{"report_id":"d56838be-d6b8-41dc-9921-ca7d137442be","version":6,"status":"done","tags":[],"date":"2026-03-06T21:58:07Z","url":{"schema":"https","addr":"raydium-app.com/","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":0,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"raydium-app.com/","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"title":"Swap Raydium | Solana DEX","dom":{"size":40482,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (945)","md5":"69d97b5e326fb38d8a494efabb11b069","sha1":"e19353f3ed0c664fe910c28c01281478ad876d5c","sha256":"2054aa738eafa61cde6ffaecfbfd10c5740adefef8fc8ed4fde390604b8fd759","sha512":"600bbd740d65a598c14e0b7edbaab125a0157253167f64753a5ba957d2f7637f54271b5dfbe087809ad9026fdb9b1db3afe9a56b6fc4ae0f7d855ba5b97571c5","ssdeep":"384:F4iZJSVO2FUJ4gy/F3h+y+pIDniXcQiOCEkCYhGiOKIBOWQWhOyO1WjfiZlJOqaE:F4iZJSVO2Fc4gy/F3h+yl1WJ4q5y+5s","tlshash":"f203c862328a38bb236786e5309d59d0d11ffa72d35241dcf43641eeb7c1dfea859221","dom_hash":"domhashcc6c60a47bfa07a6c0995764290524ce","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"raydium-app.com/","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":0,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T21:58:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"raydium-app.com","ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-01-12","domain_rank":0,"first_seen":"2026-02-22T10:01:23.936222Z","last_seen":"2026-02-22T10:01:23.936222Z","alert_count":38,"request_count":19,"received_data":491911,"sent_data":8964,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]}]},{"fqdn":"images.ctfassets.net","ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-28","domain_rank":23334,"first_seen":"2017-09-20T16:27:05Z","last_seen":"2026-03-05T01:31:28.195983Z","alert_count":0,"request_count":8,"received_data":236411,"sent_data":4276,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"raydium-app.com/logo.png","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:46 GMT\r\nContent-Type: image/png\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690de014-348f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13455,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"cd1436d89bdea4032ae938274b8d6340","sha1":"5ff0fcf50da27ea66efc72319c699c1977193d11","sha256":"86767436c6b694af9d6aa7e41ca4ed489a7ffc364afb635df492958607849bee","sha512":"aa044c04c3674e86a0b71a3b7a55005ca8184c09f2fda06d4a14031dda60f32095f4f184ce16a84c1e60d917b7e4bc2e3ae35048ffd7ee48818aea82aa3c79b9","ssdeep":"384:xQ1W4t7VeHUFIywfJ0GtSvde1uSYKPwvQAe1WBm4q:WJ7Ve02xJVR1Y5fm9","tlshash":"ff52d05b5922f33970d74df381067b4450017ab877bb6e1b320ad4a1ec4670efa68e79","first_seen":"2025-11-25T15:27:45.295521Z","last_seen":"2026-03-06T21:59:58.867743Z","times_seen":5,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":201,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/drl48lc85rxn/3DiHgG1Oufz7xB1rakFPxB/b176a0b1a9aad5aedd40d6e3c29bb14e/image__1_.jpg?q=80\u0026fm=jpg\u0026fl=progressive\u0026w=800","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /drl48lc85rxn/3DiHgG1Oufz7xB1rakFPxB/b176a0b1a9aad5aedd40d6e3c29bb14e/image__1_.jpg?q=80\u0026fm=jpg\u0026fl=progressive\u0026w=800 HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 65319\r\nlast-modified: Thu, 12 Feb 2026 06:32:29 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Fri, 06 Mar 2026 21:57:45 GMT\r\ncache-control: max-age=31536000\r\netag: \"36ff0d94ffcf7d5c575a40637f184a10\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d009c4305a73ef1e26138117423d6076.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: oiq-CN38FblT1e7p8IJiiPGgkZD7g2UROk9jRRALi6k2vLqLjn2yiA==\r\nage: 137\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":65319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x370, components 3","md5":"36ff0d94ffcf7d5c575a40637f184a10","sha1":"a44b032680760934aa3c7e093d519b546264292c","sha256":"c081122e0dc9da82edf5b03847d8f4bc8b03538c2675562acb3666fa40798c0a","sha512":"71dd188dc8d6136f607f6bbbc0665037d1365becc8e9b177eb4b59aa53959545a7cb05127e9870fb8afd9bc591c6e6883a073f5c7e051646faf606f342abded3","ssdeep":"1536:pEXaAwbICXU8mHQ1FrRb8vsv62//sqovOC4pGlpNF8ipEyoT2Xt8qCZn+eOES:qaAZjHirN8ky6/2OCQGvdpEyoT2K7ZK","tlshash":"9353f14177563199a378d4f454d0e580b34fb9b39fb6b6cebc23ba1a08190e71b2b162","first_seen":"2025-11-25T15:27:45.297012Z","last_seen":"2026-04-27T12:41:33.198684Z","times_seen":19,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/drl48lc85rxn/70hT8v1BEwn0e1faq8mfN0/70c9505d782ceb951a01aba85911c9dc/June1.png?q=80\u0026w=800\u0026fm=webp","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /drl48lc85rxn/70hT8v1BEwn0e1faq8mfN0/70c9505d782ceb951a01aba85911c9dc/June1.png?q=80\u0026w=800\u0026fm=webp HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 18550\r\nlast-modified: Wed, 11 Feb 2026 08:57:15 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Fri, 06 Mar 2026 18:33:33 GMT\r\ncache-control: max-age=31536000\r\netag: \"b341f207127509bcc7f402bc39ed5b02\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d009c4305a73ef1e26138117423d6076.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: crKMmwJXhRs1oFgHmCj38FeQQGLbGVV_slmHVj33ugrGO3P3QeNa1Q==\r\nage: 12252\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18550,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b341f207127509bcc7f402bc39ed5b02","sha1":"2ebf2a9cbf51aa3ee3977b665af65712e4238cc4","sha256":"0f094e8ecd78b899c3b0a8822de118be404045f8c9885723fc016e240b65924d","sha512":"42d7325db8c8df79797733baca94600131821dc717e58781f876f553a1e3771c38192ed5d6c0ba8f11c5ef24f258ed921304d6ff4ece3ed9a1c6271e8176395a","ssdeep":"384:Fq7M0otEQUG07Vfou8a1llysPgN+RcVseCgyH1PrYF0wcvbP:kM0oU97FP7dPmPuPLBbP","tlshash":"6182d1c46267bac8c99450e7dff27db0c38d0ccd587d7a4cdb1a412b9a6c395880a586","first_seen":"2025-11-25T15:27:45.284611Z","last_seen":"2026-04-27T12:41:33.277043Z","times_seen":11,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/css/9bbbf9576af29205.css","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/css/9bbbf9576af29205.css HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:45 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690de014-757\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1879,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1879), with no line terminators","md5":"f5fa4aa99b1a4fbd09051ff7b415351c","sha1":"dfa84501313f56d07662b26f847318764eccfc7b","sha256":"f50f08de5dc14dd5a4b8a06cb9192ededba597e8fc5644f9cd4950285c4d83e8","sha512":"b0507f2a2bce6b73f189615115767b1f129a931d21364c3fbda4f6abedc1e62066c081be470a2fd41b431559a5b52224a6620e130e7dfc8905650f48ae56bf16","ssdeep":"","tlshash":"f441bb3a350291e49c67a62e9aa0037e3e1ccc045d1da1edbcab667943c66692931c8f","first_seen":"2025-11-25T15:27:45.277493Z","last_seen":"2026-04-27T12:41:33.264264Z","times_seen":19,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/drl48lc85rxn/4fFMhVP7xNefvEzgZ3ZmlE/8cef31cfead5034d883cd0cbc9ce33c6/image.png?q=80\u0026w=800\u0026fm=webp","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /drl48lc85rxn/4fFMhVP7xNefvEzgZ3ZmlE/8cef31cfead5034d883cd0cbc9ce33c6/image.png?q=80\u0026w=800\u0026fm=webp HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 33900\r\nlast-modified: Thu, 12 Feb 2026 09:08:50 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Fri, 06 Mar 2026 13:26:11 GMT\r\ncache-control: max-age=31536000\r\netag: \"3aa05ae518ec08aec34607e9cc67ef07\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d009c4305a73ef1e26138117423d6076.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: -LgKUXY6IniRlbiF6waMVWivAuqQ2O9jqq6PSGMP3au4UtypnFMOZQ==\r\nage: 30694\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3aa05ae518ec08aec34607e9cc67ef07","sha1":"843965136b16d33a1ae94137fe204b036fd0142e","sha256":"bb3510956323f71ff3c21732859f39d77360999381d4a1cabee0b30be1015429","sha512":"365ae230c592a1232e4f83dc68f98866ce501c8e6e76247982822d8e22267eb39cecc36441150ad718d0d7fd295222a4caabb4aece3bb4a89c20b4586a142c0c","ssdeep":"768:SMc24DD8pZ1C+PHqHZQPHkk+1lS0KvUVtkYZPPjyKfTQKRj:SS4DK31q50Ek+1lptRjPFB","tlshash":"63e2f17593f6d121d4009a7fe173c080deae14946eb0a3e437723a49986db268f3e078","first_seen":"2025-11-25T15:27:45.286681Z","last_seen":"2026-04-27T12:41:33.280405Z","times_seen":11,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/drl48lc85rxn/p8HBRaiyrlR96g7QK0yV3/685670fbf2a6e3b18cc3d6f03a76d9d8/CMF_Illustration_Support_CMYK_v2.jpg?q=80\u0026w=800\u0026fm=webp","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /drl48lc85rxn/p8HBRaiyrlR96g7QK0yV3/685670fbf2a6e3b18cc3d6f03a76d9d8/CMF_Illustration_Support_CMYK_v2.jpg?q=80\u0026w=800\u0026fm=webp HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 37474\r\nlast-modified: Tue, 03 Feb 2026 02:51:07 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Fri, 06 Mar 2026 12:12:26 GMT\r\ncache-control: max-age=31536000\r\netag: \"9b666fb377173c0c88fea7a75f68c3f3\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d009c4305a73ef1e26138117423d6076.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 1DGhBmNWvGR6HufcuTTM9bw_Cyt3bvtr8AZtNC9nh1eH90DyA4QNeg==\r\nage: 35119\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":37474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x498, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b666fb377173c0c88fea7a75f68c3f3","sha1":"0350392d2abc1f1d95ccacb8353186a6b4500de4","sha256":"ab4011382d530527888d57b524a67a8c46a835c19bb14e9d16859cc8975bed0d","sha512":"e5d1419c0c32558fd23a63336e81bcd5a98015aec87bb6a212518ef59bdd0bb55aad8ceb89d7fd218730106977a8b52d740d6c6d20af83a48845cbc965919c83","ssdeep":"768:V4UKgB6WYOHgoGyXkBUlCZ2VXAVzHda5BdEzg697pL5ioCMTz/AGJP:XKgMWdgDSkBUlCAQWBdAg6/jCMT7HJP","tlshash":"ddf2f15273760bbae10b3ff6cc09be9e4d050c9385c8fa362f67535b822d6ca51255ca","first_seen":"2025-11-25T15:27:45.28997Z","last_seen":"2026-04-27T12:41:33.237948Z","times_seen":14,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/drl48lc85rxn/2ItkinQEQq0Cr2FJoxSQes/bcf5046bd427fbe26eb264fb078682d0/phonenew1.png?q=80\u0026w=800\u0026fm=webp","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /drl48lc85rxn/2ItkinQEQq0Cr2FJoxSQes/bcf5046bd427fbe26eb264fb078682d0/phonenew1.png?q=80\u0026w=800\u0026fm=webp HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 23156\r\nlast-modified: Fri, 06 Feb 2026 01:15:02 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Fri, 06 Mar 2026 13:51:18 GMT\r\ncache-control: max-age=31536000\r\netag: \"fad0324327b869080190885488d7f77b\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d009c4305a73ef1e26138117423d6076.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: c8yCL77E3ZJogYi2NsJDkp1PrfiES5Vc7pjqYPl4vsoS7ZHxbLow_w==\r\nage: 29187\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":23156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fad0324327b869080190885488d7f77b","sha1":"abd8dfcad57771e3b7e881e96c5bf13b0e606af5","sha256":"db7b0a4157e87c394e90daeca7387c733b855afda1281ec161caac7eaa5ab40a","sha512":"2d1708c85a58f30cbd5d9092fbee9eb21ab25b9df87b66bf791e33c08f880f6d70666930ccc5ad8e330dbbdcb54ca9007111013b6bce67316439d73b78f28c14","ssdeep":"384:hrP4K5+0SfYn2e+/D8ug24OZuBrsKkdGnsXiGF6MTzT6mp/kwLXq:R3qY2X/wuHKrDkd3DXTxBn2","tlshash":"87a2e03dd4aa66022fd48a0cd77969a4d6074817fe21fb8222fc3a05ad7d900cdeed49","first_seen":"2025-11-25T15:27:45.298681Z","last_seen":"2026-04-27T12:41:33.307679Z","times_seen":11,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/media/Haffer-Bold.ef4665fb.woff2","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:46.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/media/Haffer-Bold.ef4665fb.woff2 HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/_next/static/css/3a0d308db48d13bf.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:46 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 53852\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nConnection: keep-alive\r\nETag: \"690de014-d25c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53852,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53852, version 1.196","md5":"d3be310cf9765fa3b3f0527de9173c10","sha1":"c63077159bd186f536119f0e7a793e931581aec8","sha256":"9121cb27e06e60fdb2b50f4e8b4cdc5b61217011f75f649b732c0d26604b7699","sha512":"efd0b29f428299b6045f199dec06229126c003cb1105297f98955b599e9057edf5a50e2bb8970e2626ed5bb749e81f19bbb029abf32a3dbf33558790e4485d28","ssdeep":"1536:HHut9INfsx35IA2vKLT+/xgc+dhgYoM6cX83L:HHut9Ofa35IAnC/+PucwL","tlshash":"a53302cfc6dc9527bca00ffa52be28ff623e3a3c3edaf4285116660134558961a2c153","first_seen":"2023-09-16T16:02:23Z","last_seen":"2026-06-15T16:42:39.196458Z","times_seen":52,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/apple_images_180x180.png","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:46.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /apple_images_180x180.png HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:46 GMT\r\nContent-Type: image/png\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690de014-2ff0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"9ee9e680a10e4671e4457b87bc577e09","sha1":"56c4fcc3a5e413d1574d4efd26d059fea4c5e7e6","sha256":"cf86fbc4f03035c583b29170c2c197524a9465fffd9686e7cc738e481d0ac076","sha512":"99ac854f53538bfd260ed3e8146ba1ffe4f9d1c7850cf7bd44c352efdb3909a79795a38668f2702381edde92163ada3987e39e78367bd4a776568284ec45efe5","ssdeep":"192:rSIbKdldlgrljYlIlrqkPjurMpFdT2azemXVWnEnGs8omC8pkGkiwWDbdVZ4VjQX:eIQK9oIlrqk7G0xVeyGsRGLjbdgdu","tlshash":"5242c007b993f06e42428dc2f576aa11d6a8f267a4b1302d964e44a87c4cfc79f6d139","first_seen":"2025-11-13T04:51:35.751483Z","last_seen":"2026-07-15T01:36:54.495202Z","times_seen":23,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/favicon-16x16.png","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:46.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:46 GMT\r\nContent-Type: image/png\r\nContent-Length: 789\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nConnection: keep-alive\r\nETag: \"690de014-315\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":789,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"d11f7c9f14ea59faa48289043947ae63","sha1":"c75f92349a9e999fedf963b2b58047d9cec41e4f","sha256":"e2ce2f18d5db7a06ecae976fe7f7607420734ba994cb0a8e1c168bfa401c4319","sha512":"8a743b35fa50ed11658bc021c1c52421dff2cce5e2f609fc511739e03990366d3b72c40a51f8cbe378b79a8cd22f01218e68b8bcc161caa6a6f72bb2434a3506","ssdeep":"","tlshash":"210141549970482d63ba811cabc6609e75be4d6c250f938e8d129d203b26a68a1a1887","first_seen":"2025-11-13T04:51:35.778039Z","last_seen":"2026-07-15T01:36:54.495686Z","times_seen":20,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/css/9dfb97fe6eede0c3.css","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/css/9dfb97fe6eede0c3.css HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:45 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690de014-18cef\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101615,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"43bb1dbb07444c61a241688ae84a7c84","sha1":"7379840296a00ff4a94a36e00f1b5fe1ecd9da54","sha256":"0237ac01d2cac49d5ff64afff23f6ab82206f36909e36500532c892ffcc9f977","sha512":"6742860ee0c0f44ae9b3ce54847ad9c27cf2d067bb8fedfbae9a7c4ae49c1bc24aa1336533b73b659b02a8ae3d523da5a85bf0b368499d32d0adadc0a0258c9c","ssdeep":"1536:c7zJfcAVNf/5TPGoAmdrbKemCzSm7Ve80SgQRpzfaZc5kk:c7zJlVNf/5TPGoAWbKemCzSm7VXGZcak","tlshash":"6ba3e8df3d7aaaac74ff902cb5634b9d421410b49a0f23b9de8395190bc77d21b22359","first_seen":"2025-11-25T15:27:45.274888Z","last_seen":"2026-04-27T12:41:33.180026Z","times_seen":19,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":101,"dns":1,"connect":53,"send":0,"wait":107,"receive":2,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/css/83b420e2d7d8c2ce.css","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/css/83b420e2d7d8c2ce.css HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:45 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690de014-8202\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33282,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33282), with no line terminators","md5":"fbca25cb2cea9cc596d69fcb5641a1a0","sha1":"5967c6f9cde9e29d3b3b3ad7ebd28484367fc5b1","sha256":"90c17e76a2934c35ec8f95e1bbda5b14650598406edb0285be17b31a3e3a3043","sha512":"c2bd2fd29da41b8bad0577e452972032446590481614b68103c677a403f0464188f849886392f1fc2674e0cc516479339aa9dc4f053db64051649a0fed81f86b","ssdeep":"768:YNrZ27GlBIIdH1tNkO7cgNgSgQgDg7gDfZGa/7DfheQ:YN/lBvdVtNkO7cgNgSgQgDg7gDhGa/7h","tlshash":"96e2f9ae3d3472349567c43d77e5578e5a2850d0e60b36ede643ca2983cb2e21b31b8d","first_seen":"2025-11-25T15:27:45.291507Z","last_seen":"2026-04-27T12:41:33.21598Z","times_seen":19,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":100,"dns":1,"connect":56,"send":0,"wait":54,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/drl48lc85rxn/4THyzT3IZKddzwOorTAg7V/86acc9da0b8ef185fa2aa8f26a3707e7/phonenew.png?q=80\u0026w=800\u0026fm=webp","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /drl48lc85rxn/4THyzT3IZKddzwOorTAg7V/86acc9da0b8ef185fa2aa8f26a3707e7/phonenew.png?q=80\u0026w=800\u0026fm=webp HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 18072\r\nlast-modified: Tue, 10 Feb 2026 08:05:54 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Fri, 06 Mar 2026 10:36:08 GMT\r\ncache-control: max-age=31536000\r\netag: \"67dd26974f702ad1e9609b578bd90172\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d009c4305a73ef1e26138117423d6076.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: xnBN_SbVf9nFodKPihwLoxcGaoIExAMZpOSgdttUUXrvuRatJ5eNGg==\r\nage: 40897\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":18072,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67dd26974f702ad1e9609b578bd90172","sha1":"4e23d82709adc6ae57d7aa70312b54e872d2c090","sha256":"294ed04d244fe9b19d63799ee2cb9cb6f3901872bb3c2b4b3ecbe9a9320bacf5","sha512":"2495cc4c9d5fb4642f5ca00f5ba76c60c49ac53391065215b186d5626826c806072e491234c2ae6b2740b3bceb7a5bc8cc4e0748f3a99f6885e04162189d9aaa","ssdeep":"384:xq7DkeJSndfbqBhTLG2EojKWutSfCN/yrRo/udWDZ:4DkhZOTQTgfCEFC","tlshash":"5782cfbccd06af0f94d474d9517a1c01a6df88fa9a3ddba4078037b52e852b5b5ca30e","first_seen":"2025-11-25T15:27:45.311315Z","last_seen":"2026-04-27T12:41:33.201528Z","times_seen":11,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/drl48lc85rxn/Gwm0eBa6KuFVYqNjhuz9G/1f1ddb3accd8e9bea2e4835a0599c9bd/ERnew1.png?q=80\u0026w=800\u0026fm=webp","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /drl48lc85rxn/Gwm0eBa6KuFVYqNjhuz9G/1f1ddb3accd8e9bea2e4835a0599c9bd/ERnew1.png?q=80\u0026w=800\u0026fm=webp HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 17464\r\nlast-modified: Mon, 02 Feb 2026 01:12:53 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Fri, 06 Mar 2026 12:12:26 GMT\r\ncache-control: max-age=31536000\r\netag: \"70d07019660d31f0d879993a5968e878\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d009c4305a73ef1e26138117423d6076.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: 7jHqDcZiCz634BKJeIxwqAt6prgwiquI2dfrdFOWao9RbH9V-VjrZA==\r\nage: 35118\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"70d07019660d31f0d879993a5968e878","sha1":"7578aed7f1c298a17eaf9905cb1d02ac8b6d2149","sha256":"4b5c40efce8e4a9356986255b6c15c7421df7add6b6542f29c88ae469a7a0b86","sha512":"5c644ad6cc1b3b426a59ab9f594a845c8f656d944e3cde677257d256c5edd353eb944869faeac8ac4e34f428f7ba9d7b1142db647ba6778af5a2ebfa05658be9","ssdeep":"384:3q70q+TL1lfTk4A9c/hw9YQLZg3FTdR0kag2IMCibU8aBBf:S0q+/1lfwKiaQLS3FTdR0kCjbU3Bf","tlshash":"9c72d01d91dd1ec730e97409efeb6eb5ca4c3bb7202ca50425286af88fd87951a0acd1","first_seen":"2025-11-25T15:27:45.28854Z","last_seen":"2026-04-27T12:41:33.28467Z","times_seen":11,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/media/Haffer-Regular.01cf166d.woff2","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:46.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/media/Haffer-Regular.01cf166d.woff2 HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/_next/static/css/3a0d308db48d13bf.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:46 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 52812\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nConnection: keep-alive\r\nETag: \"690de014-ce4c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52812,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52812, version 1.196","md5":"efb1c7d489152bfb49a98ffc6707cd50","sha1":"d94708b16754bd3fee69f29362db3e1c9bd0fb2c","sha256":"5371167acc3ccc7e34b086eba1882eced0b8d6401ae3d6c491c995a008ddf25d","sha512":"533c946da1ef149a2581685ae23883c3835dc4b61f4324ab36d6548b0fa5b1a3094df01ac1f22a874b9d85f8caa5cc7e8c10813336b236c5bb711090b7a4ce70","ssdeep":"1536:Ib+P9L1APhFKeheDbKTz5Z7AoJaOhDLBTCuDs7cS:IKP96Pmeh60NJAoJb2T","tlshash":"bf33f1fd6b03ec71d4e53c578ae14e45fcc6012684a0742d5eb53c98de986ea882f1b8","first_seen":"2023-06-05T21:13:21Z","last_seen":"2026-06-30T19:18:45.432201Z","times_seen":34,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/css/3d4cb8975fae1b9c.css","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/css/3d4cb8975fae1b9c.css HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:45 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690de014-2383\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9091,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9091), with no line terminators","md5":"6be1b87b8f3504fd8a99ad0e2c432db8","sha1":"3f9c1d8c96ca5df0386e0f16a9de6233aa04cf2a","sha256":"649f54a5a79112295330ff33b92382205367a86021df53e373abb5ae37adfa94","sha512":"123b38ec0ef8ee45f9bf271ff6ce820b1a7df5ff6ee45eb2c52a81ec51eeb81e098f4186ddd6c357785de7043e530914c92e873315e1170c966389c9fdcf09f2","ssdeep":"96:72aCkRT8EYNb7aFmWUQb020cH2goNWcXxWAwiK2mATb+:TjTciFmdQdHaNWqxrwiK2mM+","tlshash":"66121f6dabb0e319f0fb9459b21196bd1f0d084eb97e0faa6507a639c3c43d1060e0e8","first_seen":"2025-11-25T15:27:45.308329Z","last_seen":"2026-04-27T12:41:33.192148Z","times_seen":19,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/css/34920b9eada478dc.css","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/css/34920b9eada478dc.css HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:45 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690de014-2897\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10391,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10391), with no line terminators","md5":"30d8e448909ea62f321a982a990f2cdb","sha1":"3e18b0a9488f872410f9fe2bc96018377f545190","sha256":"7e59b47c8f577f621d695d107f427aa15977c9293c3f86864d01b06a150914ab","sha512":"48aeab15806754767ce1b6cda80087ff92df91ad76934d0fac97aac4bf7fda0fc3c10305345843780a4b8b9fd6530a3371131ac248047c363d67f6b60ef3e39b","ssdeep":"192:TcIq6tIkIAuI0gJIDINDzSsbnVP9y4l/lcl8al8YlxVmzZq9GVBh:TcWlas3W4","tlshash":"91220d9a29c1706cb46bc8b3dafc5f4c423404b597f7833a5d12927fa3e3692ad25d84","first_seen":"2025-11-25T15:27:45.279764Z","last_seen":"2026-04-27T12:41:33.235121Z","times_seen":19,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/css/e99cf8f842007561.css","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/css/e99cf8f842007561.css HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:46 GMT\r\nContent-Type: text/css\r\nContent-Length: 82\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nConnection: keep-alive\r\nETag: \"690de014-52\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"6da7c4f0b17dac30120664779b50a8a2","sha1":"f7a6537a55c5eab1427f6d7d5effe072a7e24a4d","sha256":"92e3aeaadb390b93b83b81e2f6c5e75c9cc1b197e61cb470f1283b5a2aa980a2","sha512":"fdff93442be9815c44ad54c4e680362659d587dd062c6eba495481bd0184adac456df2c682cf1762ba061619c6721f7e44cf73cd16c4cf1f416e9f8df143ce7c","ssdeep":"","tlshash":"15a01132000ae02088fa0a02b08a88c8302032aa8a000a20faa0ba0a288800c2a28080","first_seen":"2025-11-25T15:27:45.282249Z","last_seen":"2026-04-27T12:41:33.194953Z","times_seen":19,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"images.ctfassets.net/drl48lc85rxn/5nJTaTVYPeHWU2UUXpUF0k/c94298d3ec1d9469c282f8f60215d01c/borrowing_data.png?q=80\u0026w=800\u0026fm=webp","fqdn":"images.ctfassets.net","domain":"ctfassets.net","tld":"net"},"ip":{"addr":"108.157.229.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.ctfassets.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sat, 18 Oct 2025 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:39:C1:37:7A:6B:60:8A:D5:73:9E:D7:C4:F9:3A:11:9B:BD:94:2B","sha256":"AC:EA:37:10:54:C2:91:B5:04:B8:B4:CA:CD:35:48:4D:D0:92:78:F6:E2:8B:D9:57:78:20:D6:74:FE:14:16:A9"}}},"request":{"raw":"GET /drl48lc85rxn/5nJTaTVYPeHWU2UUXpUF0k/c94298d3ec1d9469c282f8f60215d01c/borrowing_data.png?q=80\u0026w=800\u0026fm=webp HTTP/1.1\r\nHost: images.ctfassets.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/webp\r\ncontent-length: 18174\r\nlast-modified: Wed, 04 Feb 2026 18:10:54 GMT\r\nserver: Contentful Images API\r\naccess-control-allow-origin: *\r\ndate: Fri, 06 Mar 2026 03:55:44 GMT\r\ncache-control: max-age=31536000\r\netag: \"0b1ccf4051bdb9c8f8b92ca231b77537\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d009c4305a73ef1e26138117423d6076.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: ZCqF_rAdoyj4cqFixHWG7uqyK_WlGuq2T99XvDJJKxf9T3yqndSATQ==\r\nage: 64921\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18174,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b1ccf4051bdb9c8f8b92ca231b77537","sha1":"a3004d28a2677d7adbf26ae8b920bcc4b4b7ed37","sha256":"6ff310f83f943823c08dc0b7800cc6a4431b570ade468b6bcb73285a8f9bbd17","sha512":"10a37866ac87ba78287c697c3712dbe28f0843a041228447d11ae6846427be122fd2866f3679f61072b5ee627137aad9dd8829fa38f3bfa752621cd37462669f","ssdeep":"384:Hq7lRUo2ZRZ3aEnaU1RIMs3im1S6hej3uwp13eH2meIdb+xj:ClyPakaU0MspFQj3uOF42bIYj","tlshash":"5d82cf819726d8d6bdf4a8203cc5092d25aa4ceb221136ec77e11af08f5bb1e7d83013","first_seen":"2025-11-25T15:27:45.303466Z","last_seen":"2026-04-27T12:41:33.290862Z","times_seen":11,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/undefined","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:46.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /undefined HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:46 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 153\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"aad3bd278f678e0130de8270d76d8685","sha1":"3df1e1de8d09f143b3a86820cccba2ede497ed87","sha256":"1b99284bfc6859dc384b7c81a29eda1eb815005952a1a78f6d7b21ab30726286","sha512":"48f2c31f2e20812e8f9e9e516851bf6fc478bff4dcd0fef5f03a1a4ec4178fe4c2aefdf860da23ae064775a4dcb409bb0aad822bbf42835b7f94761a8085a740","ssdeep":"","tlshash":"6ec02b2d39137c4cc5a3317422c37880c0ca83376cba41128400800331cf2998ac3397","first_seen":"2026-02-09T01:33:08.879169Z","last_seen":"2026-07-23T22:27:52.173396Z","times_seen":4071,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/media/QuadrantText-Regular.b0f15e57.woff2","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:46.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/media/QuadrantText-Regular.b0f15e57.woff2 HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/_next/static/css/3a0d308db48d13bf.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:46 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 29936\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nConnection: keep-alive\r\nETag: \"690de014-74f0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29936,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29936, version 1.0","md5":"58a0de14e132b0c59301f5ed3bcfcc90","sha1":"5b766a06593d520ef4a2f110dc566b8b4e65b306","sha256":"2f6908edabd0f53235eeb82f05cf82708bbc2358711df763d16bf4ec4ab01091","sha512":"276e92f30a8aece9b5078cf486a4359dd1f47daefce684e434113d78a4aca10223c5eab7137dafa403e71be5e58037a662e991b8d8ff547df81281b4e3273300","ssdeep":"768:GhCe8tv01VNA8vf7Gwdp0OuMk7TWh97MyzKGIW9Q:hek81VNpnjWO+TWHnziYQ","tlshash":"01d2e1a4cca760b2efdb8635271611ce6098e92991638ad47b4e03c5a3173346b3d79f","first_seen":"2025-11-25T15:27:45.300919Z","last_seen":"2026-04-27T12:41:33.287866Z","times_seen":22,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/media/Haffer-Medium.c730a58f.woff2","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:46.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/media/Haffer-Medium.c730a58f.woff2 HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/_next/static/css/3a0d308db48d13bf.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:46 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 53488\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nConnection: keep-alive\r\nETag: \"690de014-d0f0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53488, version 1.196","md5":"7f010d22ac7d946c8ad0fc67adfe6f80","sha1":"bc0196687b0d80d860b267029c89835e830906e2","sha256":"6ea055a939eaf3633cbc30d40b25ff5a3e6d29184930975911a336b045145a74","sha512":"244d5c56184ca150ac875ac01981c1811de2739d440cc7764840af7f44cc99d66d2f986d2de0b191f79c58aed574e6d4ae459336af16973e560c14297ae6da86","ssdeep":"768:+0b7k9oBAL0UOf41LlHb+lf3sdWk3/QL0ZeKWdmg9GYvpiqS6nL9y3KFNbY6L7/1:Vyo+ROgFlHalzedWdioPySL7H4/k","tlshash":"3133011850cefcaed41eea2ec0492e7b0450ddfe05d5c069c27fa22a76bcc687b565c6","first_seen":"2023-06-05T21:13:21Z","last_seen":"2026-06-30T19:18:45.375642Z","times_seen":30,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T21:57:45.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:45 GMT\r\nContent-Type: text/html; charset=utf-8\r\nLast-Modified: Thu, 13 Nov 2025 11:33:49 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6915c21d-9eb1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Contentful","description":"Contentful is an API-first content management platform to create, manage and publish content on any digital channel.","website":"https://www.contentful.com","common_platform_enumeration":"","icon":"Contentful.svg","categories":["CMS"]}],"data":{"size":40625,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (945)","md5":"ae578e6d66b26b20eee8b8879fce9e84","sha1":"eb958c51d78a854287b59e78f3967455ffb553ed","sha256":"23debe746d0b77b9b78870dcb25f762ef3fa8359da820b8ee37d3b54df2e3dda","sha512":"31516e304003ededf236a9c0e4045263cd4d737115f55765e4ad581942ff662b56036d7220b7db94941f39cf5b45809a8383526667ba725110104ca3736e0d2d","ssdeep":"384:hfNO+9ixJSPb4gy/F3h+y+pIDniX2QiOCEkCYhGGOKI5OWQFmOyO1WjfiZlnOqaq:hfNO+9ixJSj4gy/F3h+yLJFS4W5u+5g","tlshash":"c003c962328e38ba236786e5309d59d4d10bfab2c35241dcf43641eab7c1dfea95d231","first_seen":"2025-11-25T15:27:45.302168Z","last_seen":"2026-03-06T21:59:58.862565Z","times_seen":5,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":128,"dns":11,"connect":57,"send":0,"wait":57,"receive":1,"ssl":64},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/css/3a0d308db48d13bf.css","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/css/3a0d308db48d13bf.css HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:45 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690de014-c86\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3206,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3206), with no line terminators","md5":"8f8baca1e631d046f08416871ea16aaa","sha1":"a9f4231c14aded74dde4fdf39e455f0de6a5d569","sha256":"b108962940db3519c3f7282c949af0235a6c902b92a8319ec2fd7b8e607ddf80","sha512":"2a87db35a0c0541f08a5480bdc1ce44d789956744d3815a29418ce30fa9e921469f3466646198f58df10285b28b122eae202f1b2088e729a254cf600b3840879","ssdeep":"","tlshash":"3f619586dedbe008a56bc95e72c9277e1d3e1c50ea054841e14edae4cecb7e30391b4d","first_seen":"2025-11-25T15:27:45.307061Z","last_seen":"2026-04-27T12:41:33.260908Z","times_seen":19,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/css/875ccfcf92129add.css","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/css/875ccfcf92129add.css HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:45 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690de014-10335\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f2f2be1770b5733af1557d852afb6cf4","sha1":"759653330a4e8ce2a44852d73e0422610baf7f6d","sha256":"56a32ada98a32e7f2eada393282338b12822a73b9ed805ca12373d876770b9c3","sha512":"deef47e53dae40a1f35232d5fc53b2fc5acda863da08d792ed54c45d9e50721ffa9a0c22f8baf13c9aea02a7042ed815d4a29d049f1f97056f0f91d34e6e76a7","ssdeep":"1536:vs+G5KZWXu1/qicNSTYyKIEEaizXrcUO2uSxWgYhCgq4tIv0gQ:0+G5KZWXulLcNSTuIEEaizXrcUO2uSxY","tlshash":"2153e5af3f257678d47bc82bead257cd4535d424c71b23aca583962943cbb92072328d","first_seen":"2025-11-25T15:27:45.310075Z","last_seen":"2026-04-27T12:41:33.218815Z","times_seen":19,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":103,"dns":1,"connect":55,"send":0,"wait":108,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/css/9c57229695a4dcd9.css","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/css/9c57229695a4dcd9.css HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:45 GMT\r\nContent-Type: text/css\r\nContent-Length: 903\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nConnection: keep-alive\r\nETag: \"690de014-387\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":903,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (903), with no line terminators","md5":"34e7c3f596b750f1ca68a0b2c5035d71","sha1":"b988aac0d0832159a491a57aed14bce768bbd189","sha256":"f98cb034ea43b7393ad5279c638ddf8870c1eb5c4ff88db4fef02b582ca347c0","sha512":"e7101f1739570c5d96f17e1fcf4b1d3fd9cd162c06bd924b06ba7dae1e2f6ab505cb321fa92cc0dd57e17a0eced337862ab916d3942958d00a043ca3fe62edc8","ssdeep":"","tlshash":"ac113a056a043f156db7452681d0cb49c27cf27cab624ef9b5431a504ed30d6177de76","first_seen":"2025-11-25T15:27:45.294398Z","last_seen":"2026-04-27T12:41:33.228157Z","times_seen":19,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":104,"dns":1,"connect":54,"send":0,"wait":54,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raydium-app.com/_next/static/css/eb27b6882f8b88d7.css","fqdn":"raydium-app.com","domain":"raydium-app.com","tld":"com"},"ip":{"addr":"176.125.242.151","port":443,"asn":44477,"as":"Stark Industries Solutions Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://raydium-app.com/","date":"2026-03-06T21:57:45.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"raydium-app.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 12:47:35 GMT","end":"Sun, 31 May 2026 12:47:34 GMT"},"fingerprint":{"sha1":"4B:87:7E:54:0F:04:45:CF:20:F1:1C:AF:27:D6:70:6D:2D:0F:12:95","sha256":"A0:BB:74:FD:FE:F8:1F:71:E0:7D:CE:2F:3D:0B:AA:C4:34:26:00:88:3B:A8:E6:27:2F:97:CB:E0:6D:53:4A:A0"}}},"request":{"raw":"GET /_next/static/css/eb27b6882f8b88d7.css HTTP/1.1\r\nHost: raydium-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://raydium-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Fri, 06 Mar 2026 21:57:45 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 07 Nov 2025 12:03:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"690de014-c2f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3119,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3119), with no line terminators","md5":"91aaf58e0c70fb8b16758026fcfb0782","sha1":"7f4aa8a3728377c9b0293d90a7eae6937dd24628","sha256":"4f22c4e72c4a258bf75426165b94aedf27969159917698683be9e0d061b08b6e","sha512":"6add4e2d1217eb1ea588b3a2dfe1c1c05f231180824a39720957532545fdd2505f555e8303211e57e046cb471ba822b8983da25047bbb8d60eae13a6bc77086a","ssdeep":"","tlshash":"7151dfbb76517a35f93f8c26a691334f533bcb4055af53eec1a3927403866b11a229cc","first_seen":"2025-11-25T15:27:45.293102Z","last_seen":"2026-04-27T12:41:33.23162Z","times_seen":19,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":108,"dns":1,"connect":60,"send":0,"wait":56,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"raydium-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}