a04bceb493c9","sha256":"10f26de8ba358446e61c7912bbc5f5a5cdeac9594a6d75e337ecfba849d4a8fe","sha512":"551b248dbf1f1d14e6e4fd47dc25e5c74b8b1dbbc067e8ed573d64c4d31dd9a15661e4218011dacabcedd359155f4b8ac49093e050eb05c654fd2fd78ff0e7df","ssdeep":"384:5wLOwVGw1WU22EnhoDgpobVCZWDcez6iZc4SX:COwwwELvKUpofTQ","tlshash":"0862e0ca94113d10b5c3fbb37763a65fc72598cb5cc721e0824952d326f03acaa692d2","first_seen":"2026-02-13T03:08:47.225393Z","last_seen":"2026-02-14T00:11:09.726538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/mcrt.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /mcrt.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-11426\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m8AqdFT%2BpP6Y%2B%2BD4iYo%2B9tLIzmrBqZ1vIarIPbKsl23shd0k7bxd2C%2FeXImCtrogc4NZKItjkLtgcqJ0Tdm7TZ0%2FjGNv1WQY4JEgV%2BEPBaQKdt%2BvK18i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbea52b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c96f8bfb8283e103dbc72c051ad954f8","sha1":"abbb87cbe5be768f12736913d9cc9df688d28f5a","sha256":"ca3d7a161020f9200e4c053ba4c51ad518b2e9b896944d1bfd77269cc4f8550c","sha512":"ec71446b3a96315055b8bd64ea34726b972fc9aa825e9665921a973e79fa70c391b433a423347e39a432a1745946dc43f102c486bd0c99cfac615c3af880b8ca","ssdeep":"1536:mVcyN7iYKQ9vz0cIUuL8BMwIlXRBbi//6fruhE/KyJ9qzfWxKXk9Qb60:mVcqHgcIhZZlX4GxnKzhXk9Q20","tlshash":"b363021cce3b99274721c695650cbe3450fe695ab67b38807e269fc45cb3d8dc728861","first_seen":"2023-07-08T10:47:34Z","last_seen":"2026-02-14T00:11:09.729476Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/opt.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /opt.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-2026\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75804\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PxkGZWk5uiqK%2FsgtUl9PZvcC2A9NCvdKgd5QXAIuc6sy2DtpmV2BvIHqsM%2FSa%2BkeY%2B8p%2BFvjmbP%2BjIMN5pYzXSdxgpPdZOK2XCSkJgpXvUJUZGmn1zv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc6a76b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8230,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f4e2c2bab2540840802dbf71cbb1fff","sha1":"4eceb3cdc296d3497259795fa582408384e52375","sha256":"0c9ad0a255e70e7f7207e76957a6aa7c6f8af33d7d569b424d59a4c149501dbd","sha512":"55137aaaa4fc259bf89dacb21df014e83c8b982be9b7aeb265e44f67aeeac64f56480a82a67be3cb786db2f6298c364f439e26c96f9a0755099aa2c028aab1e5","ssdeep":"192:2ja/4kStwM1ZR4gkxj9Q8oW14hUHbr3PlhLPu:2s491LyV28oWOWHX3Plhy","tlshash":"9b02b0cb8add380638a1d11d877fde7630bbf8f5834f05c6b983e64027ba21a2e15145","first_seen":"2023-11-01T11:50:40Z","last_seen":"2026-07-13T23:46:03.114714Z","times_seen":41,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/background-graphic@2x.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /background-graphic@2x.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 106998\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1a1f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cg21Z%2FagDPDudg9PZKEYl0n6lSJyoeawvMWB442ZA6gFjoDMX1qlviWnWu6txRrXh8M%2B8%2BLFjIjxw7QqO5nJsXs3wLmnH7U50l9tTvAkCyQp9pf3M1FC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857ffcb0db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1221 x 1060, 8-bit colormap, non-interlaced","md5":"b7f92c1908e4701c4c8fa61623203241","sha1":"db8d5591c03c8d9451ee417f914a00d723058982","sha256":"efffc2f3e4e094231e73d584c35569496d83fdd9d0aa5693ec2816147e1b907e","sha512":"c6a974c9a13731d126aaf224b81c333fff355c1bfce2e1af5d50d389d6829ee22aa43b5601ffe1ea40ae52df3d88efe4b30980ccb7508581f1d687f96306adb4","ssdeep":"3072:aqjAhZ3WH3mC9PkRbd2fLmAbOz5x/NSl9BAfxMj:vsh9Q3Z9PkVIfLRbex/U9l","tlshash":"85a31224de591f0ab3fb69c92979576e85fe6d68031520cdaa3499815cbe04204f38bf","first_seen":"2026-02-13T03:08:47.253595Z","last_seen":"2026-02-14T00:11:09.734312Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/okb.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /okb.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 1683\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-693\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgbCYMjQhyuimz%2F2zuB1abOhYPcaicObv4iU2K30yQHBzvTWANm36LsMj6MyUkw7qtq8pDL8dp6MLsFju7s5uTXH0P2I4w7MfkLlrEHRrMUJiKw57l2K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbea50b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1683,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4f4bd29985abfdff4642a31d17bf9a16","sha1":"9445bcb4870cf792524f9784fb5af8f8e03f9a47","sha256":"fa42a2b029b31169617cba65bbdf470cf737e75efc110a992d730e225fe1af38","sha512":"436c6ec909e0f0cf0a551cb56f4fdcd8e5ca42765fe28a81227ac9c0e7b943cbdd4b80debdc543c8223e0bfbfaf2a6c7fe1705d4eb1dfa1958d61700e302582f","ssdeep":"","tlshash":"b131ae4b55a50e33dae34b8729e1c67c03700997f8617c150619217e5c6c8baea7efc5","first_seen":"2025-08-13T11:53:59.070841Z","last_seen":"2026-02-14T00:11:09.736807Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/gtm.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /gtm.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-1eb0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6UWxR2S6gSgF20ZiSWyRg5Zb6HkV1rEBIM7Am%2FXn59E5x5MtaaHAXQG5cxqktUlxHxAXNduZmrOnJtcsWLqvWbI%2B0SW%2FbE2nKxM%2FbOcH0HcOySBq569d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb9a1eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fe560cf428bfeec07a45ea186aba20f5","sha1":"bf989d844e5dad836aa792e8bd896bc5592b679f","sha256":"dffa380a15b5eb7f0c2df7e4da9a268be5ae42eb364588146be6065b863b8f51","sha512":"484fef5a109adfb6dcf4cf670f5abce4fa55fee77257d8426aaff78cf39e3d2480e8b14b67fd685884e03f8c5c910ce15261ffe06dd0b234c7a98638236ce1e9","ssdeep":"192:MHg5QTXulqtWkG4bSkxcdkStHPyiEsBqNZNNwj/g0K5EmjNcS8POUxav:MZTXueBvSd91PyiEaqN5upmjf8POUxav","tlshash":"9af1bfb9ce19d83c784035cd16165dba498ff1193e204fc974082fa7d5ad3b04a5d38a","first_seen":"2026-02-13T03:08:47.361151Z","last_seen":"2026-02-14T00:11:09.737832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/rocketx.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /rocketx.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-3f4a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yyvcuu2alYE5jOo0mTuwp48KLPrzPL1SkX4OW4oJSSp8Yc5bWi5NOtzJUg6p5bW6oLRPWxImUNPGALCIJ%2F3o887wmFJ01yejoYGm7dMwZxoqjDWiqo7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbaa21b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16202,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"baafd7b91e589016b83a3b7e0cf9f212","sha1":"9184cc741d745b65e427b296ff734144f736c62a","sha256":"dffe4a3d1f0a8ab419054c8511ee95c5e193bb8851ba82fea8b1115c82b58b8a","sha512":"f6f9967da4e15387ec2f39feb3b05515082e5b293035c94a731fbdde277fe5790e7087367a4e3e354ae32c78399263d4025bce2d3e6dc9e433efd4c4d2120c4c","ssdeep":"384:lexqK3Vsd8LxUspAicn9xX4it7as4wy41U7yLkeZFMKbGC+i:lEIQpyn/XlX4wyeU2L1J+i","tlshash":"7c72d1ac0d96c1e70b8bf81108a98f372febe10e04d997569ba561514f61f4e2944dcc","first_seen":"2026-02-13T03:08:47.271892Z","last_seen":"2026-02-14T00:11:09.740228Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/karrat.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /karrat.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-1730\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HG%2F4KPjqGpAAB1554ivQQh83iV%2FlGjHzi%2BxZ0St1oKevDMa1OVmvI1Y9k9M%2FsWTchr%2BvkTuO93LpNzly4swnkluypu2T0OOw92yoxxdiHQh35Ay2BKKT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbca42b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5936,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9c84907c927d85cc7272756cfb7754d","sha1":"a05449ae05251db1a3430b5d94cb271581fffc78","sha256":"adf0a9902b0dae7df8146e0b12945e7169f910888ed9cb006d11276b0ee452bc","sha512":"b21a49cccace9755de69622f6770eb3d8099ac5917a79a168c1067fcca5c07f5c4d509d7c816522632774fb793901ad51ea26cca9c6a493f30c6e04f8fd661c7","ssdeep":"96:86kcikZncSTQEat0GKgyyyqEpfNVi5y3eAUvwpiH9TQavwWrdo+TFlFW:86kciu3klEplVsyuAUvwpidTQ2dM","tlshash":"07c18ebe8b52b4d4c94022b45f57122e681bfb443840670a6feb54c91c59ee98593a42","first_seen":"2026-02-13T03:08:47.170059Z","last_seen":"2026-02-14T00:11:09.741698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/ft-telegram.svg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /ft-telegram.svg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/child-theme.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698270f0-1ed\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EReJEl4aXjrx%2FgOnRCAdJBNoS3FahM43nEDvGkxCXPupGC%2FYS%2BrdRvNFP9eCyd6dHTBxEtjYtXBO0DOobpbfoUpUvY2nUg%2Fesi%2FIepSgAu4GgwXHti4k\"}]}\r\ncf-ray: 9cd857ffdb10b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b8a338b0dd494c726fcff88b4c3cca08","sha1":"16db50d36f4cb72f6aab2b40b63772a75b4a56eb","sha256":"842fe5a20b8b0552e32f3bd3380f92b6eb6f829a1e89ccda59af5979bf6fedfc","sha512":"95b6a7f8e34c8baef4fcc6058a4e345a2b340b98fc9e7260dbcad3ab9d6d3ca4a5a26c7c0f220444b6500234b6c97772629945ec3230275c7ae018aff46586ff","ssdeep":"","tlshash":"69f0d47743c92d7cb11d4f2109e4328136e1b087d29e64ede6d5123f50118f1896080d","first_seen":"2026-02-13T03:08:47.2036Z","last_seen":"2026-02-14T00:11:09.743006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/linq-logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /linq-logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-e694\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyTdj2WCDY7JYZ0T0WjRPwtWkok2XLwFxp7ge93Ha0a1toVci1JAwSEYP4Q2oUeXu3VEqv%2B%2FnHcqm0a3jjSQzZVU34qMEOe4ip6E3eE4VCziJ2qgCiNc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb9a16b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67e7293b4f3a72cee3821f84bbfd0428","sha1":"376061f27c4e3aafede40a83b9a8027ee4842251","sha256":"af6f888b89d9748153475348ed32efcb7ed35609a49fdff707e857c26fd885fe","sha512":"b30da7c468d7da7300edac00448d8191b51d8121e645691f8a99bea5a4498ec1a956a41f3f738965c596fef4c4253845ff702891ffef4d82acf100bcc723f4b7","ssdeep":"1536:7QBRpNM8UbJ7gNaD3w66vfAPRHKE9QF0SIUR0gy:7QBREPbmNJDv2RP9QOSx0d","tlshash":"51430256cb4dd44aede54cd662fb78d4860a0c7997f40afb98889f44938ebdfb700124","first_seen":"2026-02-13T03:08:47.307871Z","last_seen":"2026-02-14T00:11:09.744186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/IMG_0011.jpeg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /IMG_0011.jpeg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10416\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-28b0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TIlbucFJGP%2BEOP1EjICP5OlzCZUUYK7ivpgFtLBXol2AFMZcPuuKflw1pzZX5yCxINe7Y1V1OIiiC7fL6h%2BZ%2FSH5tfBnUp9Pq%2Fz9G2o9YfqRaO6Jqbjj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbaa22b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10416,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 225x225, components 3","md5":"f580883ff51e8bc5b9403421d01adefe","sha1":"5c95ef7c17ebffc75aa32ea65815712d260af468","sha256":"5f90961460757e11854bf827c31f21a5c1466d965d34b41d1f76f788e5b62ca9","sha512":"165d03c8253af56c8d053f3425ce6e44459508039f274b6bc0ef89a22d4b92306f448c3998606a831b684fe8abd385d2916461907012710997d124379d917623","ssdeep":"192:ws78HvvQlvsnuxKxDeV1UdvEZEE35hUMGJsHIR5pfJBsZiaqhSt:wEIvvovKa0eV8855+MesHIRnrI/qhi","tlshash":"d9228c05a7495b58e913ab325c72135beff902bcabd2292e305b2417c428bb40a8d5ec","first_seen":"2026-02-13T03:08:47.268214Z","last_seen":"2026-02-14T00:11:09.745292Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/swing.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /swing.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-733a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXpA%2FXWycMvTC6H22ceg4UOXAZnWRrC78ZjMR6Qd%2FZm0Zgrt6qaOnxQNy7niaeENl2JRXWfNmD13AASA%2FxqJ4xm69l1e9pA%2B1qBIy9IHogEryi4PdQrl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbba38b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29498,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae6c4ad9d157442f04193d8fb4f296e6","sha1":"4b3cb2194afb12ee773a254d35327db097212817","sha256":"8aadbf768445cc40cf85ee1a44b41ebba24a9077466e751d674915a4febcdd37","sha512":"3500be468f0ccfeca7d297cb0f4bb281689db7a38d0f4f39f9cfe6a5d9ad622f23117efc45062f07391ec2b9dcca294cd486f774e273c3da6f749ca5e8315e76","ssdeep":"768:FGi//O9p76fz5RxRqVzvhY96o9Rx88EOeEYQ10/:si//OqfNnRUzJAvvxfOQ1O","tlshash":"75d2f2c563f10d38ee2ef901ccb48a51dd4846f7aeade1a76e773180391e8e110812d7","first_seen":"2026-02-13T03:08:47.151035Z","last_seen":"2026-02-14T00:11:09.746215Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/uniswap.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /uniswap.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 5141\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1415\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJfy3IL7OwV0LHKTZJTjFXb0lxlFlWMWkAJymadgIjIn9i4M%2Bi1o7U5%2F0LLnEOQj58JZWsCYEVjae4DNp4YfUvYLyXPcNnmuoXrirbGPKO8JRw7UxFaI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbca44b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5141,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"cf5a7ee2e308173d45cb9859b28b03ff","sha1":"678caebb5a9c5890f516ff4dacd76b5dcbf18882","sha256":"7d93171e9443ccc1c345b10b9c2eee7565933965d411db371b44e72654f70991","sha512":"f1503aaa0e8e3d465407495053fd3fa26cfd38248116cc73d5b835e152193a59010bade843d081e5f7095a1d6c342ecc6f2186d0da3af948606566f618b8a1fc","ssdeep":"96:Av/nzvhUnSe3ImqXJS99NR7m4rx7GiYi+G9X5pUjVxF3eKR+iDsbhgB:aPzGl3I/XErNR7bx7GiYitBXUjVxF3Jb","tlshash":"0eb15d8cfb526451d1cc36822e585832135aa1caee5088867ade962354701b6c7dbacb","first_seen":"2026-02-13T03:08:47.147917Z","last_seen":"2026-02-14T00:11:09.747097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/w-sol-loog.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /w-sol-loog.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 18456\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: \"698270f1-4818\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROPSb7hsaL1oYhEEAqKcIrgs55QdHyWLLoO5nbAj4iTR12ZyTxIgQBELH0oYIOJCm6%2FlaXV8b%2BYOVn1eqDuCacbCeUdtS6NyW37dgZBaBvOsg4jn%2B6EK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fc8a7cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"cc8f6993caf9eac7f896392301cf02e4","sha1":"128f8bab1c8eeede7dddb0d4c95c2792677b0e5f","sha256":"7ab8445437fc1014fc53e0f56f44f89bd65dd4c71ef44f755ad17093cc193671","sha512":"ddd4530d122306f89f94b8f1962e4aa1f71da574f43dcc16b94e2d72731f9fd3b4a7a003deca131ee2ecf0b81207498831475667264e92364291729abd2bf8cd","ssdeep":"384:HXkcPNnOqdja5wQ2mf0+UYCnhZcBEoADsrXWRaRSikwT:HUMNBQ2mf0++nhZSEogsrAiv","tlshash":"6182d1385eaf69cb1e066e139b7c00d1aded08e6e5b6e24d4379cc03ab24407547b67b","first_seen":"2026-02-13T03:08:47.25706Z","last_seen":"2026-02-14T00:11:09.74797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/tama-transparent.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /tama-transparent.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-4a6c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uispkFqByK%2BdrwDWC7EZmB%2BXEoTrm8kw61Y4QyZAp0yoUVcvoN%2FKU0PwSql07tlz%2BaPKcfNw%2Fcm8PI2My9x6IO4GKz0XE4mWXltKyCpOSZ%2BI6sa1zyuD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbba36b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bdf237161ac9a5c7c6f63fea687f6348","sha1":"af3bf67327975a6ac867f56404072227b6182fc5","sha256":"64a25c33c008f28a6f0e77b58d29c333ac3db2271cc3c29019a32d4bd0fe0ca0","sha512":"5f9ce196df1137f992a191447feb42e0639cc9b5d1239fdf1819b8d776a7eb559584240c8167af904ef93de9a9cc6184168fdaf342b6ca4866c87fa44fe16867","ssdeep":"384:5bfnhIpl8zk21eMn30Dl5170od0ZHevTUhYvedvSJ5T1PB:dfKpl8IZk3W1xyU7UiGYLT15","tlshash":"a382e1ec5a62dbc42ec2eaca775250aecd47c8cbf47a084de954769453ca3c4a732426","first_seen":"2026-02-13T03:08:47.244979Z","last_seen":"2026-02-14T00:11:09.748819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/parex.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /parex.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-398a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75804\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aWMgjnSWbfDE5OFy7hCCHliidC4U6AnxIr2K8%2BvBQ1H1d7W9eencokQYdD%2F1NTMeNVp1DY7rRBv%2FS07pHFtzxuQBuSq%2FFHAtRdsMQZI5gbRvH8LCNB5%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc0a5bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a99ca77dbd79f22f11d472ad8a93799b","sha1":"23165cf586bbe85897955afe4f9e80a880d03367","sha256":"6dcc181cb1bf2b4182457a1faa33dbc444c604711a045b65875af6977e2f0c27","sha512":"42005ef900362df9ba0bd066d3f2406464dea48a77db8c713a0e8ca9e6fedd968fb32782081eec877a5d0ff257d019558ecec801ce5833d43ef8c56fa4e4fee4","ssdeep":"384:TERAIPFRdNfU5mEud6qNK5vP3XA2pp4j2yswsu47Ajb:TERAIPFRdiWxcpPHHe2ysNb7An","tlshash":"e662b0e8e979d13acf9398fb05bd03916d1ea76fab73c78463f852351ca58059a040c1","first_seen":"2026-02-13T03:08:47.148838Z","last_seen":"2026-02-14T00:11:09.749793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/mobile-graphic@2x.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /mobile-graphic@2x.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 78841\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-133f9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2FJO5tVuGWJufLKSkVyDmGF%2FiL2GcMvTjuiPjMlTQiqi5Lwnix79OgbokXYp9kdOz4hd7%2FI1dHLGabrRrTI9YxT0ucl1Dcaf%2BAOUcMg9ZaWY4PHZtwZu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fb7a0ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 912 x 950, 8-bit colormap, non-interlaced","md5":"9f52da58d2b7566aef47f56b72784213","sha1":"5e30f6679c4beac72c38c145b1383786fa78bb32","sha256":"8c7e29ebfeb13e1141d57a84e9775b73ef10195b71bcf77c1a2daa6b0c7fbe20","sha512":"6e20551856c5a4f567ae88c0fc0adfb777603792dfcf40ee65b5bfe3886b002d21feb61ba1ea1ddd56cf7ca96228015bf85a0a1afc69c05c6a3c87fc2e3dd321","ssdeep":"1536:btSjLh3p5zLV+77SIrNGfBdd/VeogE/GEBClr7JbhaHpXHXOr7Jo:btSBjzLnI8fBTNe+/erFoJXerdo","tlshash":"7b73029a9bc00da8ab6f674215b913651473c7fa76bf017283f8f3bc139254f2121b64","first_seen":"2026-02-13T03:08:47.301369Z","last_seen":"2026-02-14T00:11:09.750698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/mri.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /mri.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 86267\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-150fb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qya8J0dZUlV8Ojyi5st%2BwagLF0W%2B6YfLCyB59ujgAecwV5ug63z5zKDA3p%2BpSNahFF%2BMAQq0bSyvTF5DAXgkUHPhiQw7AaSnRxlnrKMFTnn%2Bh9KZ693j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbba31b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"1858f6e8debcd0c663f427b5df8f2a2b","sha1":"31caebd9647e16ab34c2a1013be728e42765698c","sha256":"704642b2ab27ce7ffc6903736a6f88149cba1450244640fc0f2c4ab88b021e4d","sha512":"075c585371cae928e8eca0bbe7d10c93c7e9a8e1f4ba46a95a1623c8c0a088b3dd81b20dc39005a7568cd14455f25bd1d55f542acdc9d438edb41e2a17c9b582","ssdeep":"1536:YIzhDthO1ebGsZscd9HeNvpvG/Dqrcg/E9h1l70KyS:5RdbFucd9HeNrL/610KyS","tlshash":"e18302bcb68310e2c707155e5fb3a5de105290ee568d8717e823a830844f7af9e2eec5","first_seen":"2026-02-13T03:08:47.146928Z","last_seen":"2026-02-14T00:11:09.751656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/child-theme.min.css","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /child-theme.min.css HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-506f7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWU8SAEC1FuTVQBzTJzddOCdw1EL6ObT1dqrIlDTscONwYUdsfH8dxF6LMLA6Us6gXTvQKR7kBMscFwReDVly5aaOeua0v%2FmerLIR%2FGCaZ3REbCDma22\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb6a03b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329463,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65300), with CRLF line terminators","md5":"906f8931905a4105b862057451a0fd79","sha1":"b70cabda091252aa1d78fdfc7773d77424253e2d","sha256":"80c5f8658f26f73490b26c48a20fe117ecbfe918f11ae42677be42e34bbbc357","sha512":"deafc4bf551f7f748731264ce6529521786719797e8fd0b4082cb3b1765de4969db003a3d01805644587badd3a6dac74ed58312f7344a99e4d12aae460847ab3","ssdeep":"3072:otTJRx9HfrRxWkVkpz600I4lCoAye6JtVa:otB9HfV6pz600I4lIye6U","tlshash":"ce64a591f05030ec5ef6c196abc0bfea5aaba154d6174a55f00757bc07eaac20672fcc","first_seen":"2026-02-13T03:08:47.297011Z","last_seen":"2026-02-14T00:11:09.752574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/eth.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /eth.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 3220\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-c94\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjxayG2TdHrRYkkYwzF9%2BF1uHr39Gk3cwyNplpy8DiwPhSWSfA1OHplAQteAPH4vZS6DKoVpFT0LE11gMI6PnI77kiGPuyr%2FfVKgdiBjGrhrBZC6idzZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbca3bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"3d23b19d7da721b9e3f3ec0feaf4b69d","sha1":"b3df89bf7297934786c58a6269af71ac52001525","sha256":"78ef508b757ce960937beb6d631801ebc690df7c97a681487134f1ed259810d9","sha512":"a38b476f33683b36c0af45a1bc8c0d4561dcffe74c3c8d3eab6c51cec1d62286615228e96bbb4e26619baeb3041df472f837ded71263e6b0b0f5f8ea41782095","ssdeep":"","tlshash":"a6613cd9f770acc4d046b9151caa2033aa63ae44def08529f84ee04b5d11ffd141e8e7","first_seen":"2026-02-13T03:08:47.16911Z","last_seen":"2026-02-14T00:11:09.753557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 14 Feb 2026 00:58:39 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKXp1vI8g4rMoD0NPs5OvjktSxEtaLHDeR5%2FFxCd%2FjTgmJO9aExdfeAC6lKWN3ABD4dTkywm2W7NKOx1BTOWmrAAtTwVk06g7DBPgByo4Pz5cNlKeCZj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncf-ray: 9cd857fcaa87b1b8-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-16T02:04:43.718477Z","times_seen":420414,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/secureproxy?e=jscdn/getFile","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:40.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cryptocart-snapshot.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://cryptocart-snapshot.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"o26083mj7oqlwo7587uv\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gTjVSOvgQbGwEXW07zVrXDUze%2FhA1iNGATPiCBthNEUMjmQ4uBoUBBpYM6sdYIfZeNvRQEuSvlLRoCm5KxOEDNbIAiRS%2BE0Nu2xtz9mSonSvXg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cd85800eb63b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5147147,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e3760561c000256accecf777a045858a","sha1":"acd6848a7711e1f10fb43685a548ae923b17ac85","sha256":"8c92552ae683edb0edfe173d65f8be8f6ed774b24423a3957239eae05420f8d9","sha512":"b63ee35301a3762ca5bb6b23cf4931677a559693a79183fb49c21bc348c720663b6739c4e73905c3587abb6f12fafffa2da707edd2c9577d971950f8ddbafb7d","ssdeep":"24576:t1KuCDROH8Ny5Od99mK/svrm+3OJ5U9CQ3A9y9jiBbg95GUiMd:t4xhdOK1I9CNE9jggKUiMd","tlshash":"c22512d68021f09237289574aed239d9aaaa406f5bdd07721558ece0309f4f98fdcfd2","first_seen":"2026-02-14T00:11:09.755878Z","last_seen":"2026-02-14T07:32:54.807187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":413,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/css2.css","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-26cd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQqwprKcejJPi00FT52ssP5K6nYkQzB%2F0KgSArLOHR9Ale%2BJooSsUAyRMchLXUUUHvWzJFoj%2Fr3%2FJDw2qV7Sx4JFQZBOCIR2DowOCR1RI3cCPqzbTaGO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb6a04b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9933,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f5660adf7f241e119722ec16b70807d8","sha1":"849d185a5fd945d846db2def5dbc0faeb97adb56","sha256":"3bd44511b314c855bd5440cfe3f57237cfbbdd4051bfb1041a41d456c0e88b26","sha512":"7f80ed95a6018d31efea9e520329a4666c2fd498b783256e24cbf97b6e1a90a99174ca5f4c88c34dd09634c070cfdffa0fdbb732aa300feae6aa49e5becdc937","ssdeep":"192:HODOkoOqNj+NjFoNjNEjeEjloEjqD/dwLVQ8Bv3qZOaoTjJ/Goz5:H0OX0ozz/S","tlshash":"d8228990097ba104ab972cc127cf3e37ae5de254a445da346bfe0488bdabc654372b5c","first_seen":"2026-02-13T03:08:47.191963Z","last_seen":"2026-02-14T00:11:09.768935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cc-logo-desktop.svg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /cc-logo-desktop.svg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698270f0-2a62\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zs0tsam888z%2BHjC98MxeepppSN8szdQcxvbIBRMwY0jPgg0IiSIp7eu6WRI%2Fy%2FimAX93IGCJxJhImrDOhjQnNb2dS%2Fhj%2FgrM2gIAQHodKJ7DvcMcn6aY\"}]}\r\ncf-ray: 9cd857fb7a08b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10850,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c0d60f45953aa99a3a122d64f998062","sha1":"9a327ada32653ab7cab6c87c9ead050bb30119e2","sha256":"2446313b1e6a8760b53fa2a9e0bfe8c798ce68ea6f91868bb0e78c675795c7ec","sha512":"16b0d838aedb2f0f42f9faad02aac5eb8eaa8ec7f7ca2a3a07a8102a5b5ddcb38588785d44957f2ec081bac70a3669bdae8ffa4fc647869826e31c89eb40a736","ssdeep":"192:/niZoHTbj3s9L9U9OT5FyLYJBkttokgckueKWrks2nEhFOlhy1WXddw8Hz3ttfFE:6yz3s9a9OTHyMIjgr7roE7OTZdw8BdLm","tlshash":"da2276da5770e6d856db9deeff166c9c7a0eb0fa9e7602c0815edb4924c3d88e409c04","first_seen":"2026-02-13T03:08:47.299735Z","last_seen":"2026-02-14T00:11:09.772826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/1inch.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /1inch.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 68461\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-10b6d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=va3aorZm8h29VeAXHYXQGqAEY8v1Hx%2FIixnUP6oFaIzyR%2FfgTtMPxeEpzcYqU0WJ6uDwCovaHmw2Po7DAgi%2B460RYC%2FZwfDCKE%2By371VrlMXnvitZK1W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbca43b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 243 x 250, 8-bit/color RGBA, non-interlaced","md5":"33c148a14c1c925a9bba0acfcd25f4f0","sha1":"d7de9dfdb4c0ca60020a458cf72e724584d6d9b3","sha256":"c51ee28358d9998b397876a2326f62753487de93772e8e8dc227bbb67632e120","sha512":"259cd172e8007bb5405208f11fbadc540c7983e86c05e2677ae9d029c2307a7c8e75c66bc9e45f20a6fd1448fc80221846d4c81772d49461bc912cfe8e7d0af4","ssdeep":"1536:Xg1BOGhVrBy+xsYsGJywqX4qG3s8chrz0ooRHZLMjXy6:Q/a+xsYNywFB3uykXy6","tlshash":"5963021ac72339fd914085eb1909c372bee0df111cdca46a8506d242f95ffe5a1da6bc","first_seen":"2026-02-13T03:08:47.238263Z","last_seen":"2026-02-14T00:11:09.774946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/crypto.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /crypto.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 8427\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-20eb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCPxGt44yvQFL4W1Mi7WkxFrdo3sYS%2B0iq7DNs%2FgpIinkEwD1TnsheFt3Sf3puhB6L9Hf4qxPEqsIfR6OWOF3zEAYLjcXQK5hcHvp7K5DjoqrweiDiKG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbda4bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"6775a0460f22eb06f159886f56e7c9de","sha1":"4c82f1a1b2909996f796596d0213d718b16b2c80","sha256":"f424888e65b6a199e2adeed5aaa2cd8a492de2218cf4bb94a3da7ddc2226ca08","sha512":"6e36a89486aad0fb520befcded59c6b1e63effe3d7b5a8cae46e8454a9d2627990142e5b4da3b465f590fd6f42d23a33df7bc9f284df130d53ffc83a7cfd465e","ssdeep":"192:ahzx1yYz01oYQPZAuENuohJg2wIhLtm09vkVJ9MccLc:eb5OoYKAupoNwIhpm57c4","tlshash":"9c029fc5b2a19817434e76114c866003c970cfda58a4f49fefebe0da04b6edf87ac55a","first_seen":"2026-02-13T03:08:47.170911Z","last_seen":"2026-02-14T00:11:09.776855Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/basic-attention-token.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /basic-attention-token.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-40b0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SncT8UTv5e5IqjrTrpzXA1jxpxj6e9ca9US1DaPUydgyzZ36Ce5mwTAAXCV1imvIfDhYblk34wIDj65pPtMIkd%2BXXCNZ2czUUL%2BI4BHdwaLf2cnZXGL0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbea51b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"070b8280e069c5bf8cc55086cefc0931","sha1":"1cff8df6bc04b06e83ac27005e7b4bdd409b2a38","sha256":"fb91b6640fdaf94a6416e1493097f50c99b375e751f03985fc1f5e5bc69441d3","sha512":"15603d20d017ca24b12532587f8de7d840481397b4abef1e874184298d170b94daa89ed807f1554627cbebf570cc0f52096614076bc250ae7945bf3594b5a820","ssdeep":"384:W9vJ6Erjf1AoB03KZD0RdF2Qt47vIM9fvgHt82r:W6Ijfi6ZYvv2f4Hbr","tlshash":"0972d1d4f2219dc74629b55e9f1c035caa22aa5e196e70da2f40856a8f43c5e1412bcf","first_seen":"2026-02-13T03:08:47.241401Z","last_seen":"2026-02-14T00:11:09.779232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T00:10:39.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=47UjM3yV6HXmtiR%2F%2BIY4zekwWry0%2BoIhW2VT7yqyyojayOAixb%2Baxu8o1QIPuW3dDc9%2BJfWGILSEYDYietozQNqvYTtQhjwEqxlJFqDEKI19qs%2FfZWSy\"}]}\r\nage: 75804\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd857fa1b1732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Yoast SEO:26.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110152,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"f49642cac1f1299431cb741c0bcb067c","sha1":"4c9e65cb7eb6de5752f1b4345241707b0f1603a0","sha256":"0cf527797a15523372154f491145f0ff360fbbad0e904f0f6fac382d41704fe5","sha512":"5547b89198a6c8c074c165b0d319a0880ff5e36a1325570b9c8ac87101dff316297fbdeb5bc5f315b0ef75310140dc73c1d95080f0800745d7a434409c65ac13","ssdeep":"768:cFnFNFAEczooNNMeUFDeCRC82RvCfmCudt3ZTyK2g2m2S8THy4b9BL:cFnL0z8GNUhBL","tlshash":"1bb3ca6154f6416b20ab80c87aa1ab0b6fd0da03c95f979576ed0bd80fcbd93dc6321c","first_seen":"2026-02-14T00:11:09.78589Z","last_seen":"2026-02-14T00:11:09.78589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":43,"dns":27,"connect":1,"send":0,"wait":17,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/trustswap.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /trustswap.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 4375\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1117\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvDYHIRx059t0W9gGTWgzEdP%2FkPQOUypdUmKGHnl69THTRhtTzLeZNlyo06IVj%2FM0BlvEpmGY%2Feh%2FmUv%2FhecI1LWqPcJu7p48aHRJ%2BtPObnCgeRRpWlR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbba2ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4375,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"169b53d2e50d1379d697391eadd5d47c","sha1":"66a28e7923d25617d8529128116a99ae637ca730","sha256":"fc26c4c6fb7829ae0f28cbb9cdbdab8eeefd7977ac908fbae161dffe1fe79163","sha512":"4b89ea242669293c332b6bca6b69213a09fce70f0f360723efda93fde20f56fa99f605e2236024f6a12a9fa2e3969d9893f181cb36d487cd7c7fdfe461f6b0ba","ssdeep":"96:42yKa7UlidGC7xrot4CU9CFPJn7XA3gYgD0DQJIQIOZV:A8ubC5U9ChJTugYgY8WQ1H","tlshash":"60916ce9a308ac11555d51541ecb8883fdb749d496dcf062bacf4f4158556b4c0ea0eb","first_seen":"2026-02-13T03:08:47.198853Z","last_seen":"2026-02-14T00:11:09.793841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/degen-base-logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /degen-base-logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-1a36\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vit6LgOT8jzUMqwf132jLzPVcwFoMcmEBVom%2FHo2daA8JqF8GL5Afsf9ifLCjWzHeIjZmAVeZ4pCcVXsKC2zVbFqCnLrxH4SwFWATND5MZAoS8ZUlKnk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc5a71b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83ab8d554c318d5bc5792bf6a1aabed5","sha1":"078f696677e305376b5680bd64f3112974ab2f8d","sha256":"c22912afeb0b94bc2f7c0a0b58b8a39e5dfdd1f9bef56e5ec964247e96222143","sha512":"0092e6318eef19dc498893e90376050d0edb91f06b1411203e931a927fb854e06cc8594b6d16c49be1094a0d2bf0a64a983e2e35490fae803e5b7e1d77a2dc8c","ssdeep":"192:gT9fvQHrMKBS0ULJOPXzyb5uKx4Z7e256rnoW:gTt2rDuJOLybU+4Z7e25xW","tlshash":"c2d1af395a01c1430e0641d6c77fa18bdf012c7387a6dfb0e21a879c7a1b9da06f9513","first_seen":"2025-04-24T10:45:19.393914Z","last_seen":"2026-02-14T00:11:09.795773Z","times_seen":11,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/abstract-logo-graphic@2x.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /abstract-logo-graphic@2x.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 19100\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-4a9c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HImqpTsswCctmrPaMb5V%2Fk45w2aPxFBd%2Bvxn%2Bmu%2FCP4qMHiTq2mVbySj44TTATOiOoCWLG91hsamVwcY2VHfZFdNbq9FxgKTy1yEobIbSsmriZ5Cv2dC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857ffab07b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1431 x 1798, 4-bit colormap, non-interlaced","md5":"f470c205f5ea057451b12eb9db4f628a","sha1":"bbf5b0e465c4f50af30e8e183311e193413d9d17","sha256":"75e8add9bbf6b552e2737c74bf44ae0f7d92291948a188d0a086cee0e90d2091","sha512":"0a8ce3268b470eac6c4b06dcb12b0bd15b7e5347d971fb35217080500c71f7023ae4b0bf6d77520829b4bf18830a6cf690a9889f1f4f15975a94a0033ef891f2","ssdeep":"384:kT6j2OLjaI/UU40qAM91VF410MxxDG3K/TJzxRJxBpbvj:c6j2OLRUU4Aq1VE0MxxDG3eRJH9b","tlshash":"be82e10fc11dab1a513d3ea0042a0884e59effbe6aa17f144397658987423f35f9763a","first_seen":"2026-02-13T03:08:47.173545Z","last_seen":"2026-02-14T00:11:09.798121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/Volt-Inu-Logo.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /Volt-Inu-Logo.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 24638\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: \"698270f1-603e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZMT%2Bie%2F43ADlFVHq%2FUCSkpB41NnXb0WWuvbm84RwfKURQ4IbB%2FyhAM2ZEXEFHxVrVNw0JQB7xECgqWIT9ey6yqJ7dtDtM2tm30GFCU%2B3OWWs4VOduL5B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbba2fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"33dea3180dff8713934a8e52097bc1e2","sha1":"2deaeaabf99263207a0bba7ba533a5b6f31bb01c","sha256":"5a1806af11d6ff70e01fee8e96fe49c743d0ce02da9675a9eb59570a5de59d77","sha512":"3ee3b9abbb417f65478bedfa282ce7984cd250c86ba111158beba95425b3d5348150275c16d17c6db2d9067182f36929dbda5de473b9f64885c706101d3bfd41","ssdeep":"384:iOnTxMpoSBVMo+rzr6zCTdaMTEHViTnweB+fUFUoY2kxEGLoki3i1YY:VV7eVMNnMCAMTTnwRfUAxZLoS1n","tlshash":"eeb2e1ffef909d549e878e90f0a2677a6f075b51689275d204f8d8760c840b72c98dc7","first_seen":"2026-02-13T03:08:47.14997Z","last_seen":"2026-02-14T00:11:09.800345Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/looksrare.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /looksrare.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-1afe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=deubJOVSNZkSSqP6f0Iaz9CJwN4bG6O5yGNV2t9Q%2B9Hm7FeQZ0iSUwcFt1a49n1rvzuiMKbMVa%2FK3k9iV3JRaZLW4pCFVYR3sBOASZknlJdfp5UT%2FL48\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbca47b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f13745e58dc761d6a87ac3f7872ac032","sha1":"f103f84e284af7097e9c0846fd2b1b7d78bd01d9","sha256":"929154f6c5b567e3927dc6230cf6c1bcff600d591fbc09c9447510448520976e","sha512":"d294457f16ddfc84495f2aeb8c0964ab51caa0262d4c9e2bc000a3613ea0ea00f1e5b33eab09b5c77e7c395097efdb6a78596ad69efd6e3f99cddcea7c0dcf0b","ssdeep":"192:+EeUfSN1ULei+FfU4dGxGvGvEsZqx0QRT/Sy:+XN1m+FAxGccfT/h","tlshash":"62e19e118d0168ea2d8f75e5ad9f4ff2b249b16098aabe7e051f45024318163770db2b","first_seen":"2023-06-17T15:49:30Z","last_seen":"2026-02-14T00:11:09.801959Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/StrikeX-Icon-200px.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /StrikeX-Icon-200px.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-1d4a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05Ae8sgSKIEKU2EvZAjagafzijrzkYO7wC9fN2B%2BEKIcyzp4Em3bf1tgArP7%2F8h3xPa4mmiUmHlar9YeOZMvQ8WSbn41kxtZeFZEhVA8iBjeTGxJx5S2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbea54b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7498,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d133357f14f4409c657646c3f35fd92","sha1":"7cc1fae771df64067bb4613604c16e6dc21b15ed","sha256":"93e142bbd47eb8b7950b9bb30b306a82b17197d4f0817ea0d951789c1ba70868","sha512":"9980149690538297e5f83e37e2e482055f33194b160a0949ea093d9361eb38832a8141558afbd43f9f78a8490bba9b592b6fc57fec1ded30ee20cb7c34766a55","ssdeep":"192:OhrcEyDkXXTckHlriS7usBFQDAsbIcaMIkgbrIA/k97q:OZ9yGTcMirsBFuAm1fIrrIiOq","tlshash":"37f1af75cd00ba00b40bf9d2803beb5949b45ee5dd41ce28910e7622d6db733cb04c6d","first_seen":"2026-02-13T03:08:47.171748Z","last_seen":"2026-02-14T00:11:09.803075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/avax.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /avax.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-11b8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mX2lkYFG1CeZuVw3InEpxgn2KeysBw3ci3HMoNDP3RDcoYzWr2Ug7OqMD8Zcy6TqwN0HvMgK28NoYzjdthTcJB7Qh7dkIU2UqyY1FwhkfCgJJeDJog2d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc3a6bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4536,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fca5a516c6936ca62a27e92068f9729c","sha1":"80a63151cc2c7fc9aecaa5f59cc403d7f6d4fd8a","sha256":"6b696d5ce6f81f473fed7edf62332b513eb7678a8dbb66d75e86d5ef57e7eb16","sha512":"0110a2660da89b8c02e4c1518b536ed5e6efc8a43ee9bb54bc54dd775ba78fbb64a627c64a9f36cea9607ff74ba8748a1fa152cee83d4dbde3e1a4b374474bc3","ssdeep":"96:P4jWRsvEQQKyCLFG4I9wrp8KUiNDaKPf95sCW93o+hq:P4CRsc6c9wrDD3f9Yod","tlshash":"a5916ce65be3f844af229b300741761259581ea24d657d03da6788acb7e81a3bb0047f","first_seen":"2024-03-04T02:47:45Z","last_seen":"2026-02-14T00:11:09.806944Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/rocco.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /rocco.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-98d8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltUFfcP8bW82KByYgANH4QyjomvlKQ6mcFD0FTPkfj6tBDETto6mUo5FpOb1QPp8u3MpVcgcAyNQzKqv5qlXZKaLP2RGJhndKpCFxHrST%2B6KOTkiOy7I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc4a6eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39128,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee633ae3a34764d878bfa8a8e038c869","sha1":"d8b9a210ba133789112f48e55364e2c23e478f08","sha256":"78928375facfd4d6d72ab4c98820daa63e5bf320bfccfbd77343dbf3e7c8fb12","sha512":"da6606d17a6f1efd469a1fa82be32cc1622610c578925be335e94e0e7cc85189afc1e7e1813f12ce0050b139a72a88f08121cb97b11111b237685cf197874dee","ssdeep":"768:8KECUjumdcea5YMytqytuh3V5NNtfrqLzHqtXIoc6j:U6ScpCptqouhl5NT23Kzj","tlshash":"8f0302197a1412309ffde08053bc7a358f27be5a67db409c25c3a8a66035683d6adb39","first_seen":"2026-02-13T03:08:47.140219Z","last_seen":"2026-02-14T00:11:09.807685Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/partners-graphic@2x.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /partners-graphic@2x.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 120542\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1d6de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTLfT4U2PLlNcIiSCimMsKbmbgit4dqWw0oGWE63VnZcm7NGeRfniJMbIBOOsVuS1gl8Nwg5I81VrKm2eHueW1FgMNdtJKqq8ZgQrWAjkjxlOHS4f0bu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fb8a0fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120542,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1152 x 1060, 8-bit colormap, non-interlaced","md5":"180b56b02715fb2e8f71faddfda73ca5","sha1":"dbc009a668e7a6173be222cf867a4bb72c2de95c","sha256":"e11f377f22ba42cc08e49e05a968437bb03b6a0fe7d056bc8aecdf76de2ece00","sha512":"addfbfc124f4ff62d82202912b1c8eb7f246293165661ca6fad00dea3df59ca5796c49143ad43b8efe480878bb9173dd1427f459bc2359f02a70550e6e8f8875","ssdeep":"3072:ytBxm6Ww9VSWQ1075nMMExlnwhjy3nh0W9sM18r847tmYF+l:yti699MYNXEnh99sY8TxFK","tlshash":"4cc312eca8ef562a3198c2114a104dcde4667ebcc3e185cec2e70f5e4176a4f651ac7e","first_seen":"2026-02-13T03:08:47.292573Z","last_seen":"2026-02-14T00:11:09.809552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/lossless.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /lossless.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 10627\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-2983\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYWv7fSWUIi2xPqqZwFx%2BL2C43QIvCnBew2APjscqdcyPqcV1S6a7v22w4NTGmZSdDpPnInTk6BEkNGnMV0ju%2BAovAFVNdcZX1xoapDSFbR46hRmRN%2FF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbaa25b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"1cb84fde207259d58832ae510c3b5d1c","sha1":"304614a9688d173da7ee07a0373ceb4dec09075f","sha256":"80db42a6ad3a9d05075c684290018189c968bf6ac2148b5a21e73ae8b2ad7c26","sha512":"93b830704b889e4b920890500fbd0ad65d468deb95755b27bc3236e689e78c8f72fd21886413240d10fe67d4dd5d9cb02b3c220244d321d5d57865a991e5c3fc","ssdeep":"192:eSzQhM9YqzZampEkWM8OLsUayWnAx68h5HZtkNGRGCNThlVzUyTHhDRRRRRRRRRw:BzYEXZampvLsUatnAg6H0NGVzF65","tlshash":"7222c00b1922c935c55510344dadfbbd2b11fbec3bf58a277c5a9c5866f7a86329480c","first_seen":"2026-02-13T03:08:47.143151Z","last_seen":"2026-02-14T00:11:09.810984Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/netswpa.PNG","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /netswpa.PNG HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 34817\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-8801\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 75804\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2FGg2%2B4AiUsXYsw1TZ3rHy1rNGMyOnkqY9z8qAi589FIjKHj%2BDzwMHIKj8hDpX5rgTLZPnvXFpiVLb7zJWxB%2FzKZYTyfmwLW27cOI%2BzH2A8lqOOhPUWq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fc2a65b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 231, 8-bit/color RGBA, non-interlaced","md5":"29244304e880adb23963e6d25c2c0159","sha1":"9285950e5d203b87a8acf8e04b43136763c58eef","sha256":"d71ef85ee172eaaba446ac98df514bbff0f8341cf7540ede81d77c69d9c02f8e","sha512":"073e008d449f9cac29698c5425d56e8f5b30bf671acf2de80a308a8f53eed9a8d1e595dc3246191a813a3d8b1d9ce2b4a59cada203df700f9365ca7f5622211e","ssdeep":"768:lRzl90O/lBfkxvWV1I25QFXP6IJXX9nMmDK14ynPl8e:lVZ/lSZWVx5Qh6Ix75yPlp","tlshash":"20f2f1e38d5cea4144c768b3eadbc7fc682d8e40454e02fa0a3226b38d255e7d71361a","first_seen":"2026-02-13T03:08:47.28713Z","last_seen":"2026-02-14T00:11:09.814234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/arb-one.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /arb-one.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-229e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75804\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uuK2%2F5v7jLwNxfI2v0%2FBud38V0iM32pWWYhIpbJXFEUSy3nhRps%2Fik56WNcM1yT2qH9AG3WntSqj5AWT%2BAiJJ7DiTOFUezwckDTsz6HUpBkAMTEfIA4F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc6a75b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8862,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b5633341c228d904ab85505199c9e85","sha1":"64c4061011b227cca56f96daa5de5f8d11012273","sha256":"e574c6565a6215f51a705d2b87c650b0664ccbe4a196b44a1ae2d1381206ffa5","sha512":"a2e95d4fc611330e33e1d209f25155026896a7501fe5571155ce55c9616045f10f92334fe0470b45a82a33115ff992b9415c0960b7c4997ec137d841e7b02049","ssdeep":"192:T0wCdC/Nua7xPXoMa57L8BAe+73NZt8PR7+U0sXJnmEVyx9Z:TbCiNua1PXoxde+73ePR3mNxz","tlshash":"ed02af63842b072d3d826d553750a4f8cd1c982ef46610e87d80cafe249f496e4f8c63","first_seen":"2023-05-21T22:41:18Z","last_seen":"2026-02-14T00:11:09.816312Z","times_seen":15,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cross.svg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /cross.svg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/child-theme.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698270f0-128\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5ejDfpgFJLdHr%2FhUzZYswMtJINN6NPn13Z%2BGtHB8WK1%2FHm8PGChZKNAtiZLhISguWRGok8NrE0ZGrcs%2FW29POBJsPPsOKMuZ5b%2FRJgRpUWEAIjv4wf3\"}]}\r\ncf-ray: 9cd857ffdb0fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":296,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"718235d4c165532b78e95dfc128d2d7d","sha1":"f1a869b00650e57b6543182a4f6aa51270db2548","sha256":"a5968fc9b8edb2d8ef1572d14e586302891717c0dee9dc1b350962d3d5d57ba5","sha512":"3a135cdf2505d469685bce0f6cd7bff6c50dbe617573b5323841c0c2999421d96e524ada124e9b7b382fd1f7d244199ff63e57cad507cbdd4371e0b61cdf7883","ssdeep":"","tlshash":"38e08cb4029d644c803b8f2aa9247cd57666b070700086df794eac21af0283ed81316a","first_seen":"2026-02-13T03:08:47.178944Z","last_seen":"2026-02-14T00:11:09.81734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/chainlink-new-logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /chainlink-new-logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-355a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWPp45%2BskHkyKqvnb2yf704pkxf%2B2oekg9zcLGlHd0HbkcjyGgf8tss3sXz8M2JaFv6uwiu2a%2B0FE%2B0xq1W1206cu%2FzDomymMCl4OXp6bJB0QJAZMlAf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbba37b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e407e7ccdf950bb5db8f831695ae3096","sha1":"67f307ddfb20603d3754c41fa278ed92facb6266","sha256":"790080cf6375d8fb4c509d35bbd7331301411d0d021bb9c4599c849ec8be8d67","sha512":"28193aef190453ae7fa8fa42df2f15c94650df943cc8c3bfe25e2b60c87afcb4651beeedbf051b325c1729bf829348578272bcc3075ae6cfef4b933f106b5224","ssdeep":"384:YOXzHGZeFQVKZxLw+TbC3obNEPK6iWVhE:YOSZeKQvXvCYbaVN/E","tlshash":"6052d0e66332524fc9992aeab5c15f7bc99b4e82cec525b7b4cc0e0181836da65142c1","first_seen":"2023-07-07T05:08:35Z","last_seen":"2026-04-27T19:21:36.558417Z","times_seen":12,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/roboinu.jpg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /roboinu.jpg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21032\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-5228\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKwqFeZvDOAhpFVlUgtOaWgbNGfoMS7C5984bzd%2Fm%2FxuQWFZ5JZikO%2FoOGKfxnILnOKDODw3rpsH9E7SKkAF6llWbhTEz6HwIZyrBI7Bt0%2BatfaMMOjq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbca3ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21032,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"5dc5fd965f9636274484fd594c001825","sha1":"3299d32379b6fa30abcca89d017e9a72bb4cdbc0","sha256":"3434002da9d4aeb7b3f2b399cd628166445602213d32d64955e6fccad6ede04f","sha512":"ec73f05a86c45606afa7d4d39d13f658a4d2f46f3b379a906a82605592a14509a700758e9f6e984057b236a60bd6578f2bcadb0e9299073d53b8124ca996bef7","ssdeep":"384:snnbOddW0PMZXliBNxzrOPUGqF/zfxzOggcpknaLpWSLad:Lo1cDxzrOcGqFtzXC4RC","tlshash":"4a92c1ab3bac3519f05d13794b990358b211af4002e99543cd3856189bbe4b2a4fdfd7","first_seen":"2026-02-13T03:08:47.309919Z","last_seen":"2026-02-14T00:11:09.822148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/wbtc.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /wbtc.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 15773\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: \"698270f1-3d9d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JkT7o57IZs6ljuyKj89VC3e0ZNNy0FsnxpF%2BeIVsraORNQW%2FtKAPtrD8Txj1mKRuW7bwLw4UowanB%2Bh7KTpepprwYW5jX08UBNvnSty8IxLjyDeyHwx9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbca41b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"bcbecef9b837f1c3d8c3f91309560025","sha1":"fb14de3c1689a760a810c74fdc77801ea0a111fd","sha256":"9fdabffa1a064b2708a498624501c716723f4ba67cdc0568476babef3854faf3","sha512":"b4fb3304df2d09f712b822c0ecf28dc3f6c2bab4baadf647a07bcf8b61c3d4373192926edaf33e25334d6753767420a0caed0b635899b27cbe2ca6269d111f83","ssdeep":"384:27AlGDqj+B3HBg9ZWItubD5e9or0sRMAjlAGOTN8xaq7mP:YRD2+xm4IIvWor1SAjlAGOTN8xaok","tlshash":"0a62d0fd95c82463700c9ac824845422daf649ccb06ee54aafd28977d91fc750add3db","first_seen":"2026-02-13T03:08:47.194466Z","last_seen":"2026-02-14T00:11:09.824568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/matic.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /matic.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 5307\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-14bb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75804\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTKODlwavMsuqdq8OtA43P6eCJHKSUCvDj9aBnTimHaSI%2BaCSjyYjzaJLifZJF4c7p74Am%2ByTrw58l3Ansf7xfXZrub1cAm7eAXR5vWvt3qcJm38xP7Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fc3a6ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"1375377eed7361b33c599f2d3255407b","sha1":"b5c3f4dc818bf9bf1f87bb7dcece666e0b0154b6","sha256":"98006cef1d0530d16751c54786d6bcacb580e3203cfd79d9a57375aedc3cd3e3","sha512":"1b8c93e788bb35c7155447a8f665761c374a63995d0b349d129d93560e33ca7053861086f6f050fbd327f78bd35aa9b1a7802cee70b3adc135162f23404994f3","ssdeep":"96:Av5nzvLUBR1ZmSTy0w8Fay/qh6xtJ/HnCgrFdx1r2DBQVvId9UrY2Sc:aFzjUB8STy0bQyN3JPCKF4DKVQd9UTP","tlshash":"4db16d936e026ed391ec76d12cf7e31b454e90c68de061751c5ec01606a217fb2e5ed7","first_seen":"2026-02-13T03:08:47.278954Z","last_seen":"2026-02-14T00:11:09.826381Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/fwc.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /fwc.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 1802216\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1b7fe8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rBi5XuoylkmKf5kSDAvXhyZyLlOKoEEVOIle6NYgprXPTWibc3tPCcXbDEirDtrsauTWbUeLxUA%2FaoIloKYR9lD41RAC3ilp%2F0apZXcBDqefPiKtCkYj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbea53b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1802216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2177 x 1988, 8-bit/color RGBA, non-interlaced","md5":"cf65133cbd0ac75a6e123f4347e5e7f5","sha1":"f3c20a71fb10764c04768a534953afcc6d46fd95","sha256":"3d463c8c444cfe43658c8927d22382302e8e4edf79b475c055424cc65951da08","sha512":"7d3abce0e19903dd5a19f9df949edc61c899dd39f51640a98cd08780b7a5f9642b25a8ce3a0d34ccf918d5ae24584a65404480ad40c3fd7ec77ab0f855921bae","ssdeep":"24576:YLioC7/B3arhfwIfGD0QpI2kAJLVEs9sPGi9ygvZVvK:ivkKrFfGG3AJJ3sPGyW","tlshash":"83252334bd819af5f648cd3e2e2256f552fc49d72e143b5b35849a1db80d28e8c432bb","first_seen":"2026-02-13T03:08:47.355239Z","last_seen":"2026-02-14T00:11:09.828566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":452,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/dogecoin.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /dogecoin.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 15704\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-3d58\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mawwX7Yrlm46Q2aFiQIxFHnJVr6vqD9xJ%2FFSMuzuCpllkarz%2F2V0WMs4HALQO8rXI8%2BazNMnbenO2evgJQ%2BhB4T8MyZZBYufKP%2Fc4uDU0oHx%2F4%2FU7O0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fc1a60b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15704,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit colormap, non-interlaced","md5":"d49807b910171ac2fc797c120fcd8f2d","sha1":"0b194450048a40e2200bf904e0130267987e9499","sha256":"bd83aaf135e56f7a4dcfeb8457b632273ce7e9ceb3d7aae1652610c4be3ede0a","sha512":"9faf47cb4aad836bce19e0926f471ad6f0714b7acdbb3e005163e27bc42ef11437af06aa12df288858f706bab100a30999ec58879a85c8145a7b63b6fd1e0d28","ssdeep":"384:JEdJRna2s94VZ6XcBRdrTYHfosbry0zSlfBqoEJ+MyvSO8H:qdJOWV7dHIN1IfdULwSO8H","tlshash":"4062d0ca51fac715b2110b1e242997ecd3171503dbab432dcb83ea957b4f42e0b4e63a","first_seen":"2026-02-13T03:08:47.17805Z","last_seen":"2026-02-14T00:11:09.830308Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/addtoany.min.css","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /addtoany.min.css HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-644\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOtaHS9QPRcLaw4AYMTEKCXq6mWbBopvq1FJJ3Kw3NVuq01gufMY63%2BUxKOVIMabWl6D%2FoZ%2F5uyApICA0A%2FGPhEFi94svxrTsNAZExHMLfhUsNmVAUOH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb6a05b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"2a489d28e2fc2088b3fe0bcda8417525","sha1":"af48dd19c11ceac12d2473b2b8e216da9d9d432c","sha256":"c19e3e4151ea4933fa9ba9703c51fe20ad469237771214b1c5001d1b107ddef5","sha512":"46f79ce0ebf4897749487b9180fceec67020429a6c6928bea7f4a0814422ef840110ed9e35b1e3d5b3ff040cde013b71df298d389afbbf361de70393bf90f19d","ssdeep":"","tlshash":"9c31698b939c86e4b463e17b1da912fc2c10f75a970315a5eb70f70c80cbd8c2679647","first_seen":"2023-07-14T14:43:13Z","last_seen":"2026-08-16T00:54:08.887499Z","times_seen":21923,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cultdao.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /cultdao.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-3006\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJs%2B28gp51NwH8%2FqiWrYJ7DBXa9HnD8ASAQT%2BhX9OCvUkDUFoD%2BNH4ICnpd09S3ksayvzq77fKIsLiJIeXM%2BMxriKcTJ5aZL0Mh7Q5jNAeKu9FZvVsq0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbba29b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12294,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a308fe8afe676b9663f04eb046bdefb9","sha1":"cbb5854c8bce43712338fd1d0bd65ef2013954c2","sha256":"09dceaaba0e6922730c6ef2c1b1f5204b0e5efb8e6e4d42dea3d28a2254c83db","sha512":"12f776e7bf81c8ba87f750f4e23accc49d7dadb3477c4f357446b5bcdfc9824eb0a2c43a9ac65373132cb0a7d408ee62a5fbf276305fdc5323986d1ea4375512","ssdeep":"384:HNsc2fKDpBrcuqSEM/FI0tymzyvcUwW4uPKJ+PgxJsm:V2f2/t/20tyHEfOkSgHsm","tlshash":"8d42c0e089733af8552f7b6da0e94074158837d1fbb4835d19e4c82c88dfbe1f626426","first_seen":"2026-02-13T03:08:47.273601Z","last_seen":"2026-02-14T00:11:09.836637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/partners-graphic_mob.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /partners-graphic_mob.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 35741\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-8b9d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3uljWTZm35GHOK3ubS%2B5si5wrbBh83U%2Fp%2BkjXHDsh3rnMg7xGRlMbeHUBGtXnSWYTmSavsF791HiMe0ablFAmdUkAsqR1o3Wbklyz99zjTGuIe4yl%2Bel\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fb7a0bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 677 x 454, 8-bit colormap, non-interlaced","md5":"fb9112ca0c46bc52590f17886b54a928","sha1":"ba73ccf5377140796ff796b57f4cba0fb6491f21","sha256":"e97fa863837f93ae6b3667cd47a15957aaebcac045ad093898a414aa831d7578","sha512":"b4059690c05ef3d9cf9940bef07a3f864e3346fd79756a38f854da636d864450c6f576d5b577e7c4dcaeea4d12f1f2d127730ef081ad6e8a40449b4cebdc61a6","ssdeep":"768:OgGMinJJg3OrDq+Q/2tzesFihyjrqt22hRYdsZ1lCiEo1Q2LNeR:OKAGOr21qesFi0ehRYuHCiEQS","tlshash":"fbf2f184da88a0754036bb8f8ee5932856c32345c33ceedd56f9e7919ccc5411c9bf59","first_seen":"2026-02-13T03:08:47.141812Z","last_seen":"2026-02-14T00:11:09.83858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/reach.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /reach.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-e46\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FDTkmwqbl0JyxcUxURdsw%2BXwTQX03yIwWeN7DUhtCTNaiiW2TziPDd40DXWkRavkv4eVHr4xBpIBEGem9cHAH2S%2FXqbwu%2FefQ6ZG5obe1nUf8uKG3Xn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb9a18b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3654,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43a6df5adb1c7f7c77075c0054017520","sha1":"73dcf3f31b19be420ba7718c3d3298650ceeaaf3","sha256":"78c876205c7c34fe9208fe346cf5416c62961078bbf5213e74368773ac371d2d","sha512":"849e886bac5b167e3240f9b8edd1b7245e882840f3ae78f44fddcc4955bcff61b62e6914a08f095f5411b95a39deb95b41b066678ed9c3951fc862cb7cfb8b69","ssdeep":"","tlshash":"33716d56aee36fd4f084883e8ca41bfabcad4af50060517ca17b50b5c3605bc0bb2653","first_seen":"2026-02-13T03:08:47.155699Z","last_seen":"2026-02-14T00:11:09.841401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/feg.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /feg.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-422a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FmvGM7JkxahAWkbbZuQdRqkMIOaqCRb2z0x%2FjK4mqnyQSCuVRiEuwSHfEMVJCdSdJgE%2BhH9pK5zfKAbVkQ8qnXN6xM46Z%2FccfYbhvGhcaAkJJ5DD5iVV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbba30b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47cf393bdb99adeb1a7dbdb273fb3a2d","sha1":"cf837a9c30ebfa4738ceeb4453e9ef92701c5cdb","sha256":"b3199eb0f5478d5fafd7b7dbedb759c4307caba388fb1d1be4b71cff0f9ea07f","sha512":"a84b7281d23b8ac75161b727796021fcbcbbcc993eddef30e3222163350bf8f04ab7098efa5812076c2aa155eaab08c5988287a379cca2ffb102cee38c09a25f","ssdeep":"384:k08c2FBYE5uB9DewbZw7rmM2ZL598cXlNrhlPcK:kzz6suB9DBlw78L0Sb","tlshash":"0672c107606385981dabddddbbc225079db202afba905ac4e4dcf988672d51e1739b01","first_seen":"2026-02-13T03:08:47.221256Z","last_seen":"2026-02-14T00:11:09.843466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/ft-twitter.svg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /ft-twitter.svg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/child-theme.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698270f0-320\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9qE0WMWhBZfrxYyfGAHVKTrwBtY2U2WBK5Q9v%2FyoVfuubrgMoldZYqeip%2FUDdZFIDVWzY7JrhvMY8C%2FsqAo8z0FKIaIVCh0mGbmjxOQK%2Bx2xCDYB96o7\"}]}\r\ncf-ray: 9cd857ffdb11b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":800,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"45315259850062372021c4f310233ff1","sha1":"c8f519f2aab82bc42488296e691f4f4529829c30","sha256":"fb35ee65750e9b67dfe1f4b96acbd8610a6f5f9aeff9605e38da7c4104ae26df","sha512":"c2f815a4c835721aa83e5b2b2093bf60e7375c36ce86309c0886c1d38e0507ae70edb01d645c44a8df089d34aa195c0d24858944fb5fa2c016f43b4e46336669","ssdeep":"","tlshash":"7901f1b622c54cbfb4050b46e9d4701690f1309532de09d8db8561162c05cb35d31c37","first_seen":"2026-02-13T03:08:47.289957Z","last_seen":"2026-02-14T00:11:09.845561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/dai.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /dai.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 12035\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-2f03\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHwem12%2F4VsoQPax4smmBrKSvkR%2Bho1BLxzbTLhCB6uNGe1lSbnjGT9GREplOJbC%2BKizT%2Bz%2FDZt9BhLGu2vxdANjEvEiiLv%2BXZUCZE%2Be199cZNnGGFaK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbca3eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"799f9c8a860f38de24a385d13dae098f","sha1":"486665299b4b9820bc077bd85ffbfcb4ea7b8a13","sha256":"c116ae860c62a4a69f4a739d8e9a5499042fc4470fc06d09a3281e2e4ab44fdb","sha512":"f7a026bf5d52f9c92becd365d886777c700778b5777858d1a69af9356908047fbcb8eb3042f1ac68fec021ab0735466a10e405013431c0ae2f3bb6287c441f39","ssdeep":"192:PKHCejokjzEe8mcr+MXT6hxc+Wa08TCuqUrVYkI5Bu+5lYd1dZ8UGdSco4AsdkG9:PWCCHz0mY69xvVq5Bkd1dZvrSY6","tlshash":"9142bff2f9d07a80600122511c79aa53e9060955fa4978bd9add8ec73b9bef9dcc3380","first_seen":"2026-02-13T03:08:47.274679Z","last_seen":"2026-02-14T00:11:09.847697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/IMG_0010.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /IMG_0010.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-4d5a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7iTikIkni7uHH6dBHXUc2i%2BUj5Bzhb14zZI6tXh7Px6np%2FiHu20N4GNqHA2t1oK2KQMNtH2ODRZybWiunhZYZav8La9w1uR6FfHE5aO2F%2FSPLxa4jzGC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb9a1fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19802,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0210d7c2ee3dcf6d9a2537af9ca7a32c","sha1":"6ff1cd9d0c4559e89b8cbfdd5f42078838443674","sha256":"7865168d2f6cdf31c485f3d6e671d8a8d72d9509dce1a57d874da7ad15f08c0e","sha512":"bb43bcc6e4e9ad846dbb8d5ca673eae37c9f0f0650cc9d486b924c575d1af228ab66d5b9c7a1e980018d4bc0411b80aa73c9845da25452e71ca4c1f2be6389f1","ssdeep":"384:BL+wsU+Nk3wwXQ3OHnES2nd9eGi3CLEn1nvxxQJ31n6zr:Yw4NswwQ3OnExnd9eGi3CLovxxQ5h6zr","tlshash":"a992e1bf15832d49dc8fe3b03a72bc541d28647e41a155829c169f037d5df321baca1b","first_seen":"2026-02-13T03:08:47.239244Z","last_seen":"2026-02-14T00:11:09.849524Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/New-Peak-Logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /New-Peak-Logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-3456\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGsukYwlMvaJzizdsgdYKW7QUb4a0re85YpI4f0CI3KBXf871NiJB1R8VpI6zbPs81NP6IcwB9uYUPrOWZjwBC%2FDCxSSnFCkwDkihTyvX1FOCSf%2B6b0l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc1a63b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13398,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f412bf7cee6de7d52e854ad44a6f3651","sha1":"74715305d5dcff6e146859ae6a6586a6b019b2cb","sha256":"4400fc63e04f116d515d0ab56bf966ea250f9a51235f133103b7edd8186f1d24","sha512":"10412ab3adde0997de44c1a51343d239f4ecf5cd05d53d5baf1b119dc34ff118224268f18cae467a749b12cca6babc0cf94dd785b08340a0262788ac144349d7","ssdeep":"192:Fx5LxnAWi+u1WRY1zHbacCIt8g6LDrKfSd+vpiitLG+lR5f1wQeK8lbrVd9lTZDa:L9RY1rqgxBRdR11v6l/VdjTRVbLnPM","tlshash":"b652d0c071d9e221ac22363b4bf26707d66c9276fdde54f906ae066fada18141327c27","first_seen":"2026-02-13T03:08:47.247008Z","last_seen":"2026-02-14T00:11:09.851164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/agio-icon.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /agio-icon.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-6e14\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4Nma7K%2FUHQwgxv1eCJ4W9VNqJQvIJRHR908aA8K7vxnPxRLdlcgvw1T1iG0n8haAKrEnBS%2F1EdwpjEcJGxxA6QaP2dppNPkLBFT55TIxYQjuH4Ztrec\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc5a70b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"71b83881c452fa57ca3bba4fa1c11cfe","sha1":"7611af38f530185d1afc8328753dce4d81cc851f","sha256":"2bc440797974170af7b39e7c14c646195555c78255a7d1c61305a23ab4234da5","sha512":"7756af45a3d9b5c9c9178497c2306f2b9fb65c98942255804aa62e6ccfafa67652f9ea055f993bdf1a6bae2495a0c0225244573313cfbd5da61e5d9fd23a32a3","ssdeep":"768:HVNRi5eBxXT96dRyiDHrYrmn79y4o7/NG3eq:1NRi5MxD9k9DHsrmnp0/o3eq","tlshash":"f4c2f1ffd2d4f9590aa3e863c0da09fb58596611108bb0438b5a6e5bc007ed6bb7b710","first_seen":"2026-02-13T03:08:47.190857Z","last_seen":"2026-02-14T00:11:09.852813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/m87.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /m87.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-2c8c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C3g0juNEvh86v%2FC27LZbc3aZEpphO4gDrPTTxFN7up1J26ICDoHWnWFw97KxfOxe66MFmqtYvoDQrkdJ8jaOs58z4rN9yNkCXHKKHkofkx0%2FGMUSnbVc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbba33b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79148152570f3d8f50a9eba04d108fb9","sha1":"efbb8d8e83e2cc41b662b47506809d8090a79153","sha256":"d3b0906ac221f11afe7372eebfc01efd8e1a64196fea75a1daccfb287910c56c","sha512":"cd5d2f272441e27f4778816138548896e10726168e422110e57827e56ecdd899872457efda347e4d5f322a9c5c91c06f6b4d7004c3437b86e127196c85235b99","ssdeep":"192:NDHt55NZs4zfTMndAfXJPMXO918lShJLjaGkGolkbEWTvUr9iMINg/5+0S:NJrHdfO6Bzr8kJfcJmbYsMn/U","tlshash":"3f32afa422f8f3dc1342ec1cbd55ee4bd71f4952105c6e78a62b8dd26324176a0f2576","first_seen":"2026-02-13T03:08:47.174905Z","last_seen":"2026-02-14T00:11:09.854696Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/usdc.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /usdc.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 4221\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-107d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOuWbTvEdVzfpXmnskA%2BH82WgTm8s4H95lxyntfgaIF6tMNQac%2FaMwH%2BPdzkt8%2FG84XKHN%2B78LK%2F3bPG6NeHO6b3SHvxC8ZdUpgqv9xdX3KHB5PKtToB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbca3fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"2a11c7fab65e3239981fe0fd9cb7b48f","sha1":"4e0ecab0c5c0e416573738aa4098c1db09a52fd3","sha256":"d0404690a508509401d7aa1078750a2c1773cf33c4e61a85bde4d61c4d03816c","sha512":"48aeacb9bd8412e96f96a69faa38345991a67cbcb1c6f4935db6593244f09a04b8f1c009d2217e4e825fea7485254e16ab2e22546700c1dc28e6c6774506949d","ssdeep":"96:42D9fggWyGRQJTpRtj3X7uCiHYZBtK+lTxWQ:NggrqQRtjn8YZBEkTxWQ","tlshash":"8c917db3f2725e82d0dac400bd82d016ad7b8509e561f8917edf88eb11682b2c8a5087","first_seen":"2026-02-13T03:08:47.270618Z","last_seen":"2026-02-14T00:11:09.856182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/wickedcasino.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /wickedcasino.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: W/\"698270f1-25d4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0M42RZll0K8HFUI20LNMXHN%2BUWKYLCj1%2FhBkDrwZa8cnPte5xgnlUX0XnPxvpPmOuHnJpOQLPMH5WwlqoDr46KhXHhfcVJCKVyciF62hWUsdUklKDPKt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb9a15b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9684,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8d82d0120ff3c9c06e2fd9d983cb8b1","sha1":"ae1c78a39ac37a1956d1db442ed45daffde43240","sha256":"8ba006b3e9377b1a517a86d18c8f57229ce683cb43e3cfc9e77b52ac612826d4","sha512":"b9e695ccd0ee8e837de0e62f1045bd2f3833daf9c6d6ccdd68b6678882dd8f7c229dea787d4403f56e3475282c08854d05c40d88e4ab19b0bb7793d5f0e22b07","ssdeep":"192:x4jHP2rxP9nlx2N8VQIXmZLuIaKbjfJTNnUUwflwLC3VjNtDR1lae:ijSXlruLawjxNiCe3/tzlP","tlshash":"0d12b075d3cd1ecb81380654f7154afd463844a0a810ff8f354ad18eada26a7d4e2f0b","first_seen":"2026-02-13T03:08:47.138965Z","last_seen":"2026-02-14T00:11:09.865323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/jump-token.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /jump-token.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 3670\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-e56\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75804\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zC3Ak23I%2FxCO35%2Fp%2BOet6MGPVeV8SdrpKvYkRwwuaoXAILcrJG2654oWgZoiEiQNkldFRNkmasUUlofDHtGg2dLtA3rtz30pHzCZl5pxCGYqRqZ7EQ21\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbaa24b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b2c3666cd1eaf5af70f04e099e44d19b","sha1":"7f07190f4686a1b5ba6e79ce3a2336a6e83e994f","sha256":"eaca955868f477b77c3cb23f379ba43233fd3a8bbce52427ce7df6a1f706222e","sha512":"35c93f0c881ef60ceffbc3c0f6172129b7fc140e3d320b2a8503853b8e2b9e8cb09827d756da35f1ad54a2dae61b57fca6a8708c49263869aec15ea6c096fa7f","ssdeep":"","tlshash":"57714c5b98e316efd3ea98becb615850157421986e261a83ef17d89c104bef10cbd2e4","first_seen":"2026-02-13T03:08:47.318418Z","last_seen":"2026-02-14T00:11:09.869125Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/kiba-inu.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /kiba-inu.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 77200\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-12d90\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NjpVx71HSW8vYzUtmNfvGYe4%2FMQhQblaQOzUEgsSwdCMDCL1tbLqdHp41xRY4juuXoj%2BQIrBhCC%2BirARJ5E03p2X%2FXC1PPR9INtJA2RkTgRO0zet0L7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbaa26b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77200,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"9d46bf15d604bae08393a7e95a71501b","sha1":"07d6c28c134781329266bfc65fa2c2c7c6f73774","sha256":"c92d81a75543e73f4d6617df4422d367cb08220022599f2baf142c22578ba588","sha512":"074ffe1737b10b0dc4d6d398b6a8263a44668fa24fb6cf84d5f10cd09f1859812b1f7af3164085602f2247eb3d93d262e0c0851ef7782c68b7f4f983feb63b3e","ssdeep":"1536:jpsD2a+m4iAT2ScWm0rmdPfQx1zweE+9C+XuxvW7Ef1/ADWjE5+YdBBTDvHUPsKv:jpsZF9ATDcWmC6PfQDseE+M+XuJWwf1R","tlshash":"ee7302e799181d1a848845eddba1ad38af5c32c32848281d72bcf2ac7cb45e8758e55f","first_seen":"2026-02-13T03:08:47.144061Z","last_seen":"2026-02-14T00:11:09.87353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/apecoin.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /apecoin.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-3c32\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVZRXFOWSXK34omg9YxAKWrq7n8b3Dz4sxneR7PBgvz4Xyu7CEWHGe%2FQ4D1gLFLwSU5EbSMOHNPKR4GTgSJVaU75hn3%2B%2BzA92TdrINIoiyTrtbKCNdb%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbba2bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8bf7578fbfde65c57eed120bee898d71","sha1":"df696be1b06c98f1b95230b34cf7cfe30f55cc77","sha256":"14b819d4f81e2ba025e517af89ac8d7338fd13230724d2d552072bb6fc946398","sha512":"c3eee9ad076bd24031eee10db2cbbf459e4d04771a7d6ee886b0cde4e4b65827b4f7bc092f298df0fcd8610b8b7cf2cf89404137103ad743ffe2810911e68e09","ssdeep":"384:1YGs4yG8uZZ9yFK6pb6A9Zw3MOgqnlsmYeYeukEs+MZ7Hfz:uG8u5yY6pu8ZQMOTlCeYeNhz","tlshash":"4862c071747b2ea37bb1994e08ea79419bf8d66cbeb06a31406c8b50dcd4e441c943c7","first_seen":"2023-11-01T11:50:41Z","last_seen":"2026-02-14T00:11:09.879457Z","times_seen":5,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/tether.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /tether.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 2712\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-a98\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8msM6lOtdKjRazX3hrV8KFaRvqDIfFqN1MvimsRhJ4ZZHA%2FaDbXIKRvUiiYlg01bv5ZfSddZOFKDhqepO1tTq%2Bgfgm0JwIuv5kw3%2FbOXu9Pw49i9D36n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbca3db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"d2a4cf25efe824ba35ff6141edd87c03","sha1":"f00bb9940be73fb5faac1def8d525d3122a76db4","sha256":"162302b593e606bf488c549d7f92068d327b40d4c45decdcdf9fd483b06b2691","sha512":"bfd9c6710c23a48364f1dd92f4ca1f706d612f8a2d0c453f994103eab9b37c31dda0185665587da01e51d151be8f5981bfc965e8e377c625b9dc0ee2833662e4","ssdeep":"","tlshash":"1951297a9e552cc0a74b84de04d7942bf397498096d0fcca784ad83b47782b9cab54c3","first_seen":"2026-02-13T03:08:47.326154Z","last_seen":"2026-02-14T00:11:09.880885Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:40.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /pxiEyp8kv8JHgFVrJJfecnFHGPc.woff2 HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7900\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1edc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2BeT%2FRqmKwFEqH9RookQ9QphPDuot8v6anaLse7K1qFzhVBY967xxi3cFXlDd3G56NKKS36XsnZRS%2BrwRH80Gijb3KnxbRH7WZcXEA6y3yqkbNVdgO07\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd858000b24b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7900,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7900, version 1.0","md5":"43751174b6b810eb169101a20d8c26f8","sha1":"7e48d54b1df1d3f657fc90227590308183ff9ddc","sha256":"3dc5d0c52428fe1696264907a1054ebbaac07f8cbe45832c105f819c2ae397c0","sha512":"a56307976583f9f0dd41ea34a3878c1fd69d5f89577664c350be014f6485da077cecf03f315104dc00e3cb0b6036d9b58e602ca19e963bf500016f090ca80ff2","ssdeep":"192:J2+QXwv9y8UEem7iQD+hqsNl3ahSFsd8Rq0s+Hxf49:J2+9vI8XX+DxrFe0/f0","tlshash":"dcf1bffef23115d580b66bb6c307bf24d9298147fc772608a61c6978a4e9f0c194cf0a","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-08-16T01:09:36.739046Z","times_seen":25419,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/w2UiemF__400x400.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /w2UiemF__400x400.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: W/\"698270f1-942\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQFqFbgtwOpllliXfsc2TmYax7ndPW%2Fv9WQhAjREdCy9j5fNCk3D8QbxsQ02jxAlD3sjZPLpBb6peDTvpnMSlqc6tOsoERpG4DJAsn5%2BECSiXLPzSzcA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbca46b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2370,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bda7814fafa4699bdd2cc0d3e9cf85e5","sha1":"efea4f7833131c95591699219a32b1965392fe14","sha256":"7f1d8b89260039f23f583e54d594cd55d422880106f4d091d9370209fbbbaba9","sha512":"346fedcfc66127427c176d0a79b5b354121de437e405ce40f3a8919352fadccb7df04baccdeadd7c32a7ef5a03ea08bde9730bf804fb00c9807089fba31efb4a","ssdeep":"","tlshash":"81413a4172b2c994c81e32af8c56f0d2c804ade754e48705d2942c9b96e03f6f3ac2e8","first_seen":"2026-02-13T03:08:47.215431Z","last_seen":"2026-02-14T00:11:09.884628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/rvlt.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /rvlt.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 16715\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-414b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OdNK6SKXsJytMZrwX8s0N04TytfSqN3PusLXd2Vr6padnbsNodouoHJpxGKJ1dd9AD3Gviynx1AdP8LYqZgRkbCCpgTfId0ls3HmCVaToJSPGRU%2FEePC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fc2a67b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16715,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b13e22bba810fa26c37cf2774a0002cb","sha1":"2b79455d5b9cf8f0f3024e6ecd835f66b09e8cc8","sha256":"bd19149aeb87e913bed664484068e5cbb54785ddc52f3b8f92175ddcf3f60027","sha512":"bd90817b5d0ddc1f3924645034d47f1c6301e4df59e4b0cf99e4b9f9216a15062e0f849a1a04375d01a4fd6378962aaa902da115e9eec9119f38576308fde06e","ssdeep":"384:GFkZOzpZODEJFLfuHR/s3NhHBPdMT27GCtNo4Vq+b8QzEn:jOWDEbWx/A7hPdMTyGiI+b8Qgn","tlshash":"df72c03dd3ef79c8dd599c25397752b2b38695a38742490ba1b877ad6acc4402bc4036","first_seen":"2026-02-13T03:08:47.248012Z","last_seen":"2026-02-14T00:11:09.886384Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/anonfi.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /anonfi.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-92a4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQbuRdu%2BD0GHQ99aUoTkxZJLxZm747RH8L7pTpCuu8PmtemRPg0vH%2B4uykOj0mBz4t%2FjUMqBF8j%2FoKXskcrKGu22Wap0xWuRcbn26WY4U%2Fz7ZnRs8mIH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc3a6cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1e2aba3811df9b3224e5676d3702c5e","sha1":"2f40f5543200879f01dde38c7462ff83ff5b8540","sha256":"14d430d4d547e596465b544c7b4dafec2dfd051d3da3aebcc246e93516ce7d7c","sha512":"52f44a14a3b4cfc3072fffb4949389920671c1951d0161a8987615eeeff81b2db30073d261dfd568d125136066a267846105ef381c69bbb1b0b3458e58b90e16","ssdeep":"768:PuM9sGsuBlJpNFwco67Y1eDGUawfDPKUogqDYKtTbyebpeL9AC1GwEbP:POCHpNpRmJUVTzUYKlbz1epAdP","tlshash":"f0f2025f24411c140f837a4d160a3ba85d68dbf65251048e4b6f9fc8ba0da72ab47eff","first_seen":"2026-02-13T03:08:47.329073Z","last_seen":"2026-02-14T00:11:09.890811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/tron-trx-logo.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /tron-trx-logo.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 13326\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-340e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95fUAK66q7KTbbey8wTcOj7JBoNlNkv5KY6HSBhZKTB8bVOzLMYUZqmPpzOw5nHpWna1MDiY8C3n8Vbdkb53e2H0Pt0jOby%2BFYn3D6W%2Fe9IYw9Bb%2FRWQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fc9a86b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2152c5e245ad9c405019d047596cdf6f","sha1":"c5ce95e4581f124cf642b517ddb1f528bfd4b783","sha256":"fd2d6970369431afefd67902b252edfafbe601e62cc96a422071750ca90bbca1","sha512":"2d7b878e23f2033d7a1f63e2453be461d83cadf85c6d200653c431d3e445b638f767261b8b423669880ecdf339d4b81c05c015b98b8e60ae78ad537402671d54","ssdeep":"192:HdDfvlsNEfrn5FH6lZs3kqGV6NJSIpqGm4J9WA/AxCOTY6jq1FX1TN9DPEOivZ80:5HfdFH667jIJk4I0j03DPFB0","tlshash":"8152d0cdd64205229898bda24c37a1aa915e7cecf0d4f93690c5c87a6f4557cc017dcb","first_seen":"2026-02-13T03:08:47.165206Z","last_seen":"2026-02-14T00:11:09.893414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/index_1.html#type=core\u0026event=load","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 45\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GDXrS315ohttaQFAXC1wxl45cz0l0XOWG4ybRLV1Gsegb0okWcXpTIwF8RYEPLjCwKeMfKxp3216LQ9SxpGBMsas0i6OU3yvemjtYIHD6w3kwDF%2Bpsk\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857ff9b02b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"197f330e8c923233eb475abd16e1a819","sha1":"b90ed849d939757e2ae8b9f1fde4296c1ffeb244","sha256":"e552d138635bbb4fbe10be0e74345cb3f359ebb4ba1ba4f5eea9d154039837f8","sha512":"5863d6bc1fa420377f00436e60fa8764268dc386d3797ce0ffe675877adb7c01380725701a948751f23dcd89e9e0137e7adccdc6aee2af40f1dfdcbcd5b81198","ssdeep":"","tlshash":"82d0eb93dc40680d3a0053a0cbc6b2d8808bae6cbc882f20f0693a8956d0331905234a","first_seen":"2025-12-02T13:22:34.725688Z","last_seen":"2026-04-07T01:05:32.880702Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/abstract-logo-graphic.svg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /abstract-logo-graphic.svg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/child-theme.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698270f0-970\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Hv%2BOL68nxJiMJ3kOUm89SrqOr%2BOWV9GzCMKsYXvK2FJTbUMP6s%2FUqjj6x7PIVG0RSx07aGLR0Jaoqzf7MU9cEUvWggCml8CMkNOUOxag5a3kgMzfJCH\"}]}\r\ncf-ray: 9cd857ffdb12b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2416,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"efbe7d900f658690893c4d3ca797dd6b","sha1":"48d711039510bae5f48a3badad22932fdd3c97ef","sha256":"2dedb63c14ce9a60f37558237728d52fdbe5b19436545b12435c768dc24a404e","sha512":"70a1f8feab068e261a007f9910a887049a6a702f6b1cd2c4e9f9d1d516d023880205b29776c71155cf85dea575810556286c3ed1312f990f490968ed759423d0","ssdeep":"","tlshash":"af4196caeffc96bc9cc6836f36345ca82629206e39234658c79d8b482247c298d148c9","first_seen":"2026-02-13T03:08:47.348915Z","last_seen":"2026-02-14T00:11:09.902123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/styles.css","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-b83\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mUFcGOymTNUYLSDtsPnNEsqERUcxvCc9okqJEfcriOWu%2Bu3LKBGaBdgrQ7%2FZRYaH3qTxOiDkV7XTJyncPjVQ%2FGcrbUZlifyy6NxNTofHLtyk3jDz1rCl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb6a02b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-08-16T00:35:50.584179Z","times_seen":139762,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cc.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /cc.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 4090\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-ffa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9bdISZoprvFFhI2OJeeZS7jyZFcBVbp0Ya2RixcUBf2IGbEjWzDTuWtQQCgON6zzCNG3Pnx9rb%2B8PuOVIliYTkG8wErqcLsTD5CCiScIBWem5r8hp1k9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fb8a0eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"e6c8c4f8bec55299213685eb9c7725fe","sha1":"b9db4d9d64f5ac2996cd49d4be6ffec1e6079898","sha256":"2bc7f1befa9790c7d7e06e53b926a68f0869db1d04ff65dfa7e235fd707032ad","sha512":"fc04f0e086fd802e4e3b760fd7b37bc8961f32a82146b7bcace87a0278f8d32d8d52496d848dc213e1d76139efc319f2a329df4a0edf2723375cd825c37c1188","ssdeep":"","tlshash":"0d815c5fe630ac501749dde6b88411239920008253e8f2e69e9fed67ce764f1ac8cdcb","first_seen":"2026-02-13T03:08:47.157187Z","last_seen":"2026-02-14T00:11:09.906403Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/blue-gradient@2x.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /blue-gradient@2x.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/child-theme.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 101114\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-18afa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKhoUQD7k5SsoA08GMtWoDsVjTI9cR3RDZbLg7kUhFZBCOEGYHO06m%2F6ibu6mte229zHmiOmGesU3kRaHmJc8gsZ4M4diPWzq6xjGAqg0qacUVRUktrd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857ffbb09b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1870 x 832, 4-bit colormap, non-interlaced","md5":"df2b677d7ea2f7a240443fdab948ce59","sha1":"a238ba37c34672fc060d92e3dc4b88c7907562ec","sha256":"051414f55beb14e17c3c46f119764b4f0ddf5a599701110b86de6de9925d8ede","sha512":"fc74a313bf4787ee0e89c9d34def2bdadb04cd88ac7eddc0c5bd6b8ba7cb6256608005e77e7a3454a5357a9343ee0658f7e4b495e7d3fade12f8c8fbbdce4384","ssdeep":"3072:eKqdt24i65by7nUYe8kyYs+rqncOA3zGD:qriob9Ye8kyYvrqcRzGD","tlshash":"7ca312a186f4dc1bf63feab4830d671ad4391d96f10a20074bfcad1a0968878710de5f","first_seen":"2026-02-13T03:08:47.134289Z","last_seen":"2026-02-14T00:11:09.908617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/axie_infinity_logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /axie_infinity_logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-56fc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LV7O8Ju93Y%2FvcBBYlmNRM7U5RSMtpOkMvCaUYQMYX%2FY0HAJ%2FBSS6kRXzdSr4tI2eXzeqJEBCm55oAYgGZV7RUBV8DvCsJEba0iIUKwWRDWlEYO%2FYbNJa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbda49b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22268,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6387ff2638408d01c6157f9ef8372e84","sha1":"a9e1ad5d0cae8f2b2ff0f28da6380b313df5c01c","sha256":"e289fa64c4a9144bd184e00d7a44319599c355dfc8938f940b353e8236825408","sha512":"3c1d28b53c4b9d9ca9a4deba6f92a8b9a7c28aa14fff7c04e72a5c16cbc24f1c4eb690311ff9477fb0e930008dcd270a38fb9715ea4856b8c164b791aab87047","ssdeep":"384:p9KzhOQrtRpyBc/8Lzb1R3DA0WQPdMBdQWnCB1pWTJpNQuFU5MzCCii1:czrtRMBBx9M0FKBdQWCB1EJjpSKzCG","tlshash":"71a2e10c6babbf0513f844aba0f5716a37792ce5d1905f5008a29ace73ab54bbc41cdd","first_seen":"2024-03-04T02:47:46Z","last_seen":"2026-02-14T00:11:09.910617Z","times_seen":8,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/toshi-logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /toshi-logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-320e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmdrvapSiIUL25sUTw5T5WHSyONYwKswCwPfJbFg3O4%2B6lo0VkRp%2BtFJAirM44ewjf9A3cjvm7WbnPrwrTWvusJq4DUyoUhkg3jyY%2BH18I7CH8AttTn1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc5a72b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9608c01886d6e21019997763607542f0","sha1":"732a40a78abdfd783d62a3f6621c9f90f4f958c9","sha256":"8a503f0ccb014c4749f3356160286f96c85ee25b4d71472f9c0b16d442e035e7","sha512":"7a6bf5a4e3396094e05e2d40225886d2dc89e387b10bf7713b5f4bcbfa00f14ba79fd20e675645cd5f85370032091d33e8d84496eec9e4dab128dbb88ac4118b","ssdeep":"384:JZ2Q9l1zy/JyqBTnUeRG0YejJYnc6QFmvY:V1z4JlLU2Ytc6QFh","tlshash":"e942d02be7b51fe9e92c302b06f32428f6d40794b34b063817b239400e7dae424583c3","first_seen":"2026-02-03T09:42:11.095439Z","last_seen":"2026-02-14T00:11:09.911393Z","times_seen":3,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/pengu-logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /pengu-logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-265c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75804\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AgPVTFqnF%2FkazHV3dhTv55qBtFK6Mw6gruMjuVH1xYDXyyAf4scqoqnV5XQf9jiNr6ph9ew59Cj26lay2F8nvnSFdlggENpSzB0LQsHMLv788NVhh2wu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc9a85b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2626cf0681bc70c5eb183e5bcef00436","sha1":"de03fa5c2e653e462bf84dcd7bc9df59e80a81e2","sha256":"1c7c5863a8f77957e8a841490a6c07c13195d7b05e47c076c0389e95c87cd118","sha512":"ee37bfc34b2c92bce1c0525a0cd5bf4eb77f73eb1aba8b01fb6a34c7db6f07fa47597dcb9d96ace4f2e0fe9d51e31f31edf9a649504cd21ecf5098ee085905e8","ssdeep":"192:BKXB0tIcpsFcRLw485JEyjrAcGwIFn9jF0oGA0vOji517unFKpJL9Vk2FsK1:BI0tLIOy6pwIFnUe0mji51yCTk16","tlshash":"1912cf25a64dfd579121769bd5915398928d13a82fcba007c3c8c398c0dce92f076fd6","first_seen":"2026-02-13T03:08:47.15393Z","last_seen":"2026-02-14T00:11:09.917033Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/pxiByp8kv8JHgFVrLDz8Z1xlFd2JQEk.woff2","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:40.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /pxiByp8kv8JHgFVrLDz8Z1xlFd2JQEk.woff2 HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7844\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1ea4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FWj6x2NBAsuIWL6Bngm9PPdhaJVHQD8q9Fxn0rIPoG2Q2%2FSDYO1zJxYyuqTWCb9vUN%2BOW2t3AgTOZOpckPS29YkfXNl%2Bjyspt9ZjmC1cT%2F7O2ykKJVL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fffb1fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7844,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7844, version 1.0","md5":"42d3308e3aca8742731f63154187bdd7","sha1":"69002807427be874f7b46a98f8a611d2c5c5f52b","sha256":"643e38d8c288a1da34a14a68a5012441929108d50054414ce8cc33fad36a2354","sha512":"46957d6daf667671f237dbbf941f1c1328ee14afc5f857733ea7c39b49f95c128349e2c73411fad4a9cd5388ebe97308540731ee88acb3a0b55323dd7c34a54a","ssdeep":"96:HTaQVtWUhG/s9I7WN8HLD3zqFmsGhViQYW6kELhq97lP3NeU6o7DKKM/J/EMhE:za1jZ0iLD3eFoiQXuOZ/J6YKJli","tlshash":"e1f19ed404890d10c552aefb7657c4be6a709f09507af72fe03e38d2b933326341ab16","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-08-16T00:00:15.997581Z","times_seen":5210,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cropped-photo_2023-09-25_01-14-41-32x32.jpg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:40.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /cropped-photo_2023-09-25_01-14-41-32x32.jpg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1042\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-412\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f50dn2uLy%2BfGI7g80I6R4pHIDxggFHjUKlDsCyaD96yTYgzGmPmZ1ULncHQru5%2FtMqMWMgPCiwA3wAQfGRUYrQcZNAdTaGXICSh6Py2L%2Fe3t6IeUKR9o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cd858007b39b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1042,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 32x32, components 3","md5":"b2ea789a4aa00ec25df994f041b06e52","sha1":"ee3ba6eba67ebe4e8cde9996f5146579dfa27381","sha256":"947512fa18c52498fc1fbffe66e05a94c271cadeab40bb64ee8d02a79867c18c","sha512":"6b52ae32141951f4f5e0fc847dca2b1e872bc5bcaa4960560ab994f7e8cbea2776b4104a6edfbd66bca63300f86fc4d4db3805d0d23cd9c85ebf53fe196a25e1","ssdeep":"","tlshash":"1111153b63504bced4791f7c04c05786e7647e22a957666e92b0c3391b289c40c2c617","first_seen":"2026-02-13T03:08:47.172636Z","last_seen":"2026-02-14T00:11:09.920286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/three-r154.min.js","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /three-r154.min.js HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-1246d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jZLahZXnvALZ6oE1IdKhXbE1pwkikYhlunqyl1wJmnw26qTFNNusBZ8lSDgsmdq9%2Bj6gY6WyWO2BZDdmGxh9Opaep%2BU2HdwX%2BHWOs0rgTvNN6IMyUyT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb7a06b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74861,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5f6d9f20f8ad8aa937879a27b27cf47d","sha1":"b9826f15a2c8e84c33dcd62fbaabbe2b11086a7b","sha256":"610519ddcbecea143647b9dd066aea4cba892a7beb831500ad29d6fb4c0a888f","sha512":"0f92cb98279b688dfb61609c355cbc1b281134fa26b3be349c6e9e47a6142dff3ef2fb4102b5ff8c42b5744eafd066d2fe1a8a548bf264165717247eaa2b1ae6","ssdeep":"768:lu3VLctT2CmoTYDaGI+Vs9bCk2cYGJLcwcj5cTqYUb4izAg4jUNiOwcGcQcWc2cH:/26GxVE7vgZ4kuds2u","tlshash":"3d7382d9681bd0d48e5620ded473e805e4280a23cdadf2a3a67cdec1745ef66c48763b","first_seen":"2026-02-12T21:20:14.378178Z","last_seen":"2026-02-14T07:32:54.797733Z","times_seen":4,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/hoge.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /hoge.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 48147\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-bc13\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6Y4jRKbrzwwkcxu2QRNN2BjkS%2BoON1Vugbmxdt%2Fg8lPMbSsaepkLDZ3wZO9J5s%2Bv%2BHbpOGY3NN9WH%2B9o0egCzwTfp9Z9dX04Z0zn7ebCzoRehHqexBj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbba39b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGB, non-interlaced","md5":"d3b4cc1236a4a9d2564031ceeda8316e","sha1":"2fca3e8c05b1a24514069d90a8ee1b450af662db","sha256":"4ff98f17042cb8f56f97a5842f68af0d63b00c8c4150f2ac244d59c6ce79cf22","sha512":"660ad59edb255deb1527c4a1ce3bd22787ae8dfc3d3a5c916530ee1d72090762270c8c3810b89951abdb848ff64eb8ef758f2201ad3668afc4bf7c42999c1e91","ssdeep":"768:LO+6EJDkOfe6bagSbgtMRFq+NgeBEBTtal+pZxzyBefAIScRV2wlpbEn:pHSbl3NHEGUpZWeicRV2wwn","tlshash":"082302c9e5d461818ed954918aff27a8e292c5e3cc7a14e715f6103037763a3530df79","first_seen":"2026-02-13T03:08:47.175933Z","last_seen":"2026-02-14T00:11:09.922763Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/yearn.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /yearn.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 9201\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: \"698270f1-23f1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1OJjOa14UUggKuUBvuoHMy09ZbD0RutmowhWqu980MatxG%2FcHDnv%2Fz8M4tnB2AkrAL79U5SEwyWZ5iRkt4QowXSU7dGkjH98XcgRCjPoIn%2FYf3007iwS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbda4ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9201,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"4a03756bb5780d4cc922c6eaee11474e","sha1":"b64a1f1d1259b0526e0e68a38dc3635b08a3fdd6","sha256":"ba6eb4b3977c589e126f5d772d74221f2e5b1f30f56d298ae7bf2a314d6471e8","sha512":"919c6169c33a296b7811e7b1f2e9168ff5d0777495fe3375dc009179665dbd63757ccbbb0d9634a718cff06eb901c1ebca783014cb79bc8d36e58380e84c379f","ssdeep":"192:aNHzqySbdGEK5ih7M/BSVSlPhjuEoILlx0KoPhv64zw9qbwN:WmySw5oMeSlPRpnghnw9qb8","tlshash":"e112afd9b6a099d041796cae28fcc6b21dc687d0cfd69132fd96c8c1420465180c1acf","first_seen":"2026-02-13T03:08:47.345388Z","last_seen":"2026-02-14T00:11:09.923781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/wbnb.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /wbnb.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: W/\"698270f1-109c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FwlhJOTWJJnKXPwobCv3eRhhni%2BT3fKKNA%2FA3aO1Q0kcNJ8CAH4AuBvsRMhHVjrDmga16PIVNjMGMnoA8Sy6o2K4y73i77iNzhoQn8cKzcGyFu5AdN6V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc0a5db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"439d24a3f58c640874e4ef1fd3362b44","sha1":"92d78e7daff16234d3a4fa756b78c56978bd20d2","sha256":"caacbc9481d79e85b4e131b38856d5525c681334248276716b5cd0a108817c10","sha512":"e582765da66c8815f147a2a2abfc2e1cce00924291c3cb1e9f15d000d18eff34676aa1cffbd29963237daec7f7b252669e3f269ab710de34334715ecc024b9f6","ssdeep":"96:74IytfVKgj5gXfivlaAgUu8a4qZV+fnAr1jzACj:74NmX0gAgh8rqvynAxjzAu","tlshash":"9b917dd71ad2ca8549507440be93c56bf6ef8f2b4a050b220c8ef0b9531cda7d385b07","first_seen":"2026-02-13T03:08:47.176829Z","last_seen":"2026-02-14T00:11:09.929968Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/jupiter-solana-logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /jupiter-solana-logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-83b0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCuY1Gv7b1MUAkM107ziiuYcCkRdKIGXe48UPUr8Y%2Fs5U1bpKNOgjlus6aCbHUY1f0%2BFAlYbbRQauKYZho0hNogF5Ejl1dESKe9qFk6aOUZFTz4mvqnw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc9a84b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e88d4803f69d5049c3dafea9e9ec1ebb","sha1":"8a8688dc5fb199ddeb69a103a2ef857f050b4e6e","sha256":"3e445fa1435e25424521635dac73bfdeac1d6a40af751bad40cee26c64a3b06c","sha512":"aa9a18087a00744de9259e34fd17f08bfdcfa9afa6cef047b761563117af649a1a40b8a585dc0028493a9d5e5ae56598dd2ed4d3c201b3f1917d4d7e279842a9","ssdeep":"768:mjS/DcCiQtEArHxFaOeAXKX7clHuv+WxEM0npi1SyeFp:B/eQlrHHaE+cGVeFp","tlshash":"82e2f18e6162531a38fbef4f1bb7616e14e630596234ec3b1e4c5bb11139d502c8762a","first_seen":"2024-06-29T12:42:59Z","last_seen":"2026-02-14T00:11:09.931474Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/header-gradient-blue@2x.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /header-gradient-blue@2x.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/child-theme.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 292335\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-475ef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Bv1lzJ%2FTX1EsB4iohnxf54P7mjILYCd9RAP12WDILBPIO0s4bvD7UDfyklBcPL2M%2FrHbZi%2BqhvrKR9Yn3d5HzBy5P9emk8Hi%2BloPnw8r%2BYwX90Rx27U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857ffab06b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2646 x 1381, 8-bit colormap, non-interlaced","md5":"d9e32570adf016ae3757f7678bafc300","sha1":"7e2b00449e5c8940139811f3fdc5a4875eedf797","sha256":"5e4347563d25d36684c2d3b18dca59fee5ce2fc59e82531090b0abce831fb78d","sha512":"ce4c8adda5156b272142109d2e2b4071e943829e41f6e3a30670c8847a2fa505b93ff91a4b74d1e75fddada711c43ef6985c8975f401cc7fe66b1ab9491db8ef","ssdeep":"6144:9tVGh8qi/2srmGxW5R5dIf5ogKFjihbioCUNCAkwe:97DmeW5jyCgumbP6Ae","tlshash":"9c5423bdd89edaba52ad1e91fd96b02a51b2f3031b70e2c181e5e9d26343186f504f42","first_seen":"2026-02-13T03:08:47.154865Z","last_seen":"2026-02-14T00:11:09.932214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/ft-dextools.svg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /ft-dextools.svg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/child-theme.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698270f0-44f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUqwpU5Ky5gH8hlSamwJnNmObR%2FzQOatJV9hD2l4B%2FRsecKSswTO86x7RWRC59cBUnxMrTJeLPuI11dlchWPL36qCPAt%2FE7STRfOSKXRF0F98qfGbKRq\"}]}\r\ncf-ray: 9cd857ffdb14b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1103,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"27120282f2621cdfeef75a6eac9d0d36","sha1":"a71920d930487aef81c62720158956bdb027ac96","sha256":"a6af3bb2764a4a3c4f0b73e62be6ba506cc72da6dffe2d5c83b513cdf1e5947e","sha512":"0e050ef96f0345428a3f638c9dd924ea32ce6e237101fcb27fecd9faf62e61e9f59dbe31ca77bde3ced422264ce4834881cb20d2e12cf9c2ee5e95b5e4cbc470","ssdeep":"","tlshash":"7211aabb9f53397cb0025bfd776022647c973a8c8b66c79051f06a30351bc29c6e4483","first_seen":"2026-02-13T03:08:47.242535Z","last_seen":"2026-02-14T00:11:09.934732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/ft-coingecko.svg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /ft-coingecko.svg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/child-theme.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698270f0-441\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2Ebd8m4FcV56YBWToSmKo3tn5yeRl8W1uCBzAa2r3yixJyZlbRbm6F51K%2Bfm7Ilcv5YPoxYJSVgq%2B8OHN4GusH5y5LTLcFNJWFd3mr6o%2BV%2FBYBKBf27\"}]}\r\ncf-ray: 9cd857ffdb13b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1089,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"234ba6ad43217e4e305564e74ea8b74d","sha1":"e22ff741769460959231c99c2effad3443a768e8","sha256":"eb9db962f4608bce0b91692de436d0a233680d9888040e58b91c3b39008efb8c","sha512":"3d1d66a6d4fa0529d94e2187789ec0329e3612299a33a0ebb6fcf41adbceb0d8b73e2058978396e259fa3b17423df479988d3580a71be22cb0451c859d7f3143","ssdeep":"","tlshash":"5211eb3f82055ea3f261c398c695711570b1f84cf2e4b1c8ab9a7f1b5c4c0b34535ca5","first_seen":"2026-02-13T03:08:47.195525Z","last_seen":"2026-02-14T00:11:09.936433Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/dione.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /dione.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 170324\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-29954\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2B%2FttMax4OFoVTU6OfCaJE%2F6F7jGP7c3yfTMi0bxYMthia4uB%2FQZgPMYeSgnB%2B5KxnvQIkW2tGLTypGo0sPJ5QJ1%2FAZh5vzPfecJWw%2FR9Xv2nBczEjGu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fb8a11b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170324,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 599 x 599, 8-bit/color RGBA, non-interlaced","md5":"60ed39a35022b8b3c9289bf5316bb4ca","sha1":"1ce3edae4c74514dc956c8f1f2c9073bda8bd763","sha256":"c4fc78fc4ac5c0745ae3840d3b7d3939e32f4c190c31a1f49df400baed21f4df","sha512":"1ad5b09c7042467b8c3fa793ef1704048d67b7dfb89c6e93c3ca70e3f3462ff63ce66d05cb9971eb9d63b274c546d30dec37016fcc8963f1c5e421d774a5c451","ssdeep":"3072:qsbAt3v5FExsGWNPUYtvlVixZWvYx3WjgHUFTV8CW1BLw5caVrCKvRV:HbAJv5+G/CQlkfh9Wbx7W1hA8Kvz","tlshash":"c4f312ea5ac78b0cf574add74d6d4ad7e82234be0a681c224656b680306d911e0fccf9","first_seen":"2026-02-13T03:08:47.158091Z","last_seen":"2026-02-14T00:11:09.938095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/unidexai.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /unidexai.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-9fd4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2jx%2FV%2BB7wUrorlt7zBVKcOKanUqg%2BNYIlaaOcmB9bKVrdCwmmVhJylQPWnbHe98H4DMtjfVPYQ22%2BDRJrt3PQ5Bdho3TRFijKLPKZEIop2clFpHfo17\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb8a12b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4b28787fbbbe44295641ac7229e0c976","sha1":"648822e4603c0babfeea555770560c4919770c48","sha256":"5c62e8bbf4486daefb7ee291b0cf967f2ef20d9d21fedb447559a6ed04e96946","sha512":"82fe103e761c94ac6492f584cc9f6549d638138eb20047d3274f16d5b22a466ad95ecd2129871edd818f1b95fbd106f7e0e260a991387e35829141e1939945b1","ssdeep":"768:0S32rFF3JwsVQwgqm+v/MKA7HbUdupYfqwqCvdkIRmLcZRVPG4hJrlW2mv:0S32HZxOwg5+vEbHGuOv6IULcVeEBgv","tlshash":"a603f17b944b55dfb1b3501e0b7362cea32c5696a4313943283d2c7a697dbb8d203cb8","first_seen":"2026-02-13T03:08:47.338098Z","last_seen":"2026-02-14T00:11:09.939876Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/fuxion.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /fuxion.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-18bc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMpH6LdxT74FoIBhZLzPawB4%2Fy%2BQxKgrFlabKZ2Bup3NtRf2eaYK3KdY8OWfvKdXu3PfNA8CT%2B8XsQnMdpQiz6mfTz6gJWX408Lb%2FbR9hOrlnZwKW4ar\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb9a17b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6332,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b616557aaac31820fcfd3cf4ffe16334","sha1":"19a2b53b029a6fe5a3c655efac7249ea80dd1463","sha256":"100cdf9cfd0fa4f2fb461f22b20c5c25a06a109bcbb8f28c3041908c6d6c19a1","sha512":"f35e37f70bf1088ceccc0e29650da1bc4828877159ca501f208a447506f929ac915569038c19b661b09ae14ee083fde495277abeb057257be9a02c372b0e63d5","ssdeep":"96:KNp3Yegm3kcweKR1nXfa+V0MdMUY83THJXZLivcQvpq+c9QuSk3c2UcPezVracBg:U3xweinXy+KMSeHZZzWp5Ru3bwzVbBg","tlshash":"05d18d5cfac41bd7dd8a936a2c6ed1c8938ada94806677201d36321c6c145a08fdbdc3","first_seen":"2026-02-13T03:08:47.204785Z","last_seen":"2026-02-14T00:11:09.942783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/metis.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /metis.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-9952\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2FzUB74M5oCJe6YgZRmGKfw83aJYa3OU1rFF701Y9qi5sqxnZS4Dkiid1Zxoa%2B1j8pS0q2zmvH9nlCikGyJ6O5E7jFHonY8dqXCt6Kb0a7SfpiqN%2Bihq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc1a62b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f98b5ed1e1cf19d88e0b9afd1f7264b","sha1":"78b332a54d626fca3666f5962e5f38d9ca9464db","sha256":"3395e33f56dd03114bbe2b3f314fcbe317c5b72e15adf1067d4bfc04c5493133","sha512":"f1e4ba8ac40ba36d4f46c95089a9045abf5e756c487a571f3494a2aa5d68abed40b97d54ce5acfd3f326d1f2ad0633f46844d7ef504032542e1f5a19496962fc","ssdeep":"768:gx6FZgX4zsiDtv0Msgi6pWFYV8Obtpnk9Dt+Hm62fW0vAfcLkuulCeoVJVaD:hFxzswtv0PVFYVzbfnk1Pr+0CcQjByJy","tlshash":"bb03f114ae1e7f4cbb93296076844cf83f53e84a8fd1c65ad4d1ace78eb924b1b96044","first_seen":"2026-02-13T03:08:47.357215Z","last_seen":"2026-02-14T00:11:09.946635Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/ft-coinmarketcap.svg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /ft-coinmarketcap.svg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/child-theme.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698270f0-399\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIIISnrpqBL1MQu%2FaC7Niy5VkkPolPxyQm%2BunUDOETcPZIq4Q2by0WnEn5VvlrDfHdNpuig%2FbYt6hxTbF3mjcukqtGlhg%2B%2Bmtr4aIymAZYkIwucGdCsD\"}]}\r\ncf-ray: 9cd857ffdb15b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":921,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a0350cf63244e7f0b16f345a8f3833e","sha1":"0441bdea0e0350fa74c6ff7c08d4579ba4bba907","sha256":"0f65ebb98fc24891fe654b9728780e62b7b95abe3a9219dd80390b9016ffb6cc","sha512":"d8b74aefbd580fa6948d4ec118608dde3de1f2cb100b27d84e80042bfc86d8ab8e2d9a45964f5792255bad8722a6b688567a65a6f4c98f136291229e18e67222","ssdeep":"","tlshash":"891167739311d77cc8da0b1cc828196374e9712170faa7d453237e26bc154e74178c79","first_seen":"2026-02-13T03:08:47.166258Z","last_seen":"2026-02-14T00:11:09.948792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:40.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2 HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7740\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1e3c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBfaFIAGPirSwiz0Es0uCAfbbcd%2FxDQVbFyGAwCGcAf%2FG%2FUVhZkw38xsyAdTYjoWTswsX15F5oCTXG6sTEYXi4Jt%2Fus8ngAWFpmCTLCAEekYtL%2BPLmu%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd858001b28b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7740,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7740, version 1.0","md5":"792477d09826b11d1e5a611162c9797a","sha1":"bba020c0fd0426079872fdd7929a260b414845cd","sha256":"289e0afc8be731a86822349e54557296f145926496bd2138db1bac0db77f77a2","sha512":"20256b7428ae94d47202827e0d655e298034108cc927fca3a43eda383b02fd42f0c9e7551eaffa0ab4fc2e80528d17166aae09226bbf3ad21f666f08aeacc4ef","ssdeep":"192:dxQxGIAcBZH2KRme6/xXOTTsncYsl62qMXApY:LQcovWK6YlYsfL","tlshash":"88f1bf724a9790cac6e1592b83507e1ea877abdc3a4bcc1fd5d270ccd4a299123cc85c","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-08-16T00:00:15.999644Z","times_seen":14079,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/tokenfi.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /tokenfi.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-b38\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IAs2O9gtVPghzsfXTu8RahDv26KApOoIa%2B9oS%2BNCaYrnlbB5kBqZpulYNhlTmIezwf6PAL11iFkHgFuQXM5ZygCMZ40bNXIVVbQjNfOgqGNM5dzNET3P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb9a14b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"37c71cf8e10196e1172e33ef3ed80885","sha1":"488dd6f42761bb6e797403949cfc0f524d8fc1f3","sha256":"22885fdeb3f0f1ef9e444d0fab90191c8c708f2f3ed097a93c02e7f13272dd2e","sha512":"a1460d3fd379f1aa656055a052f8e35dbb6a82f4a3381afcaa31a007c38669986958c6219264564268b325791d1e9357f9e54923a83cb609257c8c2338150449","ssdeep":"","tlshash":"58516d340af61c5927846c92154de3204a1ebaef51586d106c212faa0fdb83d2c6f945","first_seen":"2026-02-13T03:08:47.342127Z","last_seen":"2026-02-14T00:11:09.952312Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/solana-logo.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /solana-logo.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 175953\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-2af51\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75804\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDKakndnFmnKsyNzPy1C%2Bxgj4Q4cQ%2F6F15ri4W6eeZpcOlWIy7ol4S9sN0D7dNMCCnaUBcOiycaEjngjl0O5mkIKBPID549eXCU9XGCtmtruFfJwxwh8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fc8a7eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175953,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1046 x 878, 8-bit/color RGBA, non-interlaced","md5":"b2d1a933cf10a059e18bdfd50761d490","sha1":"ceadc0e877998e328213cb0fb0980e87794b0838","sha256":"db1ad20e873b1994b84a445dbeaedbcc7412567e133675d9d0cfc291ddde32f2","sha512":"4181b336ed854956a1962ee20dff092b9b9f59921edc243d8bfaa590021d8a157f9c6b107885bb4a4d2127cb7bef6d92adba51c2b0b129c463087d0dd752cbe2","ssdeep":"3072:tY6CFN00OtyIzaO2vcaIZ6FcxPFv3veC7VTzAOUJAQ5iPPUA3V2j6LucZr+sgqUG:8mNzZ20aK6WxPRT755UJAUmPDF2iucAQ","tlshash":"880402ac1467c92f1acc987f13e70ab4250a506fc5d41228a8e5b2273ed95f3dd3c91e","first_seen":"2026-02-13T03:08:47.358582Z","last_seen":"2026-02-14T00:11:09.953737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/maga-logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /maga-logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-f6ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QeAO4QGajfDkrJAOma9Wvl6ZZV4P15i4yNDmtGKzZB63%2BwI%2FSGf2lCfTIHdYgBC6uyTcKTSftG2BAWr4gVPDnSp9mpW2PTIWlQTvmAA9SJLySqW3Twhc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc8a81b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bae30420f85db536df30d9e74c0ee73e","sha1":"eeb4fad062b8369bf5f61ee43e5a3e279b71aad0","sha256":"aa484d667a8e8a24b1345e75bdef772de24a29ac2bedc0ff0107c6f78161ccb9","sha512":"ef9371e74ae011bf2879a433a3b0e4a86d805b56759a84a3909acf5ad983d498d9d3d7c2cf9051175b5cd7003e00840b89021670e993e2790b34d3d04522b24e","ssdeep":"1536:VOra1LhKUAWXyIfLs2sxZrzUOB2rXo0kLJ:VOG1cWXtYXzU++40kN","tlshash":"56530212d9893ccd297660349b2d5df449f6a131f38fa2bd8dae7b02933d509d1906b3","first_seen":"2026-02-13T03:08:47.334054Z","last_seen":"2026-02-14T00:11:09.955251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/oxn.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /oxn.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-7ae6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jMfyiWyXI9GsYjvg3bspLlG9gJMwANJBjTOeBBOx7%2BSmHiJdtiPRMfwKsPSey0hk%2FZabBryCddFT23j5P49hkpY%2FwOOFjs6xyoGcsczg8vyuot8YnPL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb9a19b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f44061ca51b4791f8b326d8af10e56ec","sha1":"b6eed39c0f7f9f8a20027652badbe7ce303fa859","sha256":"68fea7f58cf734e3c8521265172f0bbe97231bcbc76c0c24027df4639f2fb277","sha512":"c63cb946e40f3985ee13b3713fa5176edaa2c69bc2bf81efb13ecf341b7e199abe13d77663e2b8900af3da0829480a391050165405e85679c8dac65d96d451de","ssdeep":"768:wf2CRbtt8VJORPzj/eDokXdauq7ypfKjjN9+bhlNDiOQP:zMAVJO9zj/WkuqSyjh90BmP","tlshash":"e2e2e0ae27e253b70397619a328d7f8ba705fc8adcf6e43e9807575492707c53098392","first_seen":"2026-02-13T03:08:47.263897Z","last_seen":"2026-02-14T00:11:09.956716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/STARS_LOGO_PNG.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /STARS_LOGO_PNG.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-1dd2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4V44xkxPVOS%2BOHzdXdjkdl13kvM1HtsYjva1UPEDpyTQqC8SEYPjrw%2FR8Pv5wyt5YewRj984x1f5%2BRu8jGVRGI4Ii0iYKkW8JEVReL9Cxlwremja24su\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbaa27b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a42e349fd76d6144880deb5a8035ef52","sha1":"751f85ca833ef27422afa64e16dd92d1de98672a","sha256":"18368422df4e024488048d47d780aaffd4105ddb9182d58c925008ecf1b98505","sha512":"161a3ea0d1046286cda573079c0bafb9a7b6ac60950b237f102274335180dcb7fcc2cd07d79a120963ab04470e6cd48b1852a8239a9e058a4e0a0a15ae8d2cd1","ssdeep":"192:HHUHB3uGPaJn9FArKKv/0bApRnky9mSj0ZMUJHdAGuJhAyrPf2z:UheGzdvMbApR3USjgMm9EU","tlshash":"d2f1ad1510bc204adf8b7983acaa28df89572c529f0202c3775dec8480be4b779c69a3","first_seen":"2026-02-13T03:08:47.193434Z","last_seen":"2026-02-14T00:11:09.958021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/fantom.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /fantom.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 5688\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1638\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ss8qN57cWkg9LY%2Bgs%2F9dYj6vkBpeuRwG2vNbgmFyFBJyqW93AW5bzkgSoiVY2h%2FK1vCzJgW0eLSkE76sOCxME9fsba9rsnfDu591YgpTGiuGjiQS1SmV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbca45b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"8c59da594ec37be9129f3e87d2ad8756","sha1":"769200008fced30ac521046844bef278d1b37f19","sha256":"dcf6dfb6c1b569a6e2ce78addf9e24cb77662ae35f087ef79b37ce4db58a5df8","sha512":"f46933b5a6c5074a9a29461786d1c0e2a721c5c35eb50434518de7666661358c5e5d58e70c721016e857ed115f599f3b928f0d72b21fa16a7237f4ef684891fc","ssdeep":"96:AvPnzv390huAqWeI94PyU2PmW33LiuiyClQHpyxdfiSBK4JS:afz10huAqWeI94anPB3bwdxQSs4E","tlshash":"22c18d499562ff08d506fe64b0f062b3460d4c8d9de470f22ecdf8a332166b9b782ad4","first_seen":"2026-02-13T03:08:47.240314Z","last_seen":"2026-02-14T00:11:09.959281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/zilliqa.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /zilliqa.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 3224\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: \"698270f1-c98\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aRypMvnwUvxb3CNiwZvGtLrVYAoJtpGNfUODEGiIOKsr5jrcIoZlc1njhYBkbAh60n7xwoi02BldhACh0kIvVlpGrXtK9sMbRRT3gZbR0f07yiw1tIC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fc0a5ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"c722a966076de35e7940fdb27dcb15da","sha1":"e6bf64d9e6589383e74fdd4e6a22befb3f30aa31","sha256":"e15a4d8369bdf2e45617359c0ba6ff648cfdd468cb8cc0826066bdb9b74e6295","sha512":"18bcb1ec45ab7d9f9dd8997c7dafe454ada52d411aa2a622fcee1a75c0157173996e790cbb7ec9e46500e1a1ac4eef56e96df4a6611f4e1fc012acd53b3c6e08","ssdeep":"","tlshash":"f6615c8cd2e1bd214584b72178f5103b686a19d599e3d48c7d8fc9a6173c1fc8682bfb","first_seen":"2026-02-13T03:08:47.209098Z","last_seen":"2026-02-14T00:11:09.960567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/slerf.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /slerf.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-2cea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75804\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FficmhAnnuBoxwV5y8AUDyhR8T6kU4z2ZyTpRYpePbfrwN%2BbJox1coyKOHO6bjhQ5titXZ6tMgK%2BCoz96I6wxSLQubY%2BAJPoiDorEpBJ2im3%2B3OUf%2FD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc8a83b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11498,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6152bbce1f9f13c91ecee4ed6ae31da7","sha1":"79ef652fd7c34998a7268625aebe5e89bfd7d228","sha256":"06f9b89f2884306e3c0699dfdac08c7dc9aed3ac89ea27904460d8ef83fc021b","sha512":"488491bad12254c3738a8ffbb45fe1f973b9d4565a4ca9581868e957404fac8562af510b1b7ab2f223fb43796c56e10c5ad39392fc3fab50427ece407686eb35","ssdeep":"192:EJnHpbs9srq93t438ue0OfYuwlVBdb7sagd5z3kom5L9RBEm58pRxH+dqc:6nCs+BCsue/fYJB7MkT5ZRBEe8bc","tlshash":"f732c03076032161e6c8d6c7779839ecd4b9c7cf641496809197720eaab9f8db4e7d30","first_seen":"2026-02-13T03:08:47.18184Z","last_seen":"2026-02-14T00:11:09.961633Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cropped-photo_2023-09-25_01-14-41-192x192.jpg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:40.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /cropped-photo_2023-09-25_01-14-41-192x192.jpg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3882\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-f2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yUfNfO4GmVg6Ca4eoWALWI%2F8CLzP0wlZKZO3wxa5zSZVEYq7vTLlIRGVzdueahJA%2FK%2FdTd80oFhoLNLoN9QGC5%2FVpSw5rsWfOulonONAEmUKydUbfynA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cd858006b38b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3882,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 192x192, components 3","md5":"523781f461031690049665493dcd80b5","sha1":"535a692ad79006db3b63a587f5373feea7107af3","sha256":"f3cebeaf7985994cb66e6f590152237de85a24aa68d026c89569d5ea127d60ed","sha512":"6be9b4d0d31fb6cee1387990dde5844b8b30db827ee284677211e70abf92f11b96af6b0e33d2e7be1d368327526926338ec5df903ca0e367d88305d9d51f1e56","ssdeep":"","tlshash":"25811aa76716829af4579e340c852b849d11372589974336e6f4fb3fae3c0d60cd6487","first_seen":"2026-02-13T03:08:47.197303Z","last_seen":"2026-02-14T00:11:09.96287Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cc-icon.svg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /cc-icon.svg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698270f0-a70\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xAdhJ3nbSZ6iknf2Z91UR%2FQOh3TDjZ6VTwvYYSWLgKXAOPPJnzkn97zQ50%2Fk3V9ldVgotabsEI8v4LNPcuYYw6aa7E4bXUAvPbEFr1Iq9CPCFt31DMSW\"}]}\r\ncf-ray: 9cd857fb7a07b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2672,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf0216760b05e6ee7f5f8963007517e1","sha1":"cd57b15fc2bb6148eda9b62af337f55c8f230b25","sha256":"07bbb474745c93c665ea8e6eda336a25c417a88943f4acacc1a52f0a641e99ce","sha512":"575c8fc46eaa692b3e5b7059e7c0ce6e246333367ceabefd8cc1235f5ce935f101a03b6c3bce7d7f37f01fcb05b033733a844c21be0d4cb70531ce1e7736b2f1","ssdeep":"","tlshash":"565153fa2f3853eca45f4e78af169d60271e94b8363384d0c51eae9894c3e84e20bc04","first_seen":"2026-02-13T03:08:47.336269Z","last_seen":"2026-02-14T00:11:09.963923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cfgi-logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /cfgi-logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-7ca6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79vAIXVHumzjMIjv%2FvybzF4%2BBWERNPllfnefJPAAomCmvGmPiYyFjXvBeeAc5fs%2FOXnx1ObU9HvYJGSUXBDRo4%2FN3evGoBwwniW%2B5F5bx6Kh%2BEo6Pksb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb9a13b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"393f10e6a1b20813cb13e575834b0f86","sha1":"cc4595862ef6137bf7a2071b9d09f4501fb1bcc1","sha256":"2b7b48910d3c5e74dbbcd56fd3db7bac3f05d829e0ca70cf700099308ea3b51a","sha512":"eaf803e4c62d5fdb3172101f43f9286c5ef39ba1305e1408bd031400255471eb5007f137c99f1c51840b5dbea911ec7b9c0411d876de09e0b202e5060ef33205","ssdeep":"768:oHuH/sK+YPU42HOLw5P6yVbiiBElf1fR9Pxf7nAdEi3OD+z1/FK9AJwF:oOfL+UUHnSyxtGlt5Vxf7AdEie+z1/Fk","tlshash":"fde2f11fedf77b2854318d9e43192c274c1948a85a5f150d88f64ce2b3336116feee58","first_seen":"2026-02-13T03:08:47.27595Z","last_seen":"2026-02-14T00:11:09.964965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/linkednation.jpg","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /linkednation.jpg HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6848\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1ac0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75804\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMB4kucOwGtGJVrwWMyXdIXeC9lNnMaIkkIJpCH6ICg0U7AiF8yp2zPQgiSzRJJJfYNF2bp1JcK6sW9%2FT2lrmHStuJlRGFjF8LvBP898PyjOTnfzd1XV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fc6a77b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"e064e6a5e2a8c5e53ba905b9f7fd09e7","sha1":"9175a7092b55e146c5158f9da086eda3f7c394dc","sha256":"c48fbe1f5ad944b58a998f0b32837bc2c4444cffed221de8349da22aaaf04ec8","sha512":"56ab92c8e9e2a455484efa45254a14597229f966e7e2bfe8731aa4f7b9f2f6fcfbca4030ef88698ebf6c9415212756e2abbce9a918af7a86d1e768ac9cddb396","ssdeep":"192:pf4gdh/k1IwcJcBaleXY4EwO8fGmEIAPkT9VSp:KkhDeI4RZfJxQp","tlshash":"65e16b55fe448215c010f2beaeff7b85c92c58bb51a4d882794c9ed5fbe684b589c203","first_seen":"2026-02-13T03:08:47.252059Z","last_seen":"2026-02-14T00:11:09.965946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/vaulttech.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /vaulttech.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-6c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sy%2BtHDUPJxDuHNo2uNNfl7TKXQ2bGtUUIedEPoBeO9BCK4yfEh3Z7eiMLmh5VVVlYHbGQlPIh0ArRZPlvDwqt6mQ5djE56a8e%2BJ6kaaMzraePTQLfGYU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fb8a10b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fb3c8df52d6987d370d63fb5e446308c","sha1":"e0096dd2fd619820f841e3efb19444c8972c1d17","sha256":"7a50756e1238a1c3d8111c7b148742807de819db73c3f7569ce7fb8e63367746","sha512":"ec4d66112473922229e230c0618dbbf371f61b5ce709301661ce0bdbe9a3d2c3f91622e8118f1a500895400db2181ef8270de635d89d68fd9a5b697df74dbfd5","ssdeep":"","tlshash":"0531d80590738e459698f696a11119e01fd3499f427352c402e6ffcec3d312ec46e8b6","first_seen":"2026-02-13T03:08:47.359964Z","last_seen":"2026-02-14T00:11:09.967142Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/wmatic.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /wmatic.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: W/\"698270f1-1254\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75804\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apPbLqOg0Rr5iyLj6YPkgxO2%2BF3uxPgq9R2DIAdeRbG5ZA50IiLhH%2Fo4Fxifw9nrB7%2Bc0NJYsXkEaUY6QUaovHKcGhuP2JVm4A9rPPkEHu0VWVsBmxMR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc2a68b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4692,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45de5dba886449815723151c829961ec","sha1":"068ddceb1a005b37775ccd5051bb2a9141353156","sha256":"9f58f93765ab1157fb14fa3a0b3887247a41173a3a8ac9192bc9c23b3098dbe3","sha512":"0c911e17bb42ef7c751e8ae9a37bb58193c9cce78a9118a9768b5cdf4a14fef822be36a7b2cc4be0cf24c56b886278e22b6be62038bd233ee6d55a45a44bb2e6","ssdeep":"96:8ZLO4Xbaoo9gv8V+3w62laKM4+4H8ITnQdu9LhCQK1:8VgPgv9gJ5Mj00E9LQ","tlshash":"71a19d55fd5b8799d681f8aec43f1c7e88ce811623ad478e6c9069981178cc865c1818","first_seen":"2026-02-13T03:08:47.160034Z","last_seen":"2026-02-14T00:11:09.968235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/dogwifhat.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /dogwifhat.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-169a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75804\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oEZlKISRzw6axYBn0%2FBhHTOOf6gcroFNtTPy%2BJ%2BXJfE43byb6GlbRmVIp7H2sjj%2BKiq6P2Ef%2FVi7FE8S7G3A5gPeQUAuEUjjhmvXFRg7IJAym7u%2Fyypg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc7a7ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5786,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"13e3f96b1658ea2edf576c51d31a7e78","sha1":"f6e1492da6029579e9094313462b5ae4df6c4309","sha256":"dc78a42b2926a21dc363b7bc6af8b4e2643bf3f451678cc8aad92af65ab97209","sha512":"57816c4d06aed972e46a4738f327e5db7e4d2e962195cc6ce397beeb8422d1c98efd21b19b925b3c681f942ebd424c242e9a44c5e5792c1b7cbd91c8022bf6d0","ssdeep":"96:loZ6Xc5s3+LZxsfDJoKY9d6rQoC2F8u3NzKVUebbPmiXNehFKgAyXRzUpVms99VH:loZ6n3BJzY9d6rQoCvWKUQbnXNe5ZX50","tlshash":"3fc1ae59e0c6146bb40fb2aa773a10bf84728a788032c76c4d7d0c17b14a6c1eb4eba0","first_seen":"2024-03-04T02:47:46Z","last_seen":"2026-02-14T00:11:09.969263Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/jupiter.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /jupiter.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 2329\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-919\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VJizMlY%2FqU018dUbGs3PUCX%2BhaRa8ZHxil1sCVmWeOS7cRBZNDwCoNwlbA1msEQNR0rSzbK3jcDilVL4CIpXkWQFCBhYRpxgWEb%2BNNUC40f0uDd8rDW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbba34b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"da57d63187471c139e36717f67aaec60","sha1":"2ce6e9d893deca787204decc176fd04348430c39","sha256":"6cc3f02857217465e2139c6d32c179a1f3b3aa3106ca29a92fa439e252f8070d","sha512":"40210733dfcd489a6c26aabc63844f89b7f2af2fea74c382a2ae3d36ececccb572deb4bda12b4257afeceaa7c71d1230dde05f22fc5b4b224e1695fd8d570b3d","ssdeep":"","tlshash":"dc411949ed206c42f9bde4843cf5101bfa36cd854584ae566c8fe8b226644b7480d3df","first_seen":"2026-02-13T03:08:47.293512Z","last_seen":"2026-02-14T00:11:09.969809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/weth-og-logo.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /weth-og-logo.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 287473\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: \"698270f1-462f1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O8fkuCfXgaSF1qfhD%2BKFOij0DQkkW5z9mxRCbcCYPbfJDavWlB2z7mI3%2FWRpiQvKn2OJFDZGiE2M8kEczln4P3AQXlYiid%2ByKXWlFU5fjzYDXj8uRqq6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbca3cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":287473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 800, 8-bit/color RGB, non-interlaced","md5":"c8e5e099e3cd793deb7da3331d51d950","sha1":"780aa4859da74cdce5c85c1460f07f653ab16c60","sha256":"5e5b6997a051b0d0023f21e2adc383289ab785c8467134d6641aef414ac72c9a","sha512":"a0d36b774b66a182374fdc951b5267b208902cc07b09bce09cd589be19308f980f648fa13b2a677c22b62b4fa7830a74b9caba086a04ade795dd7d48d1ede051","ssdeep":"6144:LcWPUqbMFh56l3PR190UiGEjGWn2UROkwZlEVCtLqHBX/Z/klMdj33N:LcWPmh56NPR194TGWndRd0lEVCIhX/ZH","tlshash":"3854239986270b60aa874464dc9d1d412b1e975fd0f02cc6a4e7e299c693fc8fc83b73","first_seen":"2026-02-13T03:08:47.23418Z","last_seen":"2026-02-14T00:11:09.971002Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/xcad.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /xcad.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:33 GMT\r\netag: W/\"698270f1-b4c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RhXNdrZsFbxMlEfI1hKQzvee22mE53KaRZVnPS9424rtmJDucgJ5bxObyontxxa%2Bdv4g9XqRl%2BPYp%2BJ5ehAN%2FDou4YCy1ILsm8muGTlqY1WHXthos29L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbea4fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 250x250, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4a432a2915b794670488a8412d9f7c9e","sha1":"1cde226e290c58700334068e4a6c066e66aa918f","sha256":"d4d9d15d249070fc8bf510950282ee5e95620806334bc2cb31eac0c6928b41f4","sha512":"3fa2265619be757e3ba5a94566c29cc040cdf3cba4d58fe9f04f3eee070c2b935e9aace30659d0a39f335df4b97c367aee63aa7907b3bbb8142f9b6499f48b90","ssdeep":"","tlshash":"6a514b377cb55e2706844724ec2aa95968f1ce1351b042b086b27633faae4cd34b2198","first_seen":"2026-02-13T03:08:47.346855Z","last_seen":"2026-02-14T00:11:09.972102Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/pxiByp8kv8JHgFVrLCz7Z1xlFd2JQEk.woff2","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:40.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /pxiByp8kv8JHgFVrLCz7Z1xlFd2JQEk.woff2 HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7848\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-1ea8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QCt79oZiEBYDHTD1RK75nHSsmrwI%2FAK%2BtmEQgaX4xKE8j%2FCTF2S3H6mBwCwgj%2BUyLw1yoHyfvi7fZOTU7uo5rfJam3a9IiKegX7lLdh9xU3ict5poK27\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fffb20b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7848,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7848, version 1.0","md5":"0bd523f6049956faaf43c254a719d06a","sha1":"6af69d307c33af0f3c4c3eb96ef01ea4390f474e","sha256":"197a3cbd7290c242c5c765268cdd69a9a39867fdc80cd13071f243a81c56fb76","sha512":"a0729696c915b1f08b1cef404ebe621c6031812b733107c423b39eeb6b4d852552ffaf2fccffbfe08259f43d532f53d649665be186c26add8bfcee483a9af7e4","ssdeep":"192:K2JJwUQALPlHurxh27HviZ+x5BTbwNA/aGyGhXFUcbtXCR+1pH:nJKUQABHuNgDig13cSHUcbtI+1pH","tlshash":"60f1af5411a00b08e206937903d638e15d977b1c99fff8684d0b5092fdd75f2b8359e0","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-08-15T22:15:35.486222Z","times_seen":19861,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/cc-giftcard-logo-copy-3@2x-300x84.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /cc-giftcard-logo-copy-3@2x-300x84.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 8669\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-21dd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D08yFLMqpRgXhbBadk%2FHbPQgQccpKPtvSqeBrRIB5sfltgme8%2B6FOAKaFEWkmUVIsIFFUkfMjeLv%2FEBNyQJlyiGXsYTw4Mhby%2BwXHJltvFbKWEcFFKCd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fb7a09b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 84, 8-bit gray+alpha, non-interlaced","md5":"a4179cfe5293b2c3e7213b2ed070f74e","sha1":"c708b996a2545a67ce4b484187b89c869cf7c769","sha256":"38ec15845f0d9c2d74076fb5e821f045d5932d51814fef5359ed987c7bde6111","sha512":"637938be78847cd2eb7fe3b41aa56765a493d382d80c0719985a6d45d6b4af7f5203ea115f69276cc42d553418030a5991b45e0cb0cb6e627540f2069eb44ca1","ssdeep":"192:Z+CjYJ52ljDv8UwBHyCEG1ocKTxzr6Fq5WlNrZBu1Rictz0Wc:ZfYJuxwUIc1r6F1lNrnu1ActPc","tlshash":"6102c0639da6c85f0a68eee6f1d2b4d4984773809b11181de81a347991036bfcda30b9","first_seen":"2026-02-13T03:08:47.137911Z","last_seen":"2026-02-14T00:11:09.974091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/utu.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /utu.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 14068\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-36f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pklQ1SBMAIkdjHdDzu2Ly6tUdlhsd9rd%2B2vKLeEjUQ69nE7%2FlzELteKSfKJPmsNyFCT8wuPGMSVpQczJBqUXAF5xyHL27ZUaZRRTAtcCHgclAadchtJG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fc0a59b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"9ccb07be3bf7d3a89b6f7013dd6101ad","sha1":"91faa97f689ad41eba5c4eba1d99cba6afc40be6","sha256":"766a0e0be3f915284499818adcdb2c01773dfaaa4ba8dd92527b3f5b503ecb63","sha512":"be93e27b64ac8bfaf713b46cc32252949ae9e988c13bed29e49afac5040a5ea342a59704edaaf73bfcb17908a8dc49741c2ad585ade68ff6c298cd8c2599baa0","ssdeep":"384:QBBIaboAGBVTbkA6n93va7mB6dNkx1wNg2WqrqW:i9bqjTv6xm01Qg2Wq7","tlshash":"3852d1810935b529d4d60b3a26f2a32d8e321d818bf99b43a44fe80f4d256e794c4edf","first_seen":"2026-02-13T03:08:47.327194Z","last_seen":"2026-02-14T00:11:09.975494Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/brett-logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /brett-logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-902c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21Y0YHuiZ68QAsiRKcsF46vQGTNx1bnqvrkKxXkreYAvG0iD9Bjio3f8BAe1cDmjMPFyRhhsr0XgWmde0PyIPIaoHhf1hhN9M%2FO%2BqW61R77TZTy5y5Wc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fc5a6fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36908,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c36ccf1077fda1f56b47b9dd641d241","sha1":"02a96ab37a7aa95363db547a1bbe850795bd83a9","sha256":"57b75e5cb59dc382d146cddd41abdc2668e62bbc52da26c808bd7410a0ca4cf7","sha512":"e81dc74f073dfb3dd1f5fd0a6be02617808abd3b0912e4ae29a08325e6a42dbc28100c9a9ac2596c628c2bbe62b0dd8e1d18351d8099c74cf6cab83c96549957","ssdeep":"768:Ot/HQHWOJiNqEZoOd8tH60B1TIzgn5xaXviwFBWZxQ1cR6Ypm:Ot/HQHWNIE6OdwlP5xaqCwOym","tlshash":"0cf2f16569267925ffce7ca066e68f43b14738969327b929c96e46e0c7b06cbc0131e0","first_seen":"2024-06-29T12:42:59Z","last_seen":"2026-02-14T00:11:09.976589Z","times_seen":14,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/tehBag-Logo.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /tehBag-Logo.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-c22e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 75803\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BpUazf6sS%2BvLnOkdpVBa%2BtyzFwaXHwgGezncTpxd5Ema251XYklnwi1vqMn16ZNNtT5esllzrJkg4BttNTNXa6H0CrsuUKivp1w4Y1vLevVkx2K2QluB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbaa20b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49710,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1be98609e6714cb1af555ae57118d3fb","sha1":"d1e68d54e41f5bf30d90f214cf056bce25d29bc8","sha256":"fa3d1f69c847c3c6265ad87965d2fec48cf86ed7b7e5952df3565cccf5f5b143","sha512":"9ca3a10a9a267059110d8c0e25e29ac5bd1495aacbffcf88ccef46090e345645916adda744aaf635960499d23db18b14c4e5be0c96c003f903ea7e9ad61c2caa","ssdeep":"1536:U4gZvwI3WdQkskJizp0gP5Gn5r8vzkxpOIJy:UfZvcdHJwTP5Gn5rV0","tlshash":"5123f272c488681f396250575cfea2d6cf843d51c22a40fa7eb76937099e4b70b42bdd","first_seen":"2026-02-13T03:08:47.167294Z","last_seen":"2026-02-14T00:11:09.977797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/deeper.png","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /deeper.png HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 8608\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: \"698270f0-21a0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 75803\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3uMMFejKsxTAg8FelIDpf7l4IIYvvxWjsC5Lj9YzOEz2jVLVdZ9j4VVMmkltdSqhcZMo2ktvSb9mmEIcolxajlVuA3T1Dc6%2FrWtKw6SBTZ6RAcz1PP6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd857fbaa28b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"a1d3738107726da9882cbba77cc11f5e","sha1":"b1cde5d13b9fff0b36a3e64bfe916659a3ae76c2","sha256":"c915710e08a971070d1b443e283e9067777504d4d02dcd9ce5d8956118ccfb87","sha512":"0d9b5ab05185baa7674c9e606f237c56f85e4f57aa119cc91e1492e6266fb7b8f5286cdb45ee27aa6ef98971f7556b30ecf8680d2a353d964d4111eafec719e2","ssdeep":"192:IiSsASaHAQZ4y1QGEs0KPQfm1tQVdWdsUjFO70yGgZir:IinoHAQZ1j9oufy6HVgZQ","tlshash":"0802c04adf061e807164da5e089b1823784dc611acc5bba18887861c2bb6d6d8deecdf","first_seen":"2026-02-13T03:08:47.184025Z","last_seen":"2026-02-14T00:11:09.978884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptocart-snapshot.xyz/BOBA.webp","fqdn":"cryptocart-snapshot.xyz","domain":"cryptocart-snapshot.xyz","tld":"xyz"},"ip":{"addr":"104.21.45.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptocart-snapshot.xyz/","date":"2026-02-14T00:10:39.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocart-snapshot.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Feb 2026 21:30:54 GMT","end":"Mon, 04 May 2026 22:29:29 GMT"},"fingerprint":{"sha1":"F8:42:93:56:CD:E5:3F:9C:A5:0E:C9:5C:AA:DB:AB:9A:56:86:FA:74","sha256":"96:9A:2E:9E:59:88:AC:DE:B8:E7:CE:FD:46:FA:47:BF:7B:46:6F:75:F6:C4:D0:09:CD:B2:45:5E:2F:4C:97:F8"}}},"request":{"raw":"GET /BOBA.webp HTTP/1.1\r\nHost: cryptocart-snapshot.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cryptocart-snapshot.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 00:10:39 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 03 Feb 2026 22:04:32 GMT\r\netag: W/\"698270f0-241c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 45\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Petg8hfH%2FpZC51goCfz8cB%2FWzirmXk2ztk63MTTfPFHOhfj8w%2BIMlw%2F8IJ3yacZDE%2FJCqp7MChBzs%2B9hKra9Gz%2FAgkh6iwy%2BSiLDeqdWgIhpt9cYk%2Bn5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd857fbba2cb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9244,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3c482b06274520af8afac45ebda5fdf","sha1":"cd29a710260e0969eb44e708e285b1c8df8dcc0c","sha256":"84c5bad8412115d65d30603e52be9f83f4fca2fc14038b5b69e611b2e31c0d11","sha512":"e4f67b1a0e8906788ddc59458155c0bd4209e43254a9bed35804ef806cf25845c05d2dad62c24aea3afeb8cc58ab3dadcca143de2a9215d12ff57448a345dabf","ssdeep":"192:KzlxOpaa9dUSOHpQtcB2SvG+LnRRy4UnPxCavV9m:K70a+dUvh2f+LRRCnP0aPm","tlshash":"cf12b035243c2fe07918bb9098671361929e85d123b79a04af53bd6d1f5b2ae80d067b","first_seen":"2026-02-13T03:08:47.290952Z","last_seen":"2026-02-14T00:11:09.979917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"cryptocart-snapshot.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}