{"report_id":"de86839e-2c3d-495b-9f3e-08acd9b6ce89","version":6,"status":"done","tags":[],"date":"2025-09-24T23:00:08Z","url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"172.67.182.96","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"title":"Portal Token Bridge | Fast and Secure Cross-Chain Transfers"},"submit":{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"172.67.182.96","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-29T23:00:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":10,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.21","port":56132,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:59:54.314219+0000\",\"flow_id\":1587078327089600,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":56132,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3083,\"start\":\"2025-09-24T22:59:54.309696+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.21","port":56146,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:59:54.323558+0000\",\"flow_id\":862248908806585,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":56146,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":915,\"bytes_toclient\":3158,\"start\":\"2025-09-24T22:59:54.317881+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":37116,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-24T22:59:54.489242+0000\",\"flow_id\":2149910168887987,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":37116,\"dest_ip\":\"34.254.135.82\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":921,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:59:54.418483+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"52.16.144.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":35490,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:59:54.496994+0000\",\"flow_id\":823538368545201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":35490,\"dest_ip\":\"52.16.144.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058798,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed4.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:59:54.426417+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":37106,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-24T22:59:54.497338+0000\",\"flow_id\":1882376656019981,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":37106,\"dest_ip\":\"34.254.135.82\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:59:54.418317+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"52.16.144.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":35482,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:59:54.505877+0000\",\"flow_id\":1681735111311653,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":35482,\"dest_ip\":\"52.16.144.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058798,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed4.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:59:54.426277+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.21","port":50912,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:59:54.707482+0000\",\"flow_id\":1273595106604454,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":50912,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3092,\"start\":\"2025-09-24T22:59:54.701862+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"104.26.15.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.21","port":52410,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:59:54.711680+0000\",\"flow_id\":1888149092091627,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":52410,\"dest_ip\":\"104.26.15.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":922,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:59:54.706283+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"63.33.87.37","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":39396,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:59:54.825457+0000\",\"flow_id\":385086632135075,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":39396,\"dest_ip\":\"63.33.87.37\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:59:54.756131+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"63.33.87.37","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":39394,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:59:54.830575+0000\",\"flow_id\":506221889751291,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":39394,\"dest_ip\":\"63.33.87.37\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:59:54.755963+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"wormhole.lat","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":110,"request_count":55,"received_data":13078558,"sent_data":27000,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ramda","description":"","website":"https://ramdajs.com","common_platform_enumeration":"","icon":"Ramda.png","categories":["JavaScript libraries"]}]},{"fqdn":"sauron-staging.labsapis.com","ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-18","domain_rank":0,"first_seen":"2025-07-14T20:08:06.688554Z","last_seen":"2025-07-14T20:08:06.688554Z","alert_count":0,"request_count":5,"received_data":1220,"sent_data":2836,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"binance.nodereal.io","ip":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2021-07-19","domain_rank":1804985,"first_seen":"2022-10-20T10:44:48Z","last_seen":"2025-09-24T00:03:51.74104Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1003,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-21T22:12:58.070161Z","alert_count":0,"request_count":1,"received_data":239256,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc-dataseed3.bnbchain.org","ip":{"addr":"52.16.144.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":5059613,"first_seen":"2023-12-07T18:13:02Z","last_seen":"2025-09-22T11:37:21.681616Z","alert_count":0,"request_count":2,"received_data":1110,"sent_data":1016,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc-dataseed4.bnbchain.org","ip":{"addr":"52.16.144.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4946679,"first_seen":"2023-09-19T15:40:37Z","last_seen":"2025-09-24T11:12:30.833683Z","alert_count":0,"request_count":2,"received_data":5971,"sent_data":1017,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"binance.llamarpc.com","ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2101135,"first_seen":"2023-09-18T00:31:06Z","last_seen":"2025-09-22T02:47:44.056928Z","alert_count":0,"request_count":2,"received_data":7675,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"configs.labsapis.com","ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":93306,"sent_data":1823,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-21T22:12:58.000435Z","alert_count":0,"request_count":2,"received_data":798863,"sent_data":894,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-09-21T22:32:54.705622Z","alert_count":0,"request_count":2,"received_data":512,"sent_data":850,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.21","port":56132,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:59:54.314219+0000\",\"flow_id\":1587078327089600,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":56132,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3083,\"start\":\"2025-09-24T22:59:54.309696+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.21","port":56146,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-09-24T22:59:54.323558+0000\",\"flow_id\":862248908806585,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":56146,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":915,\"bytes_toclient\":3158,\"start\":\"2025-09-24T22:59:54.317881+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":37116,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-24T22:59:54.489242+0000\",\"flow_id\":2149910168887987,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":37116,\"dest_ip\":\"34.254.135.82\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":921,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:59:54.418483+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"52.16.144.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":35490,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:59:54.496994+0000\",\"flow_id\":823538368545201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":35490,\"dest_ip\":\"52.16.144.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058798,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed4.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":928,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:59:54.426417+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":37106,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2025-09-24T22:59:54.497338+0000\",\"flow_id\":1882376656019981,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":37106,\"dest_ip\":\"34.254.135.82\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:59:54.418317+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"52.16.144.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":35482,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:59:54.505877+0000\",\"flow_id\":1681735111311653,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":35482,\"dest_ip\":\"52.16.144.188\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058798,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed4.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:59:54.426277+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.21","port":50912,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:59:54.707482+0000\",\"flow_id\":1273595106604454,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":50912,\"dest_ip\":\"104.26.14.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3092,\"start\":\"2025-09-24T22:59:54.701862+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"104.26.15.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.21","port":52410,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)","source":"{\"timestamp\":\"2025-09-24T22:59:54.711680+0000\",\"flow_id\":1888149092091627,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":52410,\"dest_ip\":\"104.26.15.157\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058790,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .llamarpc .com)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.llamarpc.com\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":922,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:59:54.706283+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"63.33.87.37","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":39396,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:59:54.825457+0000\",\"flow_id\":385086632135075,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":39396,\"dest_ip\":\"63.33.87.37\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2025-09-24T22:59:54.756131+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-24T22:59:54Z","timestamp":1758754794,"ip_dst":{"addr":"63.33.87.37","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.21","port":39394,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)","source":"{\"timestamp\":\"2025-09-24T22:59:54.830575+0000\",\"flow_id\":506221889751291,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":39394,\"dest_ip\":\"63.33.87.37\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058797,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed3 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed3.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2025-09-24T22:59:54.755963+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-05T16:06:41.96463Z","times_seen":237089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/868-3ce3998121f4645e.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bbb42a10a00675d1e0044afb2153311","sha1":"2fd82fc743763eb2e35e6f8406c6a3df8a925624","sha256":"29469ea6e9f142b89eefd34eab1ec1033dc03764c1269af8636b2a5d3f3fb2d5","sha512":"de3f9260c77cfe19ab2dd575d7d06d0a03794ddb008d2365adb7f42d554a727585b71271945f39a968a57b9d668f3e702816b80491b14d72567e04f3ad2f0cd7","ssdeep":"1536:9F6mAjWI8I3vLfKNDvsyauUA0Q5bcoiTYjFygy5SHknLgloc:9ApWI8I3TCNDvsyG265Jc","tlshash":"f5a34bd47192b06457a355de90bf4447f32c3914350ecca0f3aafce969a44aea223f6d","size":100564,"data":"","first_seen":"2025-09-24T23:00:28.771313Z","last_seen":"2025-09-24T23:00:28.771313Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/merkletreejs@latest/merkletree.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1e3cfb6bf3c22627d948eaec2e66c34","sha1":"6dbc88ab26ecac18b14c77532ac45319b69cf25c","sha256":"6f224452ec299dce9182e36012e233e797c31214d1ede5e53d19d48660b07811","sha512":"acb90b1c775d73bb4544318e39c23d21bb698767e2021d62c1565149389d558044b80e91dff2c7f021ed57026e68f0001f95426db27cc58f793768a92fc67819","ssdeep":"","tlshash":"ef11ebcd33e1b0d697cb66a8421f910ff032a93580dc8840c66984f53df005e8293f0c","size":1000,"data":"","first_seen":"2025-05-04T18:53:27.88867Z","last_seen":"2026-06-06T05:53:08.193907Z","times_seen":814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/5e524555-9879-4f5a-a061-144fc48a75b4","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-06-28T16:47:47.454007Z","times_seen":5087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/7330-638fcaf5df3c6fa3.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df31300e476ddf1e783a2be89a5ba177","sha1":"f96441e537ca1babcffdc6b05ef78aaa48ff77c7","sha256":"8ed597c342169c4f40715c704c2f4be46814d1f5cb7accad4f1a8ddb5b510c66","sha512":"75d992f6e31b06e28cf26b2017bf21e8c6e7474f8555f069dfc29a38ff11c6acf1546c1d2050178a81435858d03c1516e7d3c29d6a170c3a6729e8d29753e294","ssdeep":"1536:2O8bba5vqh7WBzEIyLud+u8qmLVQKhAK9Qvd0ThT:29XaKW5EL6yvf9","tlshash":"5b933bf21760b0cb4708098f584f960442176bd4e7c8d19eb369c5ebebb2e92e60677d","size":90983,"data":"","first_seen":"2025-09-24T23:00:28.81342Z","last_seen":"2025-09-24T23:00:28.81342Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/global-error-09ad6195d416a997.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7067d484d9efb64d02ba29b24afc4482","sha1":"a1016749961625a2f5096b5bf46696aa5d25bca4","sha256":"10534af1371efe4e60c21492702cf997a45e5f1539c25ea7def26da30aa09b91","sha512":"f21c0f5c3cbc7d6faa8b7a478ae6df9bf67902b1f6ff2b3a4d6320fd0419a1e9cee598ebd1b2fc35fe11e2885aa595c78afce97f0c6cacdf80735d3318549111","ssdeep":"96:P/9u06HqM6vw9Tz1FqtZhq7p07x4I1sbZFs1D9GClM6tLbsFOKAm5Wlqa6BW//J8:cNHqM6IhaZM07xfi7sAwMrE6BnB","tlshash":"74e1d8a331e0e8d5269a04d5c4374019f2522c3e625fa2f0b7a98cf997c14deb163fda","size":6970,"data":"","first_seen":"2025-09-24T23:00:28.750922Z","last_seen":"2025-09-24T23:00:28.750922Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/8994-30d0c2202e81bfcc.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db78684150c58b5db62406570005a6b2","sha1":"495e374965949235c12c60f7eac6e2d0f30f2cd4","sha256":"7643c239df76af6fba3983bec78603f9715bbc985c2b4617b1179fcc3d6cf45f","sha512":"b46c98c3e0497571f1c31a5517d25ad31e35ae47e2e8e51c932d49a073ffcb9dfaf45af640e55a82be5089b695b0a0893c52462352391d5cbcf42a595f5e7d5d","ssdeep":"768:sMKI8piJhLSaDUWvRgmXxGKOeT1NgtBc1/LnuhUihThQzr7hjnIOOajhk7tK/r4o:JgHKSBcTzrNU9aNY73SDsbo8CL","tlshash":"25232ad5b282f5356fa384c9d47e0028f2252d14780e94bcb2bd6ce666479ceb436f39","size":47615,"data":"","first_seen":"2025-09-24T23:00:28.786599Z","last_seen":"2025-09-24T23:00:28.786599Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/59c16d10-511c98f8d5320d19.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cf6e0aa323758cf67381ff872ce2c1c","sha1":"c4defbcfcdd94fb0abbb5bfd32b91f3c8bd0f46b","sha256":"27a23fafa598c24857c678bff81774c35839379a9c3cd41a76bb50f80b76cd78","sha512":"4e187863bc0f8c353fd79eb9a72f3b4e3678e64c772c4073955209f3227f0eec917ff2848f4b75c01265531462f8713309b5a38ee8ce8ae3be0561c198c84d72","ssdeep":"1536:KewwthFx+vZh3yk0m8NzI0o9IttuvwI03Df7WMEoiuwrV3XIDIbW4spX6:KHwt3x+vZAhDw47wrV3mK","tlshash":"acb32a853162f07207fa96f190b64001f37c9a56345dd430b29cdedb26e898dab7af36","size":113994,"data":"","first_seen":"2025-09-24T23:00:28.788295Z","last_seen":"2025-09-24T23:00:28.788295Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-08-05T14:52:21.563572Z","times_seen":52647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-05T12:11:48.059157Z","times_seen":31854,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-05T16:03:52.062963Z","times_seen":214952,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-05T16:03:32.734089Z","times_seen":738485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/5dc99f56-b11ce1da4ab1229e.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05b005ce97dafc33b9736be466f11280","sha1":"ac0e4083bfbf96b1d67838f9cec11a712e825aa1","sha256":"267ab5be27331794860503c2db2631f6b97578d20a1c67a9018794739ec81d63","sha512":"80246104c5a1e953b6dde02b9f18109e826b06798c25294fd28b763806ea6e57d7dc66a1b97664e41a141457ed3d87ae96e93f872ac808324b9f1e1c7cc5c974","ssdeep":"24576:Aho5hKk3gmJE9nhsPZIVL8GOESpJOW7QYhF:ek3gmG2soGONpJ77Qm","tlshash":"a0258db5b3847160a9174bea90bb000cb63e2414751680f0f1fe9cbd5a691dca667fef","size":966024,"data":"","first_seen":"2025-09-24T23:00:28.792785Z","last_seen":"2025-09-24T23:00:28.792785Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/f2399982-829100d76f1c2e81.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae49c3b8b7640921e31d3e351bd2a598","sha1":"85ccd55aa3e944776d104112e071bb0d6acc0e1e","sha256":"d54d76d2153a82a122ce2228db2f0b71ce6d04198f104acd7006cc0a6855c751","sha512":"250e7090484360d3b7d355450264895fb79f1cdda2841ac0fe7bd39b4d869ee5439b32ef635fc71b81b59337f0d86cb9a9396adb374ccc57c32c1c4b609aaaa7","ssdeep":"12288:oSPc7f/9VMCpbxvNQo2KihY9Ge76HccsN8xP4eeSF/eO:oAc79VLb2y9Ge+cc+YPKSF/j","tlshash":"cc05c0653bbaf67383976cf010320841e67997c910884525bedc87e6376d48b83e9e7e","size":842787,"data":"","first_seen":"2025-09-24T23:00:28.760272Z","last_seen":"2025-09-24T23:00:28.760272Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/135dcde4-5edfc4411e10a081.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab0ebc9d37711195ca5eee4216f14cd0","sha1":"a3cc6d19a619fb2eba346c4695ca639ccc8cbf87","sha256":"8f213368b0e89bbd2f9c575a3e3282eeffe1b7ba0fd4d05d15b43fc46fdd86f6","sha512":"c96b717fd46aed8165aceb38f47dcd594372cc70c4ad231403f4fe201a6fb699741cba450a2acd584a7377a355365d910aa44d4b1c8e9d7f02d60b2cfa6ab64b","ssdeep":"3072:J/kVZHNKKXa7C4sAa49TxUSv5UeTepO2mkw9dEpKHe:J/GdJa7CiBlxUSvGeTepO2sLEpKHe","tlshash":"d2f33ad032a3f07647f625d904365102f2b99954718b44acf27c8eeb3eb984da5b6f38","size":167964,"data":"","first_seen":"2025-09-24T23:00:28.766446Z","last_seen":"2025-09-24T23:00:28.766446Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8920642411d40a5801fe5695c0ab92c","sha1":"bcb496842b5d9aa133dae08f5e5fcd8ee40580d2","sha256":"6960df72c661ed30ec7e93a712f1938037f1ed7855878c1029871d2630cb9748","sha512":"4c716a9c747fd0551db37fddf44a5cabab4ff4802e323b100d7934dc92cea02ac3d0fa0ac24b40c1b5c8e59385c235a1817527090fb9a003cae036e606b7b52e","ssdeep":"","tlshash":"c5414a1e7940f4192cb3de1f15bb1f22944d98735ab9aaa89d1ee8be822153f0325c31","size":2249,"data":"","first_seen":"2025-09-24T23:00:28.819134Z","last_seen":"2025-09-24T23:00:28.819134Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/09ca2727-afb2d96dc9df65fa.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d75b7c3b24e5b8650aa800c657db9fb2","sha1":"b1dc9a714db76e2cd7f64383197293995b58771f","sha256":"35e403729bb5ac4eb98cad33739131b9b83be1c60159bfb30b3982f7bcf3290b","sha512":"3d3e9fc76ae92be5289fb8f556df42652b5b8999f41e31205a4f2abdb953b725c94b163bf53eb3a225ad243bd121df6040b05d4eed1e1a2ea23940315efc54eb","ssdeep":"3072:2IYZqL1X4N82LubwkMhbxZoPejZKpvlZ+IhbxZwzonpujoC:2IYZqL1X4N8jP8ZKpvYzon8oC","tlshash":"ac84c9b8b2867ede5cd079549d5b8804e0a07d87a0cd880277dea9bf16f60c4dce972d","size":374795,"data":"","first_seen":"2025-09-24T23:00:28.746631Z","last_seen":"2025-09-24T23:00:28.746631Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/7210-9c52b527c4e22953.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b2dd4e2a71965e450649f88c8cc8f35","sha1":"be26235901d135f276764696685ec3fd7fde8ca0","sha256":"062ca16063e6a60e13451be2debf0109cf819ebae1c0c05ae68846fa9f103740","sha512":"643f160f90482cc744062f9dc71895069aad19412293923005416d07f66095873bb4653663d5131da5ad8999cd1d35628f3b28971301ccfb0e9a383d21028cec","ssdeep":"6144:bNBHBjWKthYlHwDAMRSz44/zJJNcK0ZtqgzZG:pBdDjRSE4bJJKK0Zu","tlshash":"e984f7e631d1f4a207e745e5803b0006f3391c6a341ee5a0b3addcda796649ea173f6e","size":383045,"data":"","first_seen":"2025-09-24T23:00:28.785079Z","last_seen":"2025-09-24T23:00:28.785079Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df96671757f14db3f4aaf6056939742a","sha1":"d623942e13e5577600862ed0bf321c27c41d92a5","sha256":"5c588d23b988410dac889c39868c4a7db7ce9fafb9eb849dd5b079d1c3448213","sha512":"c754acaa9ff3280862e8c77ee655e14972e6e14a3d9b0239479d4c1ffeb518acb6461e48ff12facfbeff080d4255e9630bb7bfbf4628dd101f8baa2894d81444","ssdeep":"","tlshash":"71418a1f7944f4592cb7ce0b51bb1f22944de8734ab9e9a89d1ee8be812153f4329c21","size":2249,"data":"","first_seen":"2025-09-24T23:00:28.82033Z","last_seen":"2025-09-24T23:00:28.82033Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/3fc566b1-f6ab41026c8defb3.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a71b436efb256bee954d3ea815e33fa6","sha1":"eff3747230a1b2e659deaf20bcc5e216d5e7a516","sha256":"3e114e0c80e997393b5bbc9fe0b856a1464bde6515ffc48fbf3b1982e19c19b5","sha512":"7770efb178ea54fff7e20c2e94f59c95ee4dc9d3ce0f39de7043506fc13761fb5e1af93fae63be4b9b7c536bc1474f53f312e9a948465ff0143660b7ab502be6","ssdeep":"1536:RJyjFHQa++E58SoxW/bsrubV3xWLQwOsLIEyUXGJ9hKb+gbM+EMdYI0K7rfM:RJ5+xGswEcxbU49sk00KU","tlshash":"27f3f8ec3d55e6126eb702a700df28037338262b640d4da0a611fdde75b845bb16bede","size":169031,"data":"","first_seen":"2025-09-24T23:00:28.779943Z","last_seen":"2025-09-24T23:00:28.779943Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"842320672375528198b2f57fef097ce4","sha1":"8eb75fa2532c8741f724a7321eb9a29c808e7055","sha256":"58f88ea7e965f8b3efc7b7592b82f79e83415232401e32dd558daf2e3a9f03c7","sha512":"a7256b93610427816902532d96b370aa84015456ff3dfe7da0671889c517a7bbf63d233ebc63430472ef84c5084d3afb76900f059571068c1ee4146f0c2e025c","ssdeep":"","tlshash":"0411ce1db14af8916cb2de1f603a0f728488cd3e437491e8a18fdebb914197e174c896","size":1057,"data":"","first_seen":"2025-09-24T23:00:28.821418Z","last_seen":"2025-09-24T23:00:28.821418Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/273acdc0-19e382ba00319df6.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46f30e0636477089140163f558fd5231","sha1":"976eb5eb2ddbc432e8f79ce3efa704a4e14ecab0","sha256":"7f7fc3f5419a5936b009ec5267f561a3b67773f09dee6670c0f8888e6ae410c2","sha512":"dd6101ff2cb2cc038a6d9931d6a02fc45d790103bc97dd9c0bda3f0411b81c72ec9468d51c83a91af28b6a3c8dd38e5c22cc24c0f1fbfa11ff3056bbdafb620f","ssdeep":"768:KsTpc4smM7iXj/GLLf1ZsN2AAAAAAiFtIbeKaTct2z4RNzWSjNIYi6Nsg8U8Fs7W:nj+qSS3LV8tczWo8+","tlshash":"6f2309b211f750691be00cd884870ba166b481722c4655bde77cdce538b0adbe1bfabd","size":46649,"data":"","first_seen":"2025-09-24T23:00:28.812186Z","last_seen":"2025-09-24T23:00:28.812186Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/1428-a0de070fec3d19ca.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae6458d15e583da7f9423e5a8e9c283f","sha1":"d04bd565f3a140e373f7e99bf0b1ced4e5ae227a","sha256":"5e53c06b8ba3e31582b288ee789988db0d98aa04b859299f91587e4ec6fd29d1","sha512":"bb088e94b38563bae9fa952081f1f592aabf21ff0608279fc5959770a740ca36d53817cc394b8fd08a4575fc48363c7844ee37349a1b20869e3a7b449f04d4e1","ssdeep":"24576:qM08waHZwJaUwR8Ka2Z+cauH7oUKTFRQ/tQYHi:b0ewJaUwR8MZ+ca4oJTFRQ/tQYHi","tlshash":"b3555ce53265f4ea8fe614e1182b1505e238ad98744d449cf39ca8e779ba8c4c53ff38","size":1384896,"data":"","first_seen":"2025-09-24T23:00:28.822911Z","last_seen":"2025-09-24T23:00:28.822911Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/layout-7078c10eb325c92f.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2222d48ea01c74c173dccb0fe37a842d","sha1":"a02ed0f64306d8a1f4f7e878c149407daef470c3","sha256":"848a4063f1bbd2cd988bc1cc0e22e6e2aaa4d839cf2a60e7d4b033072b7a7bb4","sha512":"64b87737cad37144cc835acd460b0c09826e288cad6293e9e23f44d1bc5dc533fa12069fb5ecaa2ed31dfbeb3557913b9fc37dff6e4a82a935a203784e7ab644","ssdeep":"1536:m/HLAUWkVlRaF7Ja/N/0uEs6DhoDt1Jvp/23f3bNrRpdReNykMl7Jd/aFr+GdSQ7:m/sU7lRn/KubNt7N0U","tlshash":"5534e9dd6bb04af1fc4ae7fad2222068395b24b96fc28a3cc3985d14d47295cd895dc3","size":231872,"data":"","first_seen":"2025-09-24T23:00:28.791147Z","last_seen":"2025-09-24T23:00:28.791147Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2ea7c17e36e9b4f6dd6bef794ee5026","sha1":"9b9a04b8b9e64aaff4ed61cc2f0be53b33a1a6d5","sha256":"66aeb86a969bbfb910126d02cc7d92aad51300d351891589201e40b59c9e8c51","sha512":"9bda77b0e81938e694b96ca50666f6a23060e242aa3d9f30e54e397dee2f52b360a7a54681dd1c5a8c09dc933122c740c28044a543edfce51e29ba404e12beff","ssdeep":"96:LWHDbErBrnima5TZsaIwsv6z6vX6a6HaAEp7cg1xqzc/xmWlpzjQ:8nGaAaQb2gnqzcpmy2","tlshash":"03c1bbe91408dd4bed8a7d5812fe6c3b20cd859f46c5dbbdd2c4de110d834bd6a92e81","size":5598,"data":"","first_seen":"2025-09-24T23:00:28.824676Z","last_seen":"2025-09-24T23:00:28.824676Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/c6627b04-29e31584faff89ff.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d887cc43b7c4cd0ccbb02e52687d7002","sha1":"6f0e2baa039526958f508e03a0009b45d122fdf4","sha256":"164c84328ae8419933b6a73b33111288ada4a69cc30793f0c17a9bdac8113378","sha512":"f2ff15180e2d07c46d7561b6237963f6aca4c3d52c6f11992eb6483517df309b0116677b5c564b8e0888be963437561987e651da07a5e685abcfdc74076643c3","ssdeep":"12288:3KNxQhdF3UQDDOvq/FOX/owtApUF9Kj8tXReLUg:3KNihvDFOX/5fwUg","tlshash":"18d43af47370b0a547aa10e1142b1109e339a69c740d84a8f79c84fb3bf6a95d96ef3d","size":615524,"data":"","first_seen":"2025-09-24T23:00:28.810726Z","last_seen":"2025-09-24T23:00:28.810726Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/main-app-4ff2bad30ceaa27f.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4e5ad922e97f63e5c67e59b1a1586e3","sha1":"6fef5b691d58a363afd607063a896a8bd250d963","sha256":"e2df4230efd734437e7b038ab082f3c43d90836af776c400874f200af3d1c602","sha512":"e81e253b8daf59dbdb49374eb172481c5f30f17354243913a40676792dc6309b1342dd455f3a04d1a961e440f899b40321cc3e42b93f1d3ab2496878a4f76446","ssdeep":"","tlshash":"715167e11664651f9ba10fd4fc1318d2682f0136230bdd90e6a8ee6e5432fcdd251a45","size":2671,"data":"","first_seen":"2025-09-24T23:00:28.742008Z","last_seen":"2025-09-24T23:00:28.742008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/0e95678a-5903dff21df05626.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5b2495beb284729e9e3d83eff040c7f","sha1":"e48c68fe252dac925d5510d549ed6c3142371363","sha256":"f289d5d5e4d10a5849ea6a971743efee467d73f73bcd1fba01177a582433bcee","sha512":"6b91bde4a91863db81c49109d6a3eb655604cb6f11a11f534c9e052e22c6c191500730cd9fbd50cc73e77236f9f8e38669835b34c994daf89124e14a53c4d0e0","ssdeep":"3072:fw6ZEe26UDtgwfV7avOg1s9OxPVeWKl7RHJ36am/N4Bxnodqaxji3Upj92c6hcB6:PZoDtgwfYvOg1sEY6am/U2qREj+hcg","tlshash":"0164f8ceb2a9b03283d36674507f1206f23b695d644c806cf62ad4e66cb994b4237f3d","size":306882,"data":"","first_seen":"2025-09-24T23:00:28.744857Z","last_seen":"2025-09-24T23:00:28.744857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"27e24b378baf8f5a29cc065d4a03efb3","sha1":"fe097591bdca8c11205e027bd57bb25965185266","sha256":"731339e2d9eb0efec4dc952f373bd66bba031d3ab16cfcf377d8f2d0a0c7a1de","sha512":"bccdc24af1c77a4e3540a35723be98adc093d0196562ab33ae8660225082d1e26822fa706c9c54dcf0cdcdef6d1a5fcc41fe8e7f2713b226cd317c45daa00b60","ssdeep":"","tlshash":"9dd02279c04ccc73ac3e78832b3cae1700cc448f4058cea226c0cd081403b3a2302f80","size":202,"data":"","first_seen":"2025-09-24T23:00:28.827193Z","last_seen":"2025-09-24T23:00:28.827193Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/3d05079c-31bf-4caa-b840-4b4df496f90a","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"05997da4a9c3d58ef33a7cf3d716af57","sha1":"3a7a7913c31aa2787a11dc6ba6fb5b5f2c525ac1","sha256":"e268ded9f58238c3885b4e0e83ddf10ea9552c488dd25538c8569ec2beff7eb9","sha512":"83413571115e6b39abe7e3b6573a81b3198125b35ae13e31d14c7cb3c81790b24a11cd81531a58922386bbf6e2d41ab6e449fc3206c8b7f20932820cdf58aefe","ssdeep":"49152:D+2KKNjyR5WP4CQjNn9GU6lCLsSPOnLUfJ8KZTcbQQqG7r8aQO/iSJNHoRO2sxSQ:RD8ew45JV","tlshash":"20f591496bf660358213f0795e6f8801b234a40b2949ed5c7e9c92f09f4953c8bf6fe9","size":3517001,"data":"","first_seen":"2025-07-12T22:38:09.134446Z","last_seen":"2026-06-18T09:20:21.342859Z","times_seen":4173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ff94ef1d23ee5ad3409f05cb1d44efb","sha1":"7c5f05de9e9aed89f1886270f5edbc8e58b950df","sha256":"38f17660ad8c3162daeb43399652dc3da7d83ed05808079e364dce9a2d298de7","sha512":"bb8102a70a49355a5a91b84837547eb84d5d46fa0a4df70a21f700438227d25ba6dcbcef11f1b8c666c794a5645e928ddb9eabb645d11d81310c82ca3687c4ab","ssdeep":"","tlshash":"c3800470c4411c15c033505334341145115d400d000007405350d5455011105d505fcd","size":35,"data":"","first_seen":"2023-10-31T13:05:18Z","last_seen":"2026-08-04T08:20:44.106019Z","times_seen":616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/b5d52ff9-160e22345f48233e.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0bd98975a60573deec8797e33e95d0e","sha1":"0f53b82dc84941966344b99b7d96ce7b88420391","sha256":"9afedba4669408eda358b55d2cffad114461ef0a06cd2856696ecde6f997218e","sha512":"cbfd3104703db59c15e3d1fa3908375b1ae1df321df26026edae6ce0fd4ffbd9c9fcd7b5948dc3ca9f38de4b7ff2245f0261fb9bba1e479984e6292ba617e416","ssdeep":"1536:YH/+7uhq2+4vBfNMMl1KbLwWpgyzK030Kx4vzCHi4:y+7uhq2+4ZfNMMl1KLwWpgyj0SHd","tlshash":"4563e8d0b3a1f5b14be66494a0371107f3299868700d40acfbdd98ef687dac5a677b38","size":68225,"data":"","first_seen":"2025-09-24T23:00:28.775579Z","last_seen":"2025-09-24T23:00:28.775579Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/webpack-70d0b38b8749f813.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f3e80ec6a5615357b615d92262b6d1a","sha1":"439f4d37b1039edc973e271501fe7ef1407b30fa","sha256":"cfc80e39b9febb1595b06c1e3e1be9279034f0686be6664e3a6f3dadf32ed67c","sha512":"67396cb79206e76936639ef1e6ba6c05be5053629b265bfbc5b2a8bb3b723e2b1ad042b476536776946545af6e7d41cf705d59bb953604b7c2883dcd9ad97d5f","ssdeep":"192:6u+WqIEZJU3KXhmZvtU96nftV/MSYaCVqPAIQkVaeaZ:UTZJUShmPUIlV/1YaCsPAIji","tlshash":"3a022bad7378e8e679b006c15d3f4095b2196433684e48e0b3aedaf440a4eb15a19fb3","size":8578,"data":"","first_seen":"2025-09-24T23:00:28.728632Z","last_seen":"2025-09-24T23:00:28.728632Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/9604-b665f58801c3e704.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be7c0ca851a3d3757a32dd1d84484c51","sha1":"f4eac4d7904a3f7b76d5c833a5cc25a37e19228f","sha256":"0febcba8ec3d26d33065fd18c372f3ea7115f33b309e51ffeab2f0f252210ca7","sha512":"cf81d196045bd891e47251097d70cd4d782581f71991cf61cb4a02a0cdd07b734694eeb82f93b934a59d4f68c042d48814d53d2cdd9cfa0c4d9a75fe571439b4","ssdeep":"192:3vHVx5q2yuQ+C2HZsAD5MpIjYLs2J3l74VqImN:3vH75PhX2q5MpI43lUVqIe","tlshash":"ed02f7e07192b0b14ab744dec16f050877a639256a4f9ce0f2ba4cf093f614cea51f5e","size":8751,"data":"","first_seen":"2025-09-24T23:00:28.781381Z","last_seen":"2025-09-24T23:00:28.781381Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"396179cbe3baaf589895b34c7e2c03b2","sha1":"990bf193e97991f39e93edbe49d26ada1dd9d4f0","sha256":"3a4df138a1472cb88146bc9ecd5023bc998a126a547aea58a72f6f88c9166650","sha512":"b55cfbf7c6ba15dce93f1a5de359e77754d0be123b5e62877e2635c6947ef408c67cd3da9d1126722cb846db3833a09cc0e6709e4947eb437a419a59cf0b6702","ssdeep":"","tlshash":"c2d02b90cc12dc09c7570f251c3a2c3922cdf26052856206e485cd381981b3009a0d86","size":261,"data":"","first_seen":"2025-09-24T23:00:28.830785Z","last_seen":"2025-09-24T23:00:28.830785Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9934450237e46500b22bd09307f326e0","sha1":"65c008c7157f3f9eacff8de2518b3ac3002005b5","sha256":"a54b03722685720263c9f58d56aa38bd144877453cd6f442ed6f4ab5eb977e34","sha512":"9df6b5ddbebef8061ebaa95607790cf7a995616ed80af3f3574cd878790c3963a66b8f85e220a184d6deb1cf43340698291651e8eee9f435c2844e393aee09fe","ssdeep":"","tlshash":"7e5137b3be09dd008b869e1c1d7a7cbc30ccc397c259a15ef299c93489c797999f2652","size":2861,"data":"","first_seen":"2025-09-24T23:00:28.832387Z","last_seen":"2025-09-24T23:00:28.832387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/94f2d2fe-1eda671bc291c249.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cb08cdea7c1a4d9fa3ba8e5b0a417e5","sha1":"17540905255f29908206fc26b58d906623603e15","sha256":"88acfbc5a08c1c3297ce9d89272bd9140fceca3bb1d0d22e696ec9dcdb87b157","sha512":"643703f14dc95a66e177d6c2861c9bc0d13b4a7480332f557a0eed8cb392e19562d9d50dfe94cb95afcada76c44a481ef8e3af3d47f35a3df042fe2bd221d480","ssdeep":"6144:vAAd719Y+kXk6Ax1GmOZUbOIDOoxQxqV5gxxQxXkWY4bCSWwVeKf9:vAN01GmOZU/zeKf9","tlshash":"adc4f9f2a90858decdb349925c8b7a2471a6fcf74acd418577dcb5a716da8c08c1eb0c","size":595764,"data":"","first_seen":"2025-09-24T23:00:28.800922Z","last_seen":"2025-09-24T23:00:28.800922Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/6221-97b03208c61a0c39.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"442338f522e783dffdd183eceda9ae9c","sha1":"243722bdd16ca5e44949a2f8a7d865fe9e53aa22","sha256":"562691647e2a0159e374054b613d183d7bcdda0505d6ba27742e15aad132f72e","sha512":"be3a19127da32ebd612629fc4fa26b2a809ca62370cbaed58b6c9e5c1ac2ee29edba258bfdaa0a438158b2dc535ec330ac48e33c203ef8b792c8f0d123080c50","ssdeep":"192:Q+okJeQshacigHnIygSSSSVMY4OKZoZLNWIeEm1CFIz3ZgR9P6fkP9r6K+mQDL:Q+AbacighxSXmpKrWC+XZo56f29rQv","tlshash":"de52a3946312d8393b6b95ccd5de0948f22d55025f3a0cf8f37a1a7893899c8e912ff9","size":14417,"data":"","first_seen":"2025-09-24T23:00:28.806292Z","last_seen":"2025-09-24T23:00:28.806292Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/0e0a929a-603e-4f70-b063-92b867283f33","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecf33668ce5ff686d3dd378b4296e7d4","sha1":"49b962b342c477b612a9599f37520a505e2978f5","sha256":"c2cec443c30a3e275baf5846cdaaebde5fdc688e43fd60a858fed59380db4f13","sha512":"2374034e37de6a95cb23320af6f6f6d407054f87b892efd890d3db4813e3abdf37cd26ef2c6c544289f72c6bde250157494900a795600d3ef1c9736af2f49654","ssdeep":"24576:gkHPgr9jW1nmJPWC1uhgSOzw6L2Kb4kWYfTFa:pHPgZjW0tiWa","tlshash":"2626d798f0087c6288e942ae42765c58c4e9e789d61ea675730cefe6bb5cb3745f3013","size":4842313,"data":"","first_seen":"2025-09-24T23:00:28.834971Z","last_seen":"2025-09-24T23:00:28.834971Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/85379c4a-2f6b82eda59253e8.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"502d4daa3ad392c96ca387b4d97773fd","sha1":"5dd262d0b2241b7c765f0a48c7af5b17057fa248","sha256":"90ef6da62f87b115c5522c7811620a2a163248e30098d64e6cb422d27d47a4a3","sha512":"ce79d219fa801ea23fc1716446e810cbaf167272384c2a8bbeb0ddcc348f8a4193f8b3c6d1ff3a333d593d0cbff2e2477d79efc88256046750a0824e8ef52788","ssdeep":"768:lHniJyR9rX36kc72cQb3eJvphSLyoVIZs3b9Z9FzrzEAR5MJOwndjn/9uTxb+Kqx:lHiZ1QvNbpIz/X10nvL++YGZw","tlshash":"89d3e890b26531f45ed224a21833150be376d968b50d80387fec99ef5b9fa495a2ff30","size":130705,"data":"","first_seen":"2025-09-24T23:00:28.808518Z","last_seen":"2025-09-24T23:00:28.808518Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/7350-8ab4455896f11fe9.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5b027e16fd7238e16689d93ade5505d","sha1":"cd3d83d8566567f98e9b48d0009e9d99610380ff","sha256":"f8ade331cc9f7730fa2a01519227d0192d270e55a23a8f590d1c47fea65dace5","sha512":"21ace6c8e6594e047959c1098c23fea6631c79e7d19e1e31fbc5a6c2f8f5b3c35074dead8e21ed50ccae9f72090d061478c8d1abfe2603258fc26f394a106a9e","ssdeep":"3072:UUUSopVwef26+EJw0+CDDetBgukpgCb9ejlc:UdVhBG7FFe9ejlc","tlshash":"44042b957291f0a156e789e6c03b0017f7393a19350ed0a0b26e9cde291da4fb227f7d","size":178924,"data":"","first_seen":"2025-09-24T23:00:28.724668Z","last_seen":"2025-09-24T23:00:28.724668Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/page-2f546d23efc7761d.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"360d18fb5e4993e7c9517c66429b4649","sha1":"6210ddcf3459924bd7fb67cb1ae580647d370b41","sha256":"ab2e8c3c22c1f994f36fddae0663145ebf75df9e581e9b3cace9d1209b7c5c91","sha512":"2c68982e48acf886660ccb571ce34189d663578b2554906323dd4a75f8b97ad64cddf787b045cf276e8d24288f16a840376b22cc01e360e16058b7b6530f7056","ssdeep":"","tlshash":"3311d0c527715948e26e0ff8d03b6843349914b71ace1b64e2398d3cb271f9501a0993","size":916,"data":"","first_seen":"2025-09-24T23:00:28.795871Z","last_seen":"2025-09-24T23:00:28.795871Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/9faaa3b2-d24c5fa3ad5d7372.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a33e544b0e4da300cd33d1b121241b54","sha1":"2f43f585115e70a20830ed816cb670fbcb3b4bff","sha256":"f19cfe9580815ddd081aa9739e493e744de17a0e1f651d926e6f1527e7ccbdc4","sha512":"363aa2337492acaa27c39459983149591f13a7ada75a4a74c8887dd43c18aa4163b0afd33520e2f155510f2c0a55d5ab6c64614e7ee2243835a7655828ce20b9","ssdeep":"1536:LtJELMRR6Ujh0cL6s/jqn/CoBnMYFxlzsW3cQFw6Vw6v30UQVRNohi:LbES6Ujhesbqn/Cols8bvkHVRGi","tlshash":"2ac319da32a63173679645a640b70202f7314a99384a41a8f52cddef3c7d943a2f6f3d","size":118693,"data":"","first_seen":"2025-09-24T23:00:28.799426Z","last_seen":"2025-09-24T23:00:28.799426Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/43bb7851-b067d564715eaa9a.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6f4fa2218ce0c500321df6cee154137","sha1":"3dfae2ba3aba43c5772dd8ec9f64d4b174517b42","sha256":"b4186b3789c6e0f38d042d81cd09e1f2931a9f1d26546421796f29113ad17056","sha512":"379a0739f7ee26a23f54e572f7ab4ea4810cfe941c9696df58b0701d0e8628fc5df15c1320784c2e31ded5763df3805d7da042ca3f8dd0777d21cf57911978d7","ssdeep":"6144:sFeFzVUS3zjr8HzSwdh7hqq4JN8DjbCNvmsYjq8EpDiyKzp2bJcpTgNEKuB:13zETSwdaq4JOjbamsYjq8cOm2TguKuB","tlshash":"1af40a80b770b01287aa2aa4051f504ff27afa2d6c4b047cf658d4f67cf9985a53af35","size":751127,"data":"","first_seen":"2025-09-24T23:00:28.736853Z","last_seen":"2025-09-24T23:00:28.736853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae1abce2781eafadf693b8a3a97ab689","sha1":"ebc356643d706c5d8ef0b0cf49c504d98f2cf261","sha256":"076f299543ae601928b7cf9cf00b9713b8fbefa790b254f292e00269e8980f3a","sha512":"db786304779cf9f5ec6f1440dadd6e0da2421bebb02eb877692e949fd54f5fa022cd3a3ceb14a405cee2dcebf0479ce824ad68e345af129f5fce6b959f30d380","ssdeep":"","tlshash":"34b01215e440cc13803a546218bddd1010cc641f41801a626b878e1f291807e7e69936","size":103,"data":"","first_seen":"2025-06-14T10:12:58.735264Z","last_seen":"2025-12-04T09:36:14.380602Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":735973,"data":"","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-02T04:01:58.308798Z","times_seen":8484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/484bbcc3-e65f4f01e8836995.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8db3cfcb5440f3f5a4cb94dd110ed12","sha1":"9c843e10aa0242fb7a42adbb110ad8949bb6655b","sha256":"c242061528b67bc5630038feb4cfdd60ecc9e8460e67e76d4ba2d50b34c22b5e","sha512":"c6abf4922ee976f4caac9a868945e1ab6511feb3f3c4a123b3175cce6ea09fe52c3cb9a645f22322bd2fca17e8f4c575a4823b573936aa769335cef77e150633","ssdeep":"1536:T8AS3BSnjdo9GPQmONzuwWSbYH/1Wuinyi4vBfNMMl11XVx05I0pj4LzPL:QBSjdo9GYmuzyWuinyi4ZfNMMl11J0yL","tlshash":"05b3f8d073a1f4f147eb64d450372107f3289968700a44acfbacd9eb687dac6a577a38","size":117614,"data":"","first_seen":"2025-09-24T23:00:28.794227Z","last_seen":"2025-09-24T23:00:28.794227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wormhole.lat/js/7350-8ab4455896f11fe9.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/7350-8ab4455896f11fe9.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rVgPbGTVNxsjYIhTH6gmVuRKsgIU0RSbMlv0mo%2FyRCh8cqyr1QDW36K5%2F87BJLMX6DaO7%2F7ViProOpem93yIWTtpwV4XIXNFWxaAA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca2c4e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178924,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a5b027e16fd7238e16689d93ade5505d","sha1":"cd3d83d8566567f98e9b48d0009e9d99610380ff","sha256":"f8ade331cc9f7730fa2a01519227d0192d270e55a23a8f590d1c47fea65dace5","sha512":"21ace6c8e6594e047959c1098c23fea6631c79e7d19e1e31fbc5a6c2f8f5b3c35074dead8e21ed50ccae9f72090d061478c8d1abfe2603258fc26f394a106a9e","ssdeep":"3072:UUUSopVwef26+EJw0+CDDetBgukpgCb9ejlc:UdVhBG7FFe9ejlc","tlshash":"44042b957291f0a156e789e6c03b0017f7393a19350ed0a0b26e9cde291da4fb227f7d","first_seen":"2025-09-24T23:00:28.724668Z","last_seen":"2025-09-24T23:00:28.724668Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4918,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/webpack-70d0b38b8749f813.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/webpack-70d0b38b8749f813.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NtWmgp9SZVUH5SHMfIZ8A0eYJ%2FNaVmwycaeaWsfQifSNJNi3DQf7h8tMkdoPfXaDRHyji5D7XCamJBsDecoPuuirwH%2F0sjnLVpVp0A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca892d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8578,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8578), with no line terminators","md5":"9f3e80ec6a5615357b615d92262b6d1a","sha1":"439f4d37b1039edc973e271501fe7ef1407b30fa","sha256":"cfc80e39b9febb1595b06c1e3e1be9279034f0686be6664e3a6f3dadf32ed67c","sha512":"67396cb79206e76936639ef1e6ba6c05be5053629b265bfbc5b2a8bb3b723e2b1ad042b476536776946545af6e7d41cf705d59bb953604b7c2883dcd9ad97d5f","ssdeep":"192:6u+WqIEZJU3KXhmZvtU96nftV/MSYaCVqPAIQkVaeaZ:UTZJUShmPUIlV/1YaCsPAIji","tlshash":"3a022bad7378e8e679b006c15d3f4095b2196433684e48e0b3aedaf440a4eb15a19fb3","first_seen":"2025-09-24T23:00:28.728632Z","last_seen":"2025-09-24T23:00:28.728632Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4890,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/css/4b47c03b8a6f891a.css","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /css/4b47c03b8a6f891a.css HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:42 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2F7V1BrIzP4Qnj8OmG4l1QBsO6uFsFUoFanrCdvWFnRxxyKtUtmmIOItYSWY1qF%2FU5B6isQxWJPjlSPmsDe6q1U03bcnMeoY%2B43IqA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca1c1932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6799,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"daf31e738113ae5440053357950a2d41","sha1":"25748a3937c80455e19c4a0a8aa7f648ffaf7db2","sha256":"04de861356dbb824b6015e2d2690cc82be4ca6ca6a2f29205890e40c93ef7473","sha512":"6f40dfd94fb3225a98dc7d4a7c2b315d6aac6b456f86968bb8259916d8c165c933d2800ea85d26a9c390ce1dded8552eb7cacb33e40509d6abab433aec5e869b","ssdeep":"192:LYd603WjIPqAdz23liSiQYqO3B23/8S8Qkz:L0FGZNX0","tlshash":"57e19990006b6500e7871dd277cf3f266e5d6045b449ca3a5ffe08a9acefd2613a174d","first_seen":"2025-09-24T23:00:28.731889Z","last_seen":"2025-09-24T23:00:28.731889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/chunks/webpack-70d0b38b8749f813.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/chunks/webpack-70d0b38b8749f813.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:42 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xaC293WsV4j8T%2F4p%2Fp5Hwr%2F02pwlvQZlTHSWLPwSW2A1Saj0L9HONlt7V%2F1XfwCyoYxHoCLs6jG%2FTkx778WyDDA0FGj7AS%2FCBIwkRQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca1c2032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/43bb7851-b067d564715eaa9a.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/43bb7851-b067d564715eaa9a.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1muUOvjUBd5%2BJc80ds2sVgTs1rpMkHlezyzQ1ss%2FeuDYVMPPmfn%2FffAvNIRDT%2FD%2FVm84PL0Ha7Is9Iai4XU4slAc556KhS8exkIESw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca3c5b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":751127,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f6f4fa2218ce0c500321df6cee154137","sha1":"3dfae2ba3aba43c5772dd8ec9f64d4b174517b42","sha256":"b4186b3789c6e0f38d042d81cd09e1f2931a9f1d26546421796f29113ad17056","sha512":"379a0739f7ee26a23f54e572f7ab4ea4810cfe941c9696df58b0701d0e8628fc5df15c1320784c2e31ded5763df3805d7da042ca3f8dd0777d21cf57911978d7","ssdeep":"6144:sFeFzVUS3zjr8HzSwdh7hqq4JN8DjbCNvmsYjq8EpDiyKzp2bJcpTgNEKuB:13zETSwdaq4JOjbamsYjq8cOm2TguKuB","tlshash":"1af40a80b770b01287aa2aa4051f504ff27afa2d6c4b047cf658d4f67cf9985a53af35","first_seen":"2025-09-24T23:00:28.736853Z","last_seen":"2025-09-24T23:00:28.736853Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4932,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4932,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/favicon-light.svg","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:53.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /favicon-light.svg HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:53 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8XiBXwIZI6Wc%2F5u%2B3wKRYyUsuqOMxjkQ7gegWnldr1qwJL5NyOQExEe%2BiQIYG91F8Wg2w6kaXKAbrg89hwP4CmtSCpj6xD6XLKUxRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5130ba4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed3.bnbchain.org/","fqdn":"bsc-dataseed3.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.16.144.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed3.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://wormhole.lat/\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T16:03:25.950869Z","times_seen":17727253,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/main-app-4ff2bad30ceaa27f.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/main-app-4ff2bad30ceaa27f.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:42 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oywTk0RIufuGzgSnpW3Qn%2FRZ4Ubmy%2FoQeI1s%2BYO91djQwg2ZxOJtYTwO0%2F%2By507RsSilw4J%2BBZFuV%2BCtuyESpJwQicfFGnZDirdzmw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca2c3d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2671,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2671), with no line terminators","md5":"f4e5ad922e97f63e5c67e59b1a1586e3","sha1":"6fef5b691d58a363afd607063a896a8bd250d963","sha256":"e2df4230efd734437e7b038ab082f3c43d90836af776c400874f200af3d1c602","sha512":"e81e253b8daf59dbdb49374eb172481c5f30f17354243913a40676792dc6309b1342dd455f3a04d1a961e440f899b40321cc3e42b93f1d3ab2496878a4f76446","ssdeep":"","tlshash":"715167e11664651f9ba10fd4fc1318d2682f0136230bdd90e6a8ee6e5432fcdd251a45","first_seen":"2025-09-24T23:00:28.742008Z","last_seen":"2025-09-24T23:00:28.742008Z","times_seen":1,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/0e95678a-5903dff21df05626.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/0e95678a-5903dff21df05626.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2Bu6Jr%2BjaGjeMgFXitTxm5s%2BRZyKf%2F1nRWjqadHkjQ8LWAvCkznrV2qhGfqU%2FN1inkV58lZmTZrvoQhySfuppRJnWK4nhAfXLDHLmQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca4c6732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306882,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e5b2495beb284729e9e3d83eff040c7f","sha1":"e48c68fe252dac925d5510d549ed6c3142371363","sha256":"f289d5d5e4d10a5849ea6a971743efee467d73f73bcd1fba01177a582433bcee","sha512":"6b91bde4a91863db81c49109d6a3eb655604cb6f11a11f534c9e052e22c6c191500730cd9fbd50cc73e77236f9f8e38669835b34c994daf89124e14a53c4d0e0","ssdeep":"3072:fw6ZEe26UDtgwfV7avOg1s9OxPVeWKl7RHJ36am/N4Bxnodqaxji3Upj92c6hcB6:PZoDtgwfYvOg1sEY6am/U2qREj+hcg","tlshash":"0164f8ceb2a9b03283d36674507f1206f23b695d644c806cf62ad4e66cb994b4237f3d","first_seen":"2025-09-24T23:00:28.744857Z","last_seen":"2025-09-24T23:00:28.744857Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/09ca2727-afb2d96dc9df65fa.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/09ca2727-afb2d96dc9df65fa.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFFgfre8cQfalrfEr58zbW0sJv8ws39QoqVd03o%2B7KfGocLuTP%2FUKd1SZvriWE1ueyYcoA%2Bsd5HmgUad2h1ewq61KTYzBd5KbsrAAw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca4c6f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d75b7c3b24e5b8650aa800c657db9fb2","sha1":"b1dc9a714db76e2cd7f64383197293995b58771f","sha256":"35e403729bb5ac4eb98cad33739131b9b83be1c60159bfb30b3982f7bcf3290b","sha512":"3d3e9fc76ae92be5289fb8f556df42652b5b8999f41e31205a4f2abdb953b725c94b163bf53eb3a225ad243bd121df6040b05d4eed1e1a2ea23940315efc54eb","ssdeep":"3072:2IYZqL1X4N82LubwkMhbxZoPejZKpvlZ+IhbxZwzonpujoC:2IYZqL1X4N8jP8ZKpvYzon8oC","tlshash":"ac84c9b8b2867ede5cd079549d5b8804e0a07d87a0cd880277dea9bf16f60c4dce972d","first_seen":"2025-09-24T23:00:28.746631Z","last_seen":"2025-09-24T23:00:28.746631Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/global-error-09ad6195d416a997.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/global-error-09ad6195d416a997.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:45 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jz12l6QkKkNvUS5HhwfnuzeKe7gBkChRy8Sk3kXDdhcDqbzBO%2BizcnrSbUoabVds6nCGk191njSiOnKiFs4smaMtxHXl8AgRN%2Fd1XA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca58fe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6970,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6970), with no line terminators","md5":"7067d484d9efb64d02ba29b24afc4482","sha1":"a1016749961625a2f5096b5bf46696aa5d25bca4","sha256":"10534af1371efe4e60c21492702cf997a45e5f1539c25ea7def26da30aa09b91","sha512":"f21c0f5c3cbc7d6faa8b7a478ae6df9bf67902b1f6ff2b3a4d6320fd0419a1e9cee598ebd1b2fc35fe11e2885aa595c78afce97f0c6cacdf80735d3318549111","ssdeep":"96:P/9u06HqM6vw9Tz1FqtZhq7p07x4I1sbZFs1D9GClM6tLbsFOKAm5Wlqa6BW//J8:cNHqM6IhaZM07xfi7sAwMrE6BnB","tlshash":"74e1d8a331e0e8d5269a04d5c4374019f2522c3e625fa2f0b7a98cf997c14deb163fda","first_seen":"2025-09-24T23:00:28.750922Z","last_seen":"2025-09-24T23:00:28.750922Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3853,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3853,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed4.bnbchain.org/","fqdn":"bsc-dataseed4.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.16.144.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed4.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 51c7f79cd77a5312923080e29b588062\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4902,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2188b7f1b90a143020f7faf12d10e91f","sha1":"e6a95e4d574d05948b7c8517861a71e6f69b38b8","sha256":"4a8dd94310fc027a042dc9ca0311f20e9341084839e00b8d7a830ab52cdc8096","sha512":"08e8f648099fac2b075f96396f2f9056ac526f12e5843bc16d07fd725fcd74abeed4021a9ed64f53ef3e1dbb57a707ebee71bc51b230f5b5ee4200c2da1d7b1c","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:r5TB2SzAT/7kSRRrze3k","tlshash":"e6a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-17T17:24:07.906471Z","last_seen":"2026-07-11T04:16:11.451036Z","times_seen":4821,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:55.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:55 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nx-cache: false\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrGxluTJ76%2BJzdgCquF7SMfox6yQevCO%2BfTjuaW%2FK7D%2BAjKInsod6WfAhQs3CRgHqfg0%2BN%2B1g1DIRqQQEs%2FcE95te8nIxRKdGhaYSG6zDEhEqJU%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9845e51ebdb71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-06-18T09:20:21.245055Z","times_seen":5257,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/f2399982-829100d76f1c2e81.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/f2399982-829100d76f1c2e81.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahDVbcXcsuk7fYYsfcdtSVp8TpDstP%2FmshFS7cjqSb2nowIOYFzNu5D6DQsVjebbMbLQeXV5YEfbuIVCIzQpfOB12EAIB0dPW2xE6Q%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca3c6332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":842787,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65453)","md5":"ae49c3b8b7640921e31d3e351bd2a598","sha1":"85ccd55aa3e944776d104112e071bb0d6acc0e1e","sha256":"d54d76d2153a82a122ce2228db2f0b71ce6d04198f104acd7006cc0a6855c751","sha512":"250e7090484360d3b7d355450264895fb79f1cdda2841ac0fe7bd39b4d869ee5439b32ef635fc71b81b59337f0d86cb9a9396adb374ccc57c32c1c4b609aaaa7","ssdeep":"12288:oSPc7f/9VMCpbxvNQo2KihY9Ge76HccsN8xP4eeSF/eO:oAc79VLb2y9Ge+cc+YPKSF/j","tlshash":"cc05c0653bbaf67383976cf010320841e67997c910884525bedc87e6376d48b83e9e7e","first_seen":"2025-09-24T23:00:28.760272Z","last_seen":"2025-09-24T23:00:28.760272Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4890,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/chunks/43bb7851-b067d564715eaa9a.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/chunks/43bb7851-b067d564715eaa9a.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8%2BpyQjle4Ag2a2SKRHMBKhzjat8rDZKQXXiW1fIrTgv%2BCVlntVqTMS8DZtWqsNP55a7Go5Z%2BmPJykqCSvUoYaS3Yk%2B4NqcNFwi1%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5067db6783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/chunks/94f2d2fe-1eda671bc291c249.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/chunks/94f2d2fe-1eda671bc291c249.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GCYq7sodD2CauPQXZLssvqDulykgymMq5sLyJb8zV1lY8xsyxgVy2tVNQ8pcT5h3NJrPUAqyJpLdpSNeFVZ6RQ9ft6lss%2FLq8xzy0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5068dbb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/legacy-tools.txt?_rsc=1ld0r","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:53.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /legacy-tools.txt?_rsc=1ld0r HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nsentry-trace: 9d9ebcbcb44c4260946ddf82fc362439-9a67936cd95e76fb-0\r\nbaggage: sentry-environment=unknown,sentry-release=3535c7c248834629cf3f47853f0d50b8f71a1035,sentry-public_key=f3f78a14fbc21484a7dab75ef25417e1,sentry-trace_id=9d9ebcbcb44c4260946ddf82fc362439,sentry-sampled=false,sentry-sample_rand=0.8134193113248636,sentry-sample_rate=0.5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:53 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CI8K1e%2FakVTFOzH2geV1bhkAtOPfjo1G3ubwd8hXOGqEXqNaXWzAsunvpg0%2BJS3Qtkk2Nl0w47CeFkNw%2FpiNWpk%2FhYCTIDiwKA86lA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5108876783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"configs.labsapis.com/mainnet/banner.json","fqdn":"configs.labsapis.com","domain":"labsapis.com","tld":"com"},"ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:52.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"configs.labsapis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 23:06:14 GMT","end":"Mon, 01 Dec 2025 00:05:26 GMT"},"fingerprint":{"sha1":"40:EF:D7:5D:8B:CD:89:9B:8D:C1:7C:E6:53:65:A2:91:F2:F3:25:3D","sha256":"54:2D:00:0A:A0:31:3B:44:84:72:2F:9B:E4:CE:2E:C3:43:6E:49:6B:A1:73:F6:43:B7:FC:55:6D:8C:A7:E2:B5"}}},"request":{"raw":"GET /mainnet/banner.json HTTP/1.1\r\nHost: configs.labsapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: application/json\r\ncf-ray: 9845e50f4b9556bd-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\netag: W/\"9bf65a7e342cdaad3672dbcf9688843f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UOKYN0La6IVLTUGCwdh7xE5fpJIXDjN7GBC1shLWTo541%2BVR%2FsAHLTvUmnj%2F%2F95H86eIBaJTuJ2%2Fj7YzRFYFa2EGAqd4NLpX2RvWuhDYvQeWl71y2%2FAhjQc3LJZswJY0hretPikf2w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nexpires: Thu, 25 Sep 2025 02:59:52 GMT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d6138531e76acb1331adcfd72ea03c2f","sha1":"77a278ec47db6d72f7dc1123ded7e4bcfe4a9352","sha256":"5246ecdc8d42b075f6180f6a262ba651a614d137ad033cfddc5cba342618aadc","sha512":"41f636345a361e87571a0b22fe7a3aa7336b8bc4f15349c9d8c6901d1da4b1d64eb3e0899dfeae294a07acdc1028d4b48912e7e03ef0836eb3b21259dfdd0e87","ssdeep":"","tlshash":"62c08021a911185003461747e50196b7647c56e42378dd7ce574055e3b00414016f939","first_seen":"2025-09-24T23:00:28.763607Z","last_seen":"2025-09-24T23:00:28.763607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":66,"dns":27,"connect":1,"send":0,"wait":145,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sauron-staging.labsapis.com/sg/initialize?k=client-HofjDfQUCedcvxc44SCY0jB14D2QweCBZW2v4jsqz6s\u0026st=javascript-client-react\u0026sv=3.20.0\u0026t=1758754793158\u0026sid=c2b4c843-b5ad-477a-a395-a3ecbba2ea5f\u0026se=1","fqdn":"sauron-staging.labsapis.com","domain":"labsapis.com","tld":"com"},"ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:53.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"labsapis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 19:00:46 GMT","end":"Thu, 13 Nov 2025 20:00:27 GMT"},"fingerprint":{"sha1":"CB:5D:FC:98:8E:28:34:74:BB:4E:DC:BE:F8:FC:85:A8:D6:F6:88:24","sha256":"E1:95:E9:53:4D:C8:8F:1D:6F:32:6B:DE:4D:FB:04:73:01:E5:06:1A:DA:51:11:ED:C2:76:38:BE:94:83:F8:E7"}}},"request":{"raw":"POST /sg/initialize?k=client-HofjDfQUCedcvxc44SCY0jB14D2QweCBZW2v4jsqz6s\u0026st=javascript-client-react\u0026sv=3.20.0\u0026t=1758754793158\u0026sid=c2b4c843-b5ad-477a-a395-a3ecbba2ea5f\u0026se=1 HTTP/1.1\r\nHost: sauron-staging.labsapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 520\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 24 Sep 2025 22:59:53 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 30\r\ncf-ray: 9845e5114cea8be6-OSL\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7fb182ad57900f6f221bc075a7926530","sha1":"6c86324b25ef582d3224f7f7d820d85ef0dbf421","sha256":"23d04543d3fec9659be807b410754653814213d3c686f476e491bc7e107d2a78","sha512":"d3e7b6c0561532631f75401a1501a48053462daae77ff10eb34f4aa101e3e813ee5723aefbe3157130af5ccb240244dd2ac5a33b47ef18edc78d5c22e391ca43","ssdeep":"","tlshash":"4380000c0208030ab2a3030833080fb3c003823c820ba0a38ea080ca0b0330c2a83a2e","first_seen":"2025-07-14T20:08:16.872538Z","last_seen":"2025-11-30T01:40:42.314525Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/135dcde4-5edfc4411e10a081.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/135dcde4-5edfc4411e10a081.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eOhOSYLuEVEvAiRrUcWCMMtBZJQV%2BYj5kDjo4%2Br4SXWq%2FDjlko%2FqdqHwbk02hCWG1vKT7N0SACh5RyMRhcw19%2BAdxVBKd9PFHpe2mw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca4c7832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167964,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65453)","md5":"ab0ebc9d37711195ca5eee4216f14cd0","sha1":"a3cc6d19a619fb2eba346c4695ca639ccc8cbf87","sha256":"8f213368b0e89bbd2f9c575a3e3282eeffe1b7ba0fd4d05d15b43fc46fdd86f6","sha512":"c96b717fd46aed8165aceb38f47dcd594372cc70c4ad231403f4fe201a6fb699741cba450a2acd584a7377a355365d910aa44d4b1c8e9d7f02d60b2cfa6ab64b","ssdeep":"3072:J/kVZHNKKXa7C4sAa49TxUSv5UeTepO2mkw9dEpKHe:J/GdJa7CiBlxUSvGeTepO2sLEpKHe","tlshash":"d2f33ad032a3f07647f625d904365102f2b99954718b44acf27c8eeb3eb984da5b6f38","first_seen":"2025-09-24T23:00:28.766446Z","last_seen":"2025-09-24T23:00:28.766446Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4950,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4950,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sauron-staging.labsapis.com/sg/initialize?k=client-HofjDfQUCedcvxc44SCY0jB14D2QweCBZW2v4jsqz6s\u0026st=javascript-client\u0026sv=3.20.0\u0026t=1758754792219\u0026sid=c2b4c843-b5ad-477a-a395-a3ecbba2ea5f\u0026se=1","fqdn":"sauron-staging.labsapis.com","domain":"labsapis.com","tld":"com"},"ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:52.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"labsapis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 19:00:46 GMT","end":"Thu, 13 Nov 2025 20:00:27 GMT"},"fingerprint":{"sha1":"CB:5D:FC:98:8E:28:34:74:BB:4E:DC:BE:F8:FC:85:A8:D6:F6:88:24","sha256":"E1:95:E9:53:4D:C8:8F:1D:6F:32:6B:DE:4D:FB:04:73:01:E5:06:1A:DA:51:11:ED:C2:76:38:BE:94:83:F8:E7"}}},"request":{"raw":"POST /sg/initialize?k=client-HofjDfQUCedcvxc44SCY0jB14D2QweCBZW2v4jsqz6s\u0026st=javascript-client\u0026sv=3.20.0\u0026t=1758754792219\u0026sid=c2b4c843-b5ad-477a-a395-a3ecbba2ea5f\u0026se=1 HTTP/1.1\r\nHost: sauron-staging.labsapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 520\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 30\r\ncf-ray: 9845e50b6f7e8be6-OSL\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7fb182ad57900f6f221bc075a7926530","sha1":"6c86324b25ef582d3224f7f7d820d85ef0dbf421","sha256":"23d04543d3fec9659be807b410754653814213d3c686f476e491bc7e107d2a78","sha512":"d3e7b6c0561532631f75401a1501a48053462daae77ff10eb34f4aa101e3e813ee5723aefbe3157130af5ccb240244dd2ac5a33b47ef18edc78d5c22e391ca43","ssdeep":"","tlshash":"4380000c0208030ab2a3030833080fb3c003823c820ba0a38ea080ca0b0330c2a83a2e","first_seen":"2025-07-14T20:08:16.872538Z","last_seen":"2025-11-30T01:40:42.314525Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"configs.labsapis.com/mainnet/tokens.config.json","fqdn":"configs.labsapis.com","domain":"labsapis.com","tld":"com"},"ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:52.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"configs.labsapis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 23:06:14 GMT","end":"Mon, 01 Dec 2025 00:05:26 GMT"},"fingerprint":{"sha1":"40:EF:D7:5D:8B:CD:89:9B:8D:C1:7C:E6:53:65:A2:91:F2:F3:25:3D","sha256":"54:2D:00:0A:A0:31:3B:44:84:72:2F:9B:E4:CE:2E:C3:43:6E:49:6B:A1:73:F6:43:B7:FC:55:6D:8C:A7:E2:B5"}}},"request":{"raw":"GET /mainnet/tokens.config.json HTTP/1.1\r\nHost: configs.labsapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: application/json\r\ncf-ray: 9845e50f4b9956bd-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\netag: W/\"bb06744eb852aa9ae6027b1bc4f4c6f0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8JeHmc4meOFYs6YddZxj3JJYywbEV6q6dK5CYWk4oCrQ9K4n%2BoQ5d3GH2zcma7%2FaWCg7QIOJl%2BYsYe%2Bl0A9gWmb6Z4%2F%2B6iqA4vvhcLd9CKqiLBmARGEana7cfOtAWCCYEMbr%2B%2B%2FHHg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nexpires: Thu, 25 Sep 2025 02:59:52 GMT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49075,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2622626232a15cc64528b48885ba2a38","sha1":"fc25572530158183c6b10da910413f6c9752e93a","sha256":"afd2e2bfd9daf5b46f8e14284d7c31fad899e35cfb87f0b541bb122e05ae88db","sha512":"d4f5904162161b505608f84c110c7d00303c8524b0c453b07ce76dac0296002b462c278430cc8590ae7c6f3b7f3a276e5f9698e681cee72ec3eed0a4aa5756a5","ssdeep":"768:PCCur4OVGsYXy9EJMBhVXXjnLBYsqiGm08sYo:Xur4A2sXjnL1Y8sYo","tlshash":"a52397a2136154ab4b9453cb187f3d00528226aa4a00d59ed57fcd9e67f1fba081f3fe","first_seen":"2025-09-24T23:00:28.768778Z","last_seen":"2025-09-24T23:00:28.768778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":61,"dns":0,"connect":5,"send":0,"wait":54,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:53.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9845e5162ebf56b1-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 116901\r\nexpires: Mon, 14 Sep 2026 22:59:53 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sSTkPjo1LnrITkvz5npTwQdSj4KSF6sg4qyzjtiwT8M%2FJALqUrq9Fi1etKOfn00skxMMwdC9DvPS%2B3d0qokdsS2rvgBcstcnuPIwBrHp8gXY%2BitIwIVam4sIIWle%2F2NlOdJtQwt7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-05T12:11:48.059157Z","times_seen":31854,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":18,"dns":0,"connect":1,"send":0,"wait":12,"receive":6,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed4.bnbchain.org/","fqdn":"bsc-dataseed4.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.16.144.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed4.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://wormhole.lat/\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T16:03:25.950869Z","times_seen":17727253,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":206,"dns":98,"connect":34,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.llamarpc.com/","fqdn":"binance.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"104.26.14.157","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 08:03:47 GMT","end":"Fri, 07 Nov 2025 09:03:27 GMT"},"fingerprint":{"sha1":"9C:C7:46:E0:04:44:8D:56:AE:49:1C:77:2E:C5:79:4E:1B:65:13:C6","sha256":"E9:C7:AB:36:D0:99:3A:66:DA:CB:32:87:CD:4F:AF:FE:68:21:18:37:F4:2D:E4:3D:27:91:EE:AF:2C:CB:6D:B7"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://wormhole.lat/\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 22:59:55 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=017B23mynV8pptr914UKthWPzwQPl87SVz4ZPJuCLoWsIW5Y%2FwJoNAkeGCSzsXpvWtjCRG09N%2BfSAR%2FzmuWyCVewu5jaQSBl5kj%2FoL9oNEfehKw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9845e51bdb271a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T16:03:25.950869Z","times_seen":17727253,"resource_available":true,"data":null}},"time_used":749,"timings":{"blocked":146,"dns":1,"connect":1,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/868-3ce3998121f4645e.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/868-3ce3998121f4645e.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:42 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfiNDvJ0SLcGQbsXrqrYx2ditGKEtEXKYSx%2FfFSXfdfoLY37lXWjMQTOWSX%2FmDOPdLvxe8LSsd7Hp5ElhLQ7eaK%2BeY4FlBLybjGNEw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca2c4632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100564,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65458)","md5":"1bbb42a10a00675d1e0044afb2153311","sha1":"2fd82fc743763eb2e35e6f8406c6a3df8a925624","sha256":"29469ea6e9f142b89eefd34eab1ec1033dc03764c1269af8636b2a5d3f3fb2d5","sha512":"de3f9260c77cfe19ab2dd575d7d06d0a03794ddb008d2365adb7f42d554a727585b71271945f39a968a57b9d668f3e702816b80491b14d72567e04f3ad2f0cd7","ssdeep":"1536:9F6mAjWI8I3vLfKNDvsyauUA0Q5bcoiTYjFygy5SHknLgloc:9ApWI8I3TCNDvsyG265Jc","tlshash":"f5a34bd47192b06457a355de90bf4447f32c3914350ecca0f3aafce969a44aea223f6d","first_seen":"2025-09-24T23:00:28.771313Z","last_seen":"2025-09-24T23:00:28.771313Z","times_seen":1,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/css/4b47c03b8a6f891a.css","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/css/4b47c03b8a6f891a.css HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sEz3hUBSmlER3Pbzsc0P0BaOWN1Q5WcVmMiLTn3YNYMU0b%2F8oqR8z7gvHpIFxFdLNao%2FdmxgYsvtpIXBeITUPTBKElZAgWAXt1yVIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5069dd1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/images/favicon-light.svg","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /images/favicon-light.svg HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWgUlkmQ36T7PHBKqhYtG38Ixtw0VWnjrlNpS29jaUsKOOoICpzqqvSbC%2FGKoC8ZShELj%2BxlYZsZ8Tev6H2W2p%2BO2NwvSXQ8BXmU5A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e509d95a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df86a3f4d9ed4cfdb0f0f94457204529","sha1":"31102de684af4ca99cf7f470b814db09d686475d","sha256":"8dd9ba53edecbe11788aeb9fb01425afe1d9970b255c59d9d6f1663acf20411e","sha512":"4a9f215c4137a626452c78fe3f6dd38893ff3f943e02cd581a99b01d0e1db130e665cc6708f5aa229124a1f06bf053f7a35fff998e970e8fb8d917b5004ad595","ssdeep":"","tlshash":"44f0d4fdf3243cfd4dd0ead94f6115684049c4e371a0605c56989132195966b0d14dc4","first_seen":"2025-07-14T20:08:16.863684Z","last_seen":"2025-12-16T04:23:02.908621Z","times_seen":8,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/ramda-10.21.12.min.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /ramda-10.21.12.min.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:45 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 05:23:25 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7oaTqg1j5pcSbGdEIhUrhkjcUH1IFKIu2mL0n%2FR%2B%2F1FlW1NmonnbBfr8ZdHEj5vs8wbWPtswE9z12EmZtvGZ4YxfylELL3JGiMwrg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca1c0132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5076219,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9eb4914e09ed1637a763fcd3992ba3aa","sha1":"32abb1de7e24c46143014fa6408118237f5b1986","sha256":"d6caeb728fc0e2e8cbfb50b90e4f1090897c0187de74c610bbaa149365ccd8eb","sha512":"de645beec648ea94c88a4d7d86c1165d4c4e5e85162fcf011bf63b140b38a17efa4f78aa866743449ff189082e149dc148e1b4d5683ae52232f6a1022b36e157","ssdeep":"24576:dL52AoEP4Jb/YWmLkwsOukzMSPbg+lsVo5/Cr0Ow:dQe4FGkwdNZngO","tlshash":"2d25f1ca1ec69048ce4de18dd9dabb48dc04ad1b894c2ab7bd8cdc65709ef6053d319e","first_seen":"2025-09-24T23:00:28.774066Z","last_seen":"2025-09-24T23:00:28.774066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3918,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/b5d52ff9-160e22345f48233e.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/b5d52ff9-160e22345f48233e.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:45 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bP%2FqQgBRRroJzDJexhOy2iJlI%2BwO2xeqhoE%2FwJ9xhvb8aX2RIi%2Bvld7%2BOB75f8dwLpnjJYniaG7%2B9LtDMf6tVsnCMfJ6i8GbnrAO9A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca48f3783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68225,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e0bd98975a60573deec8797e33e95d0e","sha1":"0f53b82dc84941966344b99b7d96ce7b88420391","sha256":"9afedba4669408eda358b55d2cffad114461ef0a06cd2856696ecde6f997218e","sha512":"cbfd3104703db59c15e3d1fa3908375b1ae1df321df26026edae6ce0fd4ffbd9c9fcd7b5948dc3ca9f38de4b7ff2245f0261fb9bba1e479984e6292ba617e416","ssdeep":"1536:YH/+7uhq2+4vBfNMMl1KbLwWpgyzK030Kx4vzCHi4:y+7uhq2+4ZfNMMl1KLwWpgyj0SHd","tlshash":"4563e8d0b3a1f5b14be66494a0371107f3299868700d40acfbdd98ef687dac5a677b38","first_seen":"2025-09-24T23:00:28.775579Z","last_seen":"2025-09-24T23:00:28.775579Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3880,"receive":259,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/images/bg-noise.png","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /images/bg-noise.png HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 11551\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zj4chZ2XIiBYF8MWkZZQ0stbf40sASOOXpgxbrQy8RPWnVS6wUVd9HqPhBapPkM1Bppxvg9YV9SUyYSJZbuYAJzeACfekO%2Bpvmn2Tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9845e5050c53783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"49d7bc0f37f5c121bc06ae27fc9070b4","sha1":"dd973893e28e6c8be5d3a753f3602c2b7ef54841","sha256":"98b6e9f4fae807b36160645a200544249b46e0c750bcf1850e63fea6d258d52a","sha512":"c45e5b6e860c775ddcc79fe236bf6eba9741cc1f9aa608d412ca019c19985f25e7d6411f4f591b7240909429f249b635ddacaa3a86c44e622445422a574b171f","ssdeep":"192:ISP5Xrl759dGwz4bk8Q48PMtCmIoPeIT49Rxx4bm62sNnuFPBFLYRVxO:P9G3k14QM549Z4ylFuxO","tlshash":"2132d09a811b25ab2021e2ebb71fc181e0c577498a844a17fad4ae3f3d172f09df115b","first_seen":"2025-04-25T15:45:22.844448Z","last_seen":"2026-07-07T20:02:06.590755Z","times_seen":14,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/terms-of-service.txt?_rsc=1ld0r","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:52.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /terms-of-service.txt?_rsc=1ld0r HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nsentry-trace: 9d9ebcbcb44c4260946ddf82fc362439-bf99d5b9e01fda41-0\r\nbaggage: sentry-environment=unknown,sentry-release=3535c7c248834629cf3f47853f0d50b8f71a1035,sentry-public_key=f3f78a14fbc21484a7dab75ef25417e1,sentry-trace_id=9d9ebcbcb44c4260946ddf82fc362439,sentry-sampled=false,sentry-sample_rand=0.8134193113248636,sentry-sample_rate=0.5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:53 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5ILyftBzzvWNklZHjQYFZxxQjiHxNTIUC9yeVYaDgp8ssiA7Dy8YaJRHA%2BseZApCWBNH0%2FChvzXWHTpYajly3fzb1wJpQz8N75SLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e50f0ec2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance.nodereal.io/","fqdn":"binance.nodereal.io","domain":"nodereal.io","tld":"io"},"ip":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nodereal.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:91:90:0D:EE:3C:8C:8F:95:A6:0A:58:6A:D8:9E:F9:06:B3:FD:A5","sha256":"CD:EE:48:FB:10:6F:A2:00:C1:73:D1:C9:53:62:65:8E:93:C6:CF:DC:73:96:A6:33:D8:E9:26:3D:88:32:2B:E9"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.nodereal.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://wormhole.lat/\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T16:03:25.950869Z","times_seen":17727253,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":204,"dns":89,"connect":33,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/merkletreejs@latest/merkletree.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/merkletreejs@latest/merkletree.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.6.0\r\nx-jsd-version-type: version\r\netag: W/\"3a393-ow5VcB3yNddBHZ9Yv78eUVMKtdU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\nage: 1914\r\nx-served-by: cache-fra-etou8220102-FRA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 54223\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238483,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"67ce418e4d67b79b2e9d44050119f0d6","sha1":"a30e55701df235d7411d9f58bfbf1e51530ab5d5","sha256":"726fc8775a8aa08138293a5955dd14f9c2cb8b566f1c577f5d39c986bceab3a9","sha512":"827ddbae75068bcb5c45b95a5a33e8ef5f1f09cc8d5e580e17eb5370959970e8c0280d7edf8ed5e180390397c44ae8ff5861db566fa855bff17a52558a178956","ssdeep":"3072:6cBV39NAtLr/rq8orpLppLQ8CsPYx7F59U:6m9NAtvLYQVsQx7FLU","tlshash":"b7343bc63685a0a583da71a8043f990ff176e827404cd484e924f8f59cfce9956abf7c","first_seen":"2025-09-15T18:44:44.033997Z","last_seen":"2026-07-11T04:16:11.452106Z","times_seen":2066,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":65,"dns":32,"connect":13,"send":0,"wait":13,"receive":14,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T22:59:40.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 05:23:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ziOgT9oIKMtW76oDlPviv%2F3bpsdx%2B11CTGQjaGygtvrdII6L4crYkGjzLQqOVgWTF%2Fo4OfXuVwZZtXG1XngGKXrsBWNDFV9iLt7R2A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9845e4c64f1232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ramda","description":"","website":"https://ramdajs.com","common_platform_enumeration":"","icon":"Ramda.png","categories":["JavaScript libraries"]}],"data":{"size":45979,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (45873)","md5":"74e864701ccfdaa3635c881848e27d21","sha1":"2bb894ad9303bf535d305a9abfec54c4a25564fb","sha256":"275ddfa25cf5796408c3965f6849e123a981f2487fce7c9f3ead42bf3c4e246b","sha512":"9234bd17105da7ee1d890a306dfe51f179dad4c736870bb92c5a5bfff54a316c13c0e9c4c39311e6b42271260fb75b2cdc77f0d6eff79adf3a6ee9eefabfea21","ssdeep":"768:O1S6ufsju6M5j1vDtbav4dT0G0dVTDce1aemqi9FnE5efivsvQbnx:PB5dT7H4","tlshash":"8d231af73900f6456807ce1f02bb6e39101ec067c53aa7fcd999dd258bc767a0b62a85","first_seen":"2025-09-24T23:00:28.778352Z","last_seen":"2025-09-24T23:00:28.778352Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1139,"timings":{"blocked":338,"dns":65,"connect":1,"send":0,"wait":459,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:42 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JysnGAPD8q5b7pwoX%2BIGhIDR4EJ6l53252KZb%2BE%2BzqVNzbSdmbsAmF%2FOlmYZnmrhGSDeHQhIWcYiqpCgiKYURyoOMSQ36Tpln41MA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca1c0f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/3fc566b1-f6ab41026c8defb3.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/3fc566b1-f6ab41026c8defb3.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:45 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KooCriZsQKkyZZpufLQpbplFw007An36oeq8uEdcow64yLLVLBNAFSM42nqnDYFZBJt%2FvLZIAtNgqDkhyPR1QNDF9N3GK7la4Kcwxw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca2c3032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169031,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65452)","md5":"a71b436efb256bee954d3ea815e33fa6","sha1":"eff3747230a1b2e659deaf20bcc5e216d5e7a516","sha256":"3e114e0c80e997393b5bbc9fe0b856a1464bde6515ffc48fbf3b1982e19c19b5","sha512":"7770efb178ea54fff7e20c2e94f59c95ee4dc9d3ce0f39de7043506fc13761fb5e1af93fae63be4b9b7c536bc1474f53f312e9a948465ff0143660b7ab502be6","ssdeep":"1536:RJyjFHQa++E58SoxW/bsrubV3xWLQwOsLIEyUXGJ9hKb+gbM+EMdYI0K7rfM:RJ5+xGswEcxbU49sk00KU","tlshash":"27f3f8ec3d55e6126eb702a700df28037338262b640d4da0a611fdde75b845bb16bede","first_seen":"2025-09-24T23:00:28.779943Z","last_seen":"2025-09-24T23:00:28.779943Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3917,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/9604-b665f58801c3e704.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/9604-b665f58801c3e704.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:45 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7Xy%2BGJiBZf851ZqfST%2F1xMtmmX62r2WEd7nHQbJQ9n6samJuEx0RrPibCssqJfOwWb9tosw9ePyWpjrnjnOq0D%2Bx8z3VbXf1UPD1A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca2c5132fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8751,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8751), with no line terminators","md5":"be7c0ca851a3d3757a32dd1d84484c51","sha1":"f4eac4d7904a3f7b76d5c833a5cc25a37e19228f","sha256":"0febcba8ec3d26d33065fd18c372f3ea7115f33b309e51ffeab2f0f252210ca7","sha512":"cf81d196045bd891e47251097d70cd4d782581f71991cf61cb4a02a0cdd07b734694eeb82f93b934a59d4f68c042d48814d53d2cdd9cfa0c4d9a75fe571439b4","ssdeep":"192:3vHVx5q2yuQ+C2HZsAD5MpIjYLs2J3l74VqImN:3vH75PhX2q5MpI43lUVqIe","tlshash":"ed02f7e07192b0b14ab744dec16f050877a639256a4f9ce0f2ba4cf093f614cea51f5e","first_seen":"2025-09-24T23:00:28.781381Z","last_seen":"2025-09-24T23:00:28.781381Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3908,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3908,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/1428-a0de070fec3d19ca.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/1428-a0de070fec3d19ca.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n6N4k7ux9zEI5FhDkdK%2FyLOiXrDTP4ruIF6BxHDtIHHQlyueiRrpoZ6%2BwCrZyCyQIxRuZvJrpuvoJvqP4Nd7LfQFhEdES9xzvdCecw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca58f8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1384896,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65453)","md5":"d741d6c483498ab02e9f8f83c7754102","sha1":"f1a1c37191b78fcb5547422054bf7c8eb608a07e","sha256":"614c265317dda77a6b9a781bb94a624b5bee54e3d6289931cba7c48b4fca0e4d","sha512":"f56f51d29035f28073c4f4287d27829c07358535de4efff03f42a4bf523b97cde69745249d818ec13cfd71e1aacf1ca63a05cd0a519c6e72e96eba21cbe180c5","ssdeep":"12288:JAM0o9Xs6F4tnlDDtwbHZWPkjBM8UPnnEkP0N9tUwR8Ka2Z+ci:qM08waHZwJaUwR8Ka2Z+ci","tlshash":"b2255ce57264f4ea4bba14e11c1b1605e238ad9c744d4498f39ca8e779ba8c0853ff3d","first_seen":"2025-09-24T23:00:28.782778Z","last_seen":"2025-09-24T23:00:28.782778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4946,"receive":896,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/chunks/5dc99f56-b11ce1da4ab1229e.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/chunks/5dc99f56-b11ce1da4ab1229e.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GP3bUUVsY5zrN9Tk8%2BT1SeWAqYg4%2BKn%2F27vyK5C6tlCoUZro3ht4RRiQjK2wrjLLm0s0K8nCBresRaE7T79nbh5VpCxHzxgy1lnx%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5067db5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/usdc-bridge.txt?_rsc=1ld0r","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:53.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /usdc-bridge.txt?_rsc=1ld0r HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nsentry-trace: 9d9ebcbcb44c4260946ddf82fc362439-a1e098dadad79d88-0\r\nbaggage: sentry-environment=unknown,sentry-release=3535c7c248834629cf3f47853f0d50b8f71a1035,sentry-public_key=f3f78a14fbc21484a7dab75ef25417e1,sentry-trace_id=9d9ebcbcb44c4260946ddf82fc362439,sentry-sampled=false,sentry-sample_rand=0.8134193113248636,sentry-sample_rate=0.5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:53 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6k4YfZXl75EJrifVrhO9wAYXTTORDGO%2BQoQ%2FZJLCuA7g6Rmb2WKjEKrdyhIRy%2FvaEPGK0wM3tOJK%2BOyculF19em8xgyzBfYnDQxLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5108873783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/logo192.png","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:53.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:53 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeBKwlvCv%2B8Mb3aANtE8MdUTzD9Poclaq5PmXdZ838bTBv3RBWI8SFkc%2B1uWZf0qjs01y5p1AsBqyrXUJq3RjQNs8zugaPIO%2Ff%2B3Qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5130ba1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/secureproxy.php?e=ping_proxy","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nsentry-trace: 9d9ebcbcb44c4260946ddf82fc362439-b1f59ee15627d46e-0\r\nbaggage: sentry-environment=unknown,sentry-release=3535c7c248834629cf3f47853f0d50b8f71a1035,sentry-public_key=f3f78a14fbc21484a7dab75ef25417e1,sentry-trace_id=9d9ebcbcb44c4260946ddf82fc362439,sentry-sampled=false,sentry-sample_rand=0.8134193113248636,sentry-sample_rate=0.5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BCJ%2BFcPHn0a1IUivsh%2F7506zjZTGcNdpffzkgYCKDCYQUg0EYjkjj%2BAR46ncPzH%2FMiS7Lf0nWP%2FdeBYPG62lYho6SKjX5rwBfxwj6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5187963783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-05T07:04:55.524334Z","times_seen":9007,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/7210-9c52b527c4e22953.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/7210-9c52b527c4e22953.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:42 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZM5vqqk%2FA9n%2B0zEvCkKBF8%2FDkmVbZm5nM8gR5ntRTij4hYeWwwDOAEJdM2%2F7JjrPhvieP8FQuTIcOVtWRZI4wJ2p9DbP8UEIb0cM5g%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca2c3832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383045,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65457)","md5":"2b2dd4e2a71965e450649f88c8cc8f35","sha1":"be26235901d135f276764696685ec3fd7fde8ca0","sha256":"062ca16063e6a60e13451be2debf0109cf819ebae1c0c05ae68846fa9f103740","sha512":"643f160f90482cc744062f9dc71895069aad19412293923005416d07f66095873bb4653663d5131da5ad8999cd1d35628f3b28971301ccfb0e9a383d21028cec","ssdeep":"6144:bNBHBjWKthYlHwDAMRSz44/zJJNcK0ZtqgzZG:pBdDjRSE4bJJKK0Zu","tlshash":"e984f7e631d1f4a207e745e5803b0006f3391c6a341ee5a0b3addcda796649ea173f6e","first_seen":"2025-09-24T23:00:28.785079Z","last_seen":"2025-09-24T23:00:28.785079Z","times_seen":1,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/8994-30d0c2202e81bfcc.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/8994-30d0c2202e81bfcc.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:42 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Itmkebqs64UDoHTkrRde1rqOQgqNgUfCA5vd1jWKuX%2BPdW6gDZzYy7F%2FsxGeMx4jl3SZKoFRjg6Bbpbd%2BgEr5xHO77wy7BBA02jVgw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca2c5332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47615,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (47615), with no line terminators","md5":"db78684150c58b5db62406570005a6b2","sha1":"495e374965949235c12c60f7eac6e2d0f30f2cd4","sha256":"7643c239df76af6fba3983bec78603f9715bbc985c2b4617b1179fcc3d6cf45f","sha512":"b46c98c3e0497571f1c31a5517d25ad31e35ae47e2e8e51c932d49a073ffcb9dfaf45af640e55a82be5089b695b0a0893c52462352391d5cbcf42a595f5e7d5d","ssdeep":"768:sMKI8piJhLSaDUWvRgmXxGKOeT1NgtBc1/LnuhUihThQzr7hjnIOOajhk7tK/r4o:JgHKSBcTzrNU9aNY73SDsbo8CL","tlshash":"25232ad5b282f5356fa384c9d47e0028f2252d14780e94bcb2bd6ce666479ceb436f39","first_seen":"2025-09-24T23:00:28.786599Z","last_seen":"2025-09-24T23:00:28.786599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/59c16d10-511c98f8d5320d19.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/59c16d10-511c98f8d5320d19.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCIj38xnNF66%2FtyQHye2kDHPdkBkGjTKwXF54ltGAXvY0ZHiFHxBNZOp2vzEJH8SzTzH80aSdRNmX4Jr1%2B2oNkHYcSnby1J5KgdL%2FQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca58f5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113994,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0cf6e0aa323758cf67381ff872ce2c1c","sha1":"c4defbcfcdd94fb0abbb5bfd32b91f3c8bd0f46b","sha256":"27a23fafa598c24857c678bff81774c35839379a9c3cd41a76bb50f80b76cd78","sha512":"4e187863bc0f8c353fd79eb9a72f3b4e3678e64c772c4073955209f3227f0eec917ff2848f4b75c01265531462f8713309b5a38ee8ce8ae3be0561c198c84d72","ssdeep":"1536:KewwthFx+vZh3yk0m8NzI0o9IttuvwI03Df7WMEoiuwrV3XIDIbW4spX6:KHwt3x+vZAhDw47wrV3mK","tlshash":"acb32a853162f07207fa96f190b64001f37c9a56345dd430b29cdedb26e898dab7af36","first_seen":"2025-09-24T23:00:28.788295Z","last_seen":"2025-09-24T23:00:28.788295Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4938,"receive":431,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/images/bg.svg","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /images/bg.svg HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8kymJgYXtQZ3PBgDA2RgJU2LV3Js17HV1s0ZGLmfxGzQMv1bDYNYntbrbdj6Ia9ag%2BXKZF8we4ppn44O8qvvMTAanNLkHq1fNaw%2Biw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e5050c52783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3a099709826d1068fa910922ab53b44","sha1":"bb5ef48cb0c69184a1632edf4cf20b0a7112fac0","sha256":"ae412574f3202e5efbdd3f0f0cfeee3e571de5afad1f3c25982ea17517b3ede7","sha512":"3121e3adadb0b097c531e17937375a94932830853897bc2d25adcfc686a2ac65f5490c8366f832ad127df7fd64fb584f809f46d8009b937254cb65201c67dc79","ssdeep":"","tlshash":"85312358c1f979c9094f862afe96a912091140efc145052df9dd72704f0ddc3ee17b8d","first_seen":"2025-07-14T20:08:16.84869Z","last_seen":"2025-12-16T04:23:02.854621Z","times_seen":9,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/chunks/1428-a0de070fec3d19ca.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/chunks/1428-a0de070fec3d19ca.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2MoxQbarRxHtFxCedTCXSnKQcNFtQVZIvONWkPXvhR82bdDclggvo6HrRbGw2TiUrHPTuI9pwlJhgktq3alQBuE94XIFW9BruDMtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5068dbe783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 9845e5177c5fa0f0-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 113978\r\nexpires: Mon, 14 Sep 2026 22:59:54 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SXKkRuEE3gJlmbQLP1LYKdfYUdbCt9r2tg%2FwuyQe%2BDKinoqJU7GinwpXQsQC3s3L3Ua%2Fh%2BBNO4zzieo5iLxZILH%2Fg4xsMNBC1x2lA3hkwY0vdGyA9bSPX0GpPQ%2FUnre70U8Fsv%2B1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-02T04:01:58.308798Z","times_seen":8484,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.nodereal.io/","fqdn":"binance.nodereal.io","domain":"nodereal.io","tld":"io"},"ip":{"addr":"34.254.135.82","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nodereal.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C6:91:90:0D:EE:3C:8C:8F:95:A6:0A:58:6A:D8:9E:F9:06:B3:FD:A5","sha256":"CD:EE:48:FB:10:6F:A2:00:C1:73:D1:C9:53:62:65:8E:93:C6:CF:DC:73:96:A6:33:D8:E9:26:3D:88:32:2B:E9"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.nodereal.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 4e252cd354d8b0b314a628895318c3ad\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-06-18T09:20:21.245055Z","times_seen":5257,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/layout-7078c10eb325c92f.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/layout-7078c10eb325c92f.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WRT7OIPolFL3sPxh%2BDSBQI39OUQ%2FeM0DH%2F1wUgqofFmrHBXby8pNAu9StNhHIL6Qx1vuUsFvROveuwsef1bNt5g9eJ3FONVkmCn%2BuQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca3c5832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231872,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2222d48ea01c74c173dccb0fe37a842d","sha1":"a02ed0f64306d8a1f4f7e878c149407daef470c3","sha256":"848a4063f1bbd2cd988bc1cc0e22e6e2aaa4d839cf2a60e7d4b033072b7a7bb4","sha512":"64b87737cad37144cc835acd460b0c09826e288cad6293e9e23f44d1bc5dc533fa12069fb5ecaa2ed31dfbeb3557913b9fc37dff6e4a82a935a203784e7ab644","ssdeep":"1536:m/HLAUWkVlRaF7Ja/N/0uEs6DhoDt1Jvp/23f3bNrRpdReNykMl7Jd/aFr+GdSQ7:m/sU7lRn/KubNt7N0U","tlshash":"5534e9dd6bb04af1fc4ae7fad2222068395b24b96fc28a3cc3985d14d47295cd895dc3","first_seen":"2025-09-24T23:00:28.791147Z","last_seen":"2025-09-24T23:00:28.791147Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2848,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2848,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/5dc99f56-b11ce1da4ab1229e.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/5dc99f56-b11ce1da4ab1229e.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:42 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IpVZzas0L13w%2BjWbTyGYA8Wpr89FyKWImGA7cA3DBaEjj50fB8zCGPSIzZepR7IlnNc8jQjlmfepUp8GcPtuxCIvHfHFgHzLhfbP8A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca3c5932fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":966024,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65451)","md5":"05b005ce97dafc33b9736be466f11280","sha1":"ac0e4083bfbf96b1d67838f9cec11a712e825aa1","sha256":"267ab5be27331794860503c2db2631f6b97578d20a1c67a9018794739ec81d63","sha512":"80246104c5a1e953b6dde02b9f18109e826b06798c25294fd28b763806ea6e57d7dc66a1b97664e41a141457ed3d87ae96e93f872ac808324b9f1e1c7cc5c974","ssdeep":"24576:Aho5hKk3gmJE9nhsPZIVL8GOESpJOW7QYhF:ek3gmG2soGONpJ77Qm","tlshash":"a0258db5b3847160a9174bea90bb000cb63e2414751680f0f1fe9cbd5a691dca667fef","first_seen":"2025-09-24T23:00:28.792785Z","last_seen":"2025-09-24T23:00:28.792785Z","times_seen":1,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/484bbcc3-e65f4f01e8836995.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/484bbcc3-e65f4f01e8836995.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kO6VjP5INCya7SSuHmN12tEa5ymPWyuPH4rnGALzgkz6AR1B7%2Fs5gHCiFhAYIVmsMIw82UnVs%2BXaxfBqZaFZRyqSqZ7x9X7C7mKRSg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca48f4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117614,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b8db3cfcb5440f3f5a4cb94dd110ed12","sha1":"9c843e10aa0242fb7a42adbb110ad8949bb6655b","sha256":"c242061528b67bc5630038feb4cfdd60ecc9e8460e67e76d4ba2d50b34c22b5e","sha512":"c6abf4922ee976f4caac9a868945e1ab6511feb3f3c4a123b3175cce6ea09fe52c3cb9a645f22322bd2fca17e8f4c575a4823b573936aa769335cef77e150633","ssdeep":"1536:T8AS3BSnjdo9GPQmONzuwWSbYH/1Wuinyi4vBfNMMl11XVx05I0pj4LzPL:QBSjdo9GYmuzyWuinyi4ZfNMMl11J0yL","tlshash":"05b3f8d073a1f4f147eb64d450372107f3289968700a44acfbacd9eb687dac6a577a38","first_seen":"2025-09-24T23:00:28.794227Z","last_seen":"2025-09-24T23:00:28.794227Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2830,"receive":365,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/page-2f546d23efc7761d.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/page-2f546d23efc7761d.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KasBUFU6T%2BFL%2FI1t8GCpsSA1FwhkVtotUGfDVE2qU3g76POllYPUrmoY7Q1h96Iha%2Fs9D8qcHtLJw6mz%2BZWhJ8m%2FoCwjlegEN75ovg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca58fd783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":916,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (916), with no line terminators","md5":"360d18fb5e4993e7c9517c66429b4649","sha1":"6210ddcf3459924bd7fb67cb1ae580647d370b41","sha256":"ab2e8c3c22c1f994f36fddae0663145ebf75df9e581e9b3cace9d1209b7c5c91","sha512":"2c68982e48acf886660ccb571ce34189d663578b2554906323dd4a75f8b97ad64cddf787b045cf276e8d24288f16a840376b22cc01e360e16058b7b6530f7056","ssdeep":"","tlshash":"3311d0c527715948e26e0ff8d03b6843349914b71ace1b64e2398d3cb271f9501a0993","first_seen":"2025-09-24T23:00:28.795871Z","last_seen":"2025-09-24T23:00:28.795871Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"configs.labsapis.com/mainnet/tokens.ntt.json","fqdn":"configs.labsapis.com","domain":"labsapis.com","tld":"com"},"ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:52.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"configs.labsapis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 23:06:14 GMT","end":"Mon, 01 Dec 2025 00:05:26 GMT"},"fingerprint":{"sha1":"40:EF:D7:5D:8B:CD:89:9B:8D:C1:7C:E6:53:65:A2:91:F2:F3:25:3D","sha256":"54:2D:00:0A:A0:31:3B:44:84:72:2F:9B:E4:CE:2E:C3:43:6E:49:6B:A1:73:F6:43:B7:FC:55:6D:8C:A7:E2:B5"}}},"request":{"raw":"GET /mainnet/tokens.ntt.json HTTP/1.1\r\nHost: configs.labsapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\netag: W/\"3acf2bd602b779d5630bfba6a1cd38f6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QyOaM21RrlZEHk%2FZRhFUgyZubJWEK1FkXwMaB9hvLZSWJ42%2FqQ3IP2L%2BTFR3OPI2g%2FdsmNqentJYKu7hk39OR%2B9EM7VibElPLVN3rfSgggqLIhblT2m9uvxTUvUcYU3LAV97a4GEHg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nexpires: Thu, 25 Sep 2025 02:59:52 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9845e50f4b9656bd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34025,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a63c29ed3352989d49172008a7a54161","sha1":"35500da677915db644a8f1866148f207af8f7dc0","sha256":"35eba179c05332141d6200e15203725802afdc8b0604a8543e7a7b4757b4e265","sha512":"070fab232c660efb2e1e1be358f7404630abdc44e3dad9d020d176fc1768103c32c832e9824936008593612d1ae27ddf86e66612dd20d9275da66ccee4519f83","ssdeep":"768:dtLq5AMvDbkxSYvaNhdEwRhtBjmJIcAyR45:fqy+kMKohXcJYW4","tlshash":"f8e255060fae2ab605565fc66cce892382a7d3f39bcc208c054f8dabcb67671454675f","first_seen":"2025-09-24T23:00:28.797277Z","last_seen":"2025-09-24T23:00:28.797277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":62,"dns":20,"connect":5,"send":0,"wait":55,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/secureproxy.php?e=/prefetch","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:55.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"POST /secureproxy.php?e=/prefetch HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nContent-Type: text/plain;charset=UTF-8\r\nfetched-ipaddress: 91-90-42-154\r\nsentry-trace: 9d9ebcbcb44c4260946ddf82fc362439-bd2ff96db390ada0-0\r\nbaggage: sentry-environment=unknown,sentry-release=3535c7c248834629cf3f47853f0d50b8f71a1035,sentry-public_key=f3f78a14fbc21484a7dab75ef25417e1,sentry-trace_id=9d9ebcbcb44c4260946ddf82fc362439,sentry-sampled=false,sentry-sample_rand=0.8134193113248636,sentry-sample_rate=0.5\r\nContent-Length: 2540\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: gacfxdn1x7=O14zTrsoptYfids\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Wed, 24 Sep 2025 22:59:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6OZgPJbTs%2B6yvL2HxXM9BHgrN0OAkoF%2FRNHBTJjqtoBQj1RhlBxh9vpkU1ISViKQMOjCxD7zDQwIMrpjMqe1IamGQPU59F7zfXIbvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e51daf2f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"667890a91cf9e192cf6014685671d62f","sha1":"f9da20f35d6cff24ed280b2a69688372552c4861","sha256":"3bdc6a2dc7297a0abbe493d89e5fcb83575b7d57c2517a832c6010e84dab190f","sha512":"3d116192ac8f7e4d4011d3a62177758b12803c16d77d936b20e6c4766cca519e3f4665500e5567e170a46446d8da5d493b1f685316050b2ae18a2245220f9894","ssdeep":"","tlshash":"f17000820002003080c000e202232ab28028a03000302280800b2208002a0000200203","first_seen":"2025-08-08T12:49:51.290746Z","last_seen":"2025-10-28T18:59:57.871311Z","times_seen":637,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/9faaa3b2-d24c5fa3ad5d7372.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/9faaa3b2-d24c5fa3ad5d7372.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:45 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AiLGFG9SPMV2BaDC%2Fu%2B55slMQoGQiewyrgwA9HosQyh0TNrkJh%2FPYWC9JbuLVweB3mRun%2Bcd1%2BnQJ48swtwxOU8s5rTc9KQwcFLPQA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca2c2832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118693,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a33e544b0e4da300cd33d1b121241b54","sha1":"2f43f585115e70a20830ed816cb670fbcb3b4bff","sha256":"f19cfe9580815ddd081aa9739e493e744de17a0e1f651d926e6f1527e7ccbdc4","sha512":"363aa2337492acaa27c39459983149591f13a7ada75a4a74c8887dd43c18aa4163b0afd33520e2f155510f2c0a55d5ab6c64614e7ee2243835a7655828ce20b9","ssdeep":"1536:LtJELMRR6Ujh0cL6s/jqn/CoBnMYFxlzsW3cQFw6Vw6v30UQVRNohi:LbES6Ujhesbqn/Cols8bvkHVRGi","tlshash":"2ac319da32a63173679645a640b70202f7314a99384a41a8f52cddef3c7d943a2f6f3d","first_seen":"2025-09-24T23:00:28.799426Z","last_seen":"2025-09-24T23:00:28.799426Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3917,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/94f2d2fe-1eda671bc291c249.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/94f2d2fe-1eda671bc291c249.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsBBcnBvMagCQnFik%2FBY1EQxO9vxmzMChWbr45WqLGxlIByi4begKbMa8OkeJ0ScfOvpFx0%2FW7xPxNod6uN40OMOFT1R3E0jeVHzNA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca4c6b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":595764,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3cb08cdea7c1a4d9fa3ba8e5b0a417e5","sha1":"17540905255f29908206fc26b58d906623603e15","sha256":"88acfbc5a08c1c3297ce9d89272bd9140fceca3bb1d0d22e696ec9dcdb87b157","sha512":"643703f14dc95a66e177d6c2861c9bc0d13b4a7480332f557a0eed8cb392e19562d9d50dfe94cb95afcada76c44a481ef8e3af3d47f35a3df042fe2bd221d480","ssdeep":"6144:vAAd719Y+kXk6Ax1GmOZUbOIDOoxQxqV5gxxQxXkWY4bCSWwVeKf9:vAN01GmOZU/zeKf9","tlshash":"adc4f9f2a90858decdb349925c8b7a2471a6fcf74acd418577dcb5a716da8c08c1eb0c","first_seen":"2025-09-24T23:00:28.800922Z","last_seen":"2025-09-24T23:00:28.800922Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2836,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/images/logo192.png","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /images/logo192.png HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1568\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EA1yjzEgyFHq0yU6vR6bvY7Wmw37Eom8eDqkMfVNw62AUE3CAPsyFGQJXUGI61dqfIE7DGJDWt93UVluOZvOm4As1ldx0bcYRdKZZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9845e509d959783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 193 x 192, 8-bit/color RGBA, non-interlaced","md5":"81dc114d43c0471873b2f8ffb4f84843","sha1":"f7a9bf5ebf35e230f1f6d367b81d62d4d340765d","sha256":"1415a083b76c6827c6c4d644b2870549f41f118bfc7a36ab0daf779904a296f1","sha512":"26ec02111a4c3c264f53f9da8ec344ef13af757efbd6bbf17d7fc11962461546de0292369d4bef23ac25ea28f080d6d3e9b23d5924e58a4038456d546aa87594","ssdeep":"","tlshash":"ed311f825c09debdf7ccf63ad10570e6190d86420d4d968864dbb2c7e40197a3129d6d","first_seen":"2025-07-14T20:08:16.832464Z","last_seen":"2026-07-07T20:02:06.583683Z","times_seen":7,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"configs.labsapis.com/mainnet/tokens.wrapped.json","fqdn":"configs.labsapis.com","domain":"labsapis.com","tld":"com"},"ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:52.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"configs.labsapis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 23:06:14 GMT","end":"Mon, 01 Dec 2025 00:05:26 GMT"},"fingerprint":{"sha1":"40:EF:D7:5D:8B:CD:89:9B:8D:C1:7C:E6:53:65:A2:91:F2:F3:25:3D","sha256":"54:2D:00:0A:A0:31:3B:44:84:72:2F:9B:E4:CE:2E:C3:43:6E:49:6B:A1:73:F6:43:B7:FC:55:6D:8C:A7:E2:B5"}}},"request":{"raw":"GET /mainnet/tokens.wrapped.json HTTP/1.1\r\nHost: configs.labsapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: application/json\r\ncf-ray: 9845e50f4b9856bd-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\netag: W/\"f402cae83042c327c169d9a61404d452\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dGyeEj2YEAJafmiBS8sBK1vzpPKgncHxV0DeTCK2F3kMQRlZ5j9Y76L9GOhCHTW9f%2FvO9OYsbHJsfix9Q5zjybjVU0u3Iq2lQKBFIV3Q%2FgOS24XBbEtuUSYNA5YvNc9tewyx92jHlA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nexpires: Thu, 25 Sep 2025 02:59:52 GMT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6827,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6619a05d889cc6c1f3b05e58f38ac17b","sha1":"e5299720f491f80aa0191c675c6f375de8f8cc6d","sha256":"f62e37a6fa786772e67e39b9c87c94f48b4cd537623d2d99cef8f967594d33fd","sha512":"a8174aefade34f0d3e55f2837501de2c5e2a60f4d760bd858bf5842954103105d245db5a838ba2f515cad3ffb1ba3dfef5c9a54b6f0adc44acaaa37dbedfa5c4","ssdeep":"96:5jz1YYkL/wkDBXuY3xvlKDUilc1FtLdoT3VCe3m4uOtRypnrdy6c3uTvLvmf:53LkTpDpuYdgc1FtLSTI4uuupAub6f","tlshash":"dbe14abe39887d83cacd83c9d655e5a511c733205ef8dceb5ab3a1910803774bade488","first_seen":"2025-09-24T23:00:28.804059Z","last_seen":"2025-09-24T23:00:28.804059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":61,"dns":21,"connect":4,"send":0,"wait":54,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed3.bnbchain.org/","fqdn":"bsc-dataseed3.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.16.144.188","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed3.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\ncontent-type: application/json\r\nContent-Length: 60\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: eead1744988bc5c6230ce1fde8d9629a\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7855aabe1be2e1d4d9683a6508186546","sha1":"afe530f59475b81e9189721d7f2cc0cc38fc37f0","sha256":"64fa9bad3274e0dc928755d2d8d827dbe0470406cc1a29ee19f6cd8f35ccbe75","sha512":"1426d53d0ace9b019e31f73fd9a565c2ea6c3def699cde763073d7fc1f0b61a7ae7cad746adff9ad1539a1331bad225d558825f5434a56f38ab73b676a34c609","ssdeep":"","tlshash":"979004c115070731401c0c01d004004031c33f5c05040f04444dcd457154147730c335","first_seen":"2023-04-05T17:45:40Z","last_seen":"2026-07-01T02:45:34.001982Z","times_seen":2186,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/media/684e5662d94c69e1-s.p.woff2","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/media/684e5662d94c69e1-s.p.woff2 HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:43 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34G1ycIUZkZo%2Bxb%2BcIwszUxI7m2JPf328r3xMG03QFoIkqvefkYCykeYR4XmOcXgBHfxkD5fI2rEMaq6brytx%2FjxxrGJhDXwHPr%2FKw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca1c0a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":1894,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1894,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/6221-97b03208c61a0c39.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/6221-97b03208c61a0c39.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:45 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DFjO9L%2BVmlukT9jdwipCQ%2FuLr9R7PCIxREeipSl32E4wlusieo452nqrhiXtC7aYa0%2FvPRs9W10W3c4Hxor0WhgDnCUdRVIAtyN%2FwA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca58f7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14417,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14417), with no line terminators","md5":"442338f522e783dffdd183eceda9ae9c","sha1":"243722bdd16ca5e44949a2f8a7d865fe9e53aa22","sha256":"562691647e2a0159e374054b613d183d7bcdda0505d6ba27742e15aad132f72e","sha512":"be3a19127da32ebd612629fc4fa26b2a809ca62370cbaed58b6c9e5c1ac2ee29edba258bfdaa0a438158b2dc535ec330ac48e33c203ef8b792c8f0d123080c50","ssdeep":"192:Q+okJeQshacigHnIygSSSSVMY4OKZoZLNWIeEm1CFIz3ZgR9P6fkP9r6K+mQDL:Q+AbacighxSXmpKrWC+XZo56f29rQv","tlshash":"de52a3946312d8393b6b95ccd5de0948f22d55025f3a0cf8f37a1a7893899c8e912ff9","first_seen":"2025-09-24T23:00:28.806292Z","last_seen":"2025-09-24T23:00:28.806292Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3987,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3864,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/fonts/e4af272ccee01ff0-s.p.woff2","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /fonts/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/css/4b47c03b8a6f891a.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2GX0p5CdRPC65sgMuXb1Jloc9yxbEg0lSZ%2BrHM%2BjXg3yr%2FWPOgx2pFkdO0FPmhwAEcaqt%2FdNQxJvHqY%2BQgNd%2FzQEEHf2p4jT0sV7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9845e5051c64783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-08-05T16:05:56.079354Z","times_seen":87018,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":297,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/chunks/c6627b04-29e31584faff89ff.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/chunks/c6627b04-29e31584faff89ff.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MbCsN1CudSgKfD1rQs8r%2BBlzfDx3%2BKTc0KqjbBfVGHGURouem7OFpHn5y27%2BizphkgNAI%2BhU8gMLBQ0OPqywodDx9NeckvpcjUbWHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5067db8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/css/4b47c03b8a6f891a.css","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:52.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/css/4b47c03b8a6f891a.css HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3sITAMLloHojeIOtxLjbWy6aXYxZrezXqYjl453Xob9sqLEhLLb9hn%2BbnIpwKiOClKeTpOo0lstTjOZp5XevrjXY6vonMx0B8IcWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e50c0b96783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/85379c4a-2f6b82eda59253e8.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/85379c4a-2f6b82eda59253e8.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:45 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDf1siZ7JCZLUsXyA8xgxDivcOtvW%2BRrFNh2ZpBuzaKXQukiWARlu9fJASIvn6fFEs6w8h1sKcJ5X6z2vMfKsLJa0F0IDAAir0y93A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca4c7332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130705,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"502d4daa3ad392c96ca387b4d97773fd","sha1":"5dd262d0b2241b7c765f0a48c7af5b17057fa248","sha256":"90ef6da62f87b115c5522c7811620a2a163248e30098d64e6cb422d27d47a4a3","sha512":"ce79d219fa801ea23fc1716446e810cbaf167272384c2a8bbeb0ddcc348f8a4193f8b3c6d1ff3a333d593d0cbff2e2477d79efc88256046750a0824e8ef52788","ssdeep":"768:lHniJyR9rX36kc72cQb3eJvphSLyoVIZs3b9Z9FzrzEAR5MJOwndjn/9uTxb+Kqx:lHiZ1QvNbpIz/X10nvL++YGZw","tlshash":"89d3e890b26531f45ed224a21833150be376d968b50d80387fec99ef5b9fa495a2ff30","first_seen":"2025-09-24T23:00:28.808518Z","last_seen":"2025-09-24T23:00:28.808518Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/_next/static/chunks/0e95678a-5903dff21df05626.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /_next/static/chunks/0e95678a-5903dff21df05626.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZM%2FtkpqbHA7Wwdwa4BtcX%2FzIS4jtoVMtHT1bemQHGSRtGbBty6kujidwuUwMnmCQjEY7vgqCTAvz9zVciyilvA6HOTcZTsTJ5%2BMR7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e5068dba783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/c6627b04-29e31584faff89ff.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/c6627b04-29e31584faff89ff.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:43 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zZ9GsNyqdDpSCjWc9xQSVXraBx15Hi4snOTOZ9iEgMkg5YRDrtcltxsV5i6TEShHkR2E6T9O%2F0kPsCAZD5i3GVKlSm6AlzNz3aZEfQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca3c6032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":615524,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65453)","md5":"d887cc43b7c4cd0ccbb02e52687d7002","sha1":"6f0e2baa039526958f508e03a0009b45d122fdf4","sha256":"164c84328ae8419933b6a73b33111288ada4a69cc30793f0c17a9bdac8113378","sha512":"f2ff15180e2d07c46d7561b6237963f6aca4c3d52c6f11992eb6483517df309b0116677b5c564b8e0888be963437561987e651da07a5e685abcfdc74076643c3","ssdeep":"12288:3KNxQhdF3UQDDOvq/FOX/owtApUF9Kj8tXReLUg:3KNihvDFOX/5fwUg","tlshash":"18d43af47370b0a547aa10e1142b1109e339a69c740d84a8f79c84fb3bf6a95d96ef3d","first_seen":"2025-09-24T23:00:28.810726Z","last_seen":"2025-09-24T23:00:28.810726Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/273acdc0-19e382ba00319df6.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/273acdc0-19e382ba00319df6.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMfUwcB9DyKNle5RD6PNlwjMteYfE9OGb1ifBdMxBBUYbkLwBro37PfX90cN8ItyGzQtEqVsY4uaqIBSNMd1wvRoUOH2XpVrR8updg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca48f2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46649,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (46649), with no line terminators","md5":"46f30e0636477089140163f558fd5231","sha1":"976eb5eb2ddbc432e8f79ce3efa704a4e14ecab0","sha256":"7f7fc3f5419a5936b009ec5267f561a3b67773f09dee6670c0f8888e6ae410c2","sha512":"dd6101ff2cb2cc038a6d9931d6a02fc45d790103bc97dd9c0bda3f0411b81c72ec9468d51c83a91af28b6a3c8dd38e5c22cc24c0f1fbfa11ff3056bbdafb620f","ssdeep":"768:KsTpc4smM7iXj/GLLf1ZsN2AAAAAAiFtIbeKaTct2z4RNzWSjNIYi6Nsg8U8Fs7W:nj+qSS3LV8tczWo8+","tlshash":"6f2309b211f750691be00cd884870ba166b481722c4655bde77cdce538b0adbe1bfabd","first_seen":"2025-09-24T23:00:28.812186Z","last_seen":"2025-09-24T23:00:28.812186Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4989,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/js/7330-638fcaf5df3c6fa3.js","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:41.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /js/7330-638fcaf5df3c6fa3.js HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wormhole.lat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:46 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Sep 2025 04:48:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Su6ztAk6uAlv1MjzL5IlEjTdlTYKBT%2FQiLDOClFyWWveiaa1PjlgumzHDQ77uAKrC23sepq50vH5jvsOJv8DhBg%2F1TptBZgxtTQ94A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9845e4ca58fa783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90983,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"df31300e476ddf1e783a2be89a5ba177","sha1":"f96441e537ca1babcffdc6b05ef78aaa48ff77c7","sha256":"8ed597c342169c4f40715c704c2f4be46814d1f5cb7accad4f1a8ddb5b510c66","sha512":"75d992f6e31b06e28cf26b2017bf21e8c6e7474f8555f069dfc29a38ff11c6acf1546c1d2050178a81435858d03c1516e7d3c29d6a170c3a6729e8d29753e294","ssdeep":"1536:2O8bba5vqh7WBzEIyLud+u8qmLVQKhAK9Qvd0ThT:29XaKW5EL6yvf9","tlshash":"5b933bf21760b0cb4708098f584f960442176bd4e7c8d19eb369c5ebebb2e92e60677d","first_seen":"2025-09-24T23:00:28.81342Z","last_seen":"2025-09-24T23:00:28.81342Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4810,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4545,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sauron-staging.labsapis.com/sn","fqdn":"sauron-staging.labsapis.com","domain":"labsapis.com","tld":"com"},"ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:51.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"labsapis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 19:00:46 GMT","end":"Thu, 13 Nov 2025 20:00:27 GMT"},"fingerprint":{"sha1":"CB:5D:FC:98:8E:28:34:74:BB:4E:DC:BE:F8:FC:85:A8:D6:F6:88:24","sha256":"E1:95:E9:53:4D:C8:8F:1D:6F:32:6B:DE:4D:FB:04:73:01:E5:06:1A:DA:51:11:ED:C2:76:38:BE:94:83:F8:E7"}}},"request":{"raw":"POST /sn HTTP/1.1\r\nHost: sauron-staging.labsapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 561\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 24 Sep 2025 22:59:51 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 30\r\ncf-ray: 9845e5066adc8be6-OSL\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7fb182ad57900f6f221bc075a7926530","sha1":"6c86324b25ef582d3224f7f7d820d85ef0dbf421","sha256":"23d04543d3fec9659be807b410754653814213d3c686f476e491bc7e107d2a78","sha512":"d3e7b6c0561532631f75401a1501a48053462daae77ff10eb34f4aa101e3e813ee5723aefbe3157130af5ccb240244dd2ac5a33b47ef18edc78d5c22e391ca43","ssdeep":"","tlshash":"4380000c0208030ab2a3030833080fb3c003823c820ba0a38ea080ca0b0330c2a83a2e","first_seen":"2025-07-14T20:08:16.872538Z","last_seen":"2025-11-30T01:40:42.314525Z","times_seen":3,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":64,"dns":40,"connect":1,"send":0,"wait":69,"receive":7,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9845e5194cd32efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":121,"dns":4,"connect":1,"send":0,"wait":116,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:54.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Sep 2025 03:22:08 GMT","end":"Thu, 04 Dec 2025 04:21:53 GMT"},"fingerprint":{"sha1":"E6:3E:4F:B3:FC:53:DD:27:D8:25:AA:72:59:23:FF:63:FD:4F:1C:73","sha256":"B4:1F:47:61:EC:D3:B5:F8:B4:5E:F2:BF:CD:E8:CA:5A:7F:1E:80:E0:D8:8E:F2:70:3C:14:BB:81:DE:13:23:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Sep 2025 22:59:54 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9845e518cc5a2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":57,"dns":1,"connect":1,"send":0,"wait":117,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sauron-staging.labsapis.com/sn","fqdn":"sauron-staging.labsapis.com","domain":"labsapis.com","tld":"com"},"ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:52.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"labsapis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 19:00:46 GMT","end":"Thu, 13 Nov 2025 20:00:27 GMT"},"fingerprint":{"sha1":"CB:5D:FC:98:8E:28:34:74:BB:4E:DC:BE:F8:FC:85:A8:D6:F6:88:24","sha256":"E1:95:E9:53:4D:C8:8F:1D:6F:32:6B:DE:4D:FB:04:73:01:E5:06:1A:DA:51:11:ED:C2:76:38:BE:94:83:F8:E7"}}},"request":{"raw":"POST /sn HTTP/1.1\r\nHost: sauron-staging.labsapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 567\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 30\r\ncf-ray: 9845e50c48358be6-OSL\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7fb182ad57900f6f221bc075a7926530","sha1":"6c86324b25ef582d3224f7f7d820d85ef0dbf421","sha256":"23d04543d3fec9659be807b410754653814213d3c686f476e491bc7e107d2a78","sha512":"d3e7b6c0561532631f75401a1501a48053462daae77ff10eb34f4aa101e3e813ee5723aefbe3157130af5ccb240244dd2ac5a33b47ef18edc78d5c22e391ca43","ssdeep":"","tlshash":"4380000c0208030ab2a3030833080fb3c003823c820ba0a38ea080ca0b0330c2a83a2e","first_seen":"2025-07-14T20:08:16.872538Z","last_seen":"2025-11-30T01:40:42.314525Z","times_seen":3,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sauron-staging.labsapis.com/sn","fqdn":"sauron-staging.labsapis.com","domain":"labsapis.com","tld":"com"},"ip":{"addr":"104.18.24.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:52.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"labsapis.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 Aug 2025 19:00:46 GMT","end":"Thu, 13 Nov 2025 20:00:27 GMT"},"fingerprint":{"sha1":"CB:5D:FC:98:8E:28:34:74:BB:4E:DC:BE:F8:FC:85:A8:D6:F6:88:24","sha256":"E1:95:E9:53:4D:C8:8F:1D:6F:32:6B:DE:4D:FB:04:73:01:E5:06:1A:DA:51:11:ED:C2:76:38:BE:94:83:F8:E7"}}},"request":{"raw":"POST /sn HTTP/1.1\r\nHost: sauron-staging.labsapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2196\r\nOrigin: https://wormhole.lat\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 30\r\ncf-ray: 9845e50c48378be6-OSL\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7fb182ad57900f6f221bc075a7926530","sha1":"6c86324b25ef582d3224f7f7d820d85ef0dbf421","sha256":"23d04543d3fec9659be807b410754653814213d3c686f476e491bc7e107d2a78","sha512":"d3e7b6c0561532631f75401a1501a48053462daae77ff10eb34f4aa101e3e813ee5723aefbe3157130af5ccb240244dd2ac5a33b47ef18edc78d5c22e391ca43","ssdeep":"","tlshash":"4380000c0208030ab2a3030833080fb3c003823c820ba0a38ea080ca0b0330c2a83a2e","first_seen":"2025-07-14T20:08:16.872538Z","last_seen":"2025-11-30T01:40:42.314525Z","times_seen":3,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wormhole.lat/privacy-policy.txt?_rsc=1ld0r","fqdn":"wormhole.lat","domain":"wormhole.lat","tld":"lat"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wormhole.lat/","date":"2025-09-24T22:59:52.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wormhole.lat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Sep 2025 04:40:25 GMT","end":"Wed, 03 Dec 2025 05:37:52 GMT"},"fingerprint":{"sha1":"C1:92:E1:EF:4B:97:07:88:0D:C3:A2:DB:77:32:D5:74:B5:2F:77:AF","sha256":"56:68:A4:92:19:6F:36:57:64:E4:CB:A5:AD:5B:02:64:2E:9C:05:62:75:FF:13:31:33:69:78:B4:83:3F:2B:8F"}}},"request":{"raw":"GET /privacy-policy.txt?_rsc=1ld0r HTTP/1.1\r\nHost: wormhole.lat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wormhole.lat/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nsentry-trace: 9d9ebcbcb44c4260946ddf82fc362439-a99dcc54c2c08ec6-0\r\nbaggage: sentry-environment=unknown,sentry-release=3535c7c248834629cf3f47853f0d50b8f71a1035,sentry-public_key=f3f78a14fbc21484a7dab75ef25417e1,sentry-trace_id=9d9ebcbcb44c4260946ddf82fc362439,sentry-sampled=false,sentry-sample_rand=0.8134193113248636,sentry-sample_rate=0.5\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Sep 2025 22:59:52 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5AqufOej96aJacnI3MqyzrJzCPqKiZaa5thSHAuFG4hXPiCB8BlNQEpd1Bwi8cn9kKCmIydVbxmm%2B8nZH6eHEAf%2FhIT4xxcEFmAPtw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9845e50f0eb5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-08-05T16:15:32.98695Z","times_seen":146650,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"wormhole.lat","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}