{"report_id":"ef96a4d5-5c0a-4c5d-a50f-88d285c6a467","version":6,"status":"done","tags":[],"date":"2025-10-31T08:49:22Z","url":{"schema":"https","addr":"testwalllet.pages.dev","fqdn":"testwalllet.pages.dev","domain":"testwalllet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.245","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"testwalllet.pages.dev/","fqdn":"testwalllet.pages.dev","domain":"testwalllet.pages.dev","tld":"pages.dev"},"title":"USDC 转账示例（含连接钱包按钮）","dom":{"size":5043,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c8bf8404b0a82549a0c8081ba125d6f0","sha1":"f167cd42ca48dfd2dd4cfe53b1ed37065471a16e","sha256":"263d65dff041d73148307659cc1c342a1229dbff8e0df25b123c1c0f9a1b41ae","sha512":"e19d6df2fcd632f516fb4b72049f7380229544d2d53fa87879855a9dd518abab676bdd38c1b23551949d50610462477e532d7a97959a498294b4ffd6eb86be43","ssdeep":"96:EuLyIxGwjt4wFwymLnuyMfz+LSAAXfeAkT5cq5XMBSyPSmT7Lc0Zl29XaChweTfb:EuLyIxGIt4cLmLnue2lfePFcqGBSyPSl","tlshash":"aba1c693a1f22832417b096a3553d214b62491277844d898f7cd8eb4cf5be4fc8aba4d","dom_hash":"domhash1311c8940f10ac13bb65cb7550147b01","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"PGh0bWwgbGFuZz0iemgiPjxoZWFkPgogIDxtZXRhIGNoYXJzZXQ9InV0Zi04Ij4KICA8dGl0bGU+VVNEQyDovazotKbnpLrkvovvvIjlkKvov57mjqXpkrHljIXmjInpkq7vvIk8L3RpdGxlPgogIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsaW5pdGlhbC1zY2FsZT0xIj4KICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jZG4uanNkZWxpdnIubmV0L25wbS9ldGhlcnNANi43LjAvZGlzdC9ldGhlcnMudW1kLm1pbi5qcyI+PC9zY3JpcHQ+CiAgPHN0eWxlPgogICAgYm9keSB7IGZvbnQtZmFtaWx5OiAtYXBwbGUtc3lzdGVtLCBCbGlua01hY1N5c3RlbUZvbnQsICJTZWdvZSBVSSIsIFJvYm90bywgIkhlbHZldGljYSBOZXVlIiwgQXJpYWw7IHBhZGRpbmc6IDI4cHg7IH0KICAgIC5jYXJkIHsgYm9yZGVyOiAxcHggc29saWQgI2U2ZTZlNjsgcGFkZGluZzogMThweDsgYm9yZGVyLXJhZGl1czogOHB4OyBtYXgtd2lkdGg6NzIwcHg7IH0KICAgIGJ1dHRvbiB7IHBhZGRpbmc6IDEwcHggMTZweDsgYm9yZGVyLXJhZGl1czogNnB4OyBib3JkZXI6IG5vbmU7IGJhY2tncm91bmQ6IzI1NjNlYjsgY29sb3I6I2ZmZjsgY3Vyc29yOnBvaW50ZXI7IGZvbnQtc2l6ZToxNnB4OyB9CiAgICBidXR0b24uc2Vjb25kYXJ5IHsgYmFja2dyb3VuZDojNjQ3NDhiOyB9CiAgICBidXR0b246ZGlzYWJsZWQgeyBiYWNrZ3JvdW5kOiM5NGEzYjg7IGN1cnNvcjogbm90LWFsbG93ZWQ7IH0KICAgIHByZSB7IGJhY2tncm91bmQ6I2Y3ZjlmYzsgcGFkZGluZzoxMnB4OyBib3JkZXItcmFkaXVzOjZweDsgb3ZlcmZsb3c6YXV0bzsgfQogICAgLnNtYWxsIHsgY29sb3I6IzZiNzI4MDsgZm9udC1zaXplOjEzcHg7IH0KICAgICNhZGRyZXNzIHsgZm9udC13ZWlnaHQ6NjAwOyBjb2xvcjojMTZhMzRhOyB9CiAgPC9zdHlsZT4KPC9oZWFkPgo8Ym9keT4KICA8ZGl2IGNsYXNzPSJjYXJkIj4KICAgIDxoMj7wn5K4IOS4gOmUrui9rOi0piAyMCBVU0RD77yIQXJiaXRydW0gLyBCU0PvvIk8L2gyPgoKICAgIDxwPgogICAgICA8YnV0dG9uIGlkPSJjb25uZWN0QnRuIiBvbmNsaWNrPSJjb25uZWN0V2FsbGV0KCkiPvCflJcg6L+e5o6l6ZKx5YyFPC9idXR0b24+CiAgICAgIDxidXR0b24gY2xhc3M9InNlY29uZGFyeSIgaWQ9ImRpc2Nvbm5lY3RCdG4iIG9uY2xpY2s9ImRpc2Nvbm5lY3RXYWxsZXQoKSIgZGlzYWJsZWQ9IiI+4p2MIOaWreW8gOi/nuaOpTwvYnV0dG9uPgogICAgICA8YnI+PHNwYW4gY2xhc3M9InNtYWxsIj7lvZPliY3lnLDlnYA6IDxzcGFuIGlkPSJhZGRyZXNzIj7mnKrov57mjqU8L3NwYW4+PC9zcGFuPgogICAgPC9wPgoKICAgIDxwPgogICAgICA8bGFiZWw+5pS25qy+5Zyw5Z2A77yaPC9sYWJlbD48YnI+CiAgICAgIDxpbnB1dCBpZD0idG8iIHN0eWxlPSJ3aWR0aDoxMDAlIiB2YWx1ZT0iMHg0ZjgwNmYxZDEzODQyYWM3Y2Y4NjYxZTJhNmIwNmVjNTg1MDFhMGRhIj4KICAgIDwvcD4KCiAgICA8cD4KICAgICAgPGxhYmVsPuaVsOmHj++8iFVTREPvvInvvJo8L2xhYmVsPjxicj4KICAgICAgPGlucHV0IGlkPSJhbW91bnQiIHN0eWxlPSJ3aWR0aDoxMjBweCIgdmFsdWU9IjIwIj4KICAgIDwvcD4KCiAgICA8cD4KICAgICAgPGJ1dHRvbiBpZD0ic2VuZEJ0biIgb25jbGljaz0ic2VuZFVTREMoKSI+8J+agCDlj5HotbfovazotKY8L2J1dHRvbj4KICAgICAgPGJ1dHRvbiBpZD0ic3dpdGNoQnRuIiBvbmNsaWNrPSJzd2l0Y2hUb0JTQygpIiBzdHlsZT0ibWFyZ2luLWxlZnQ6OHB4Ij7liIfmjaLnpLrkvovliLAgQlNDICjlj6/pgIkpPC9idXR0b24+CiAgICA8L3A+CgogICAgPHN0cm9uZz7ovpPlh7ogLyDnirbmgIHvvJo8L3N0cm9uZz4KICAgIDxwcmUgaWQ9Im91dHB1dCI+5pyq5Y+R6LW35Lqk5piT44CCPC9wcmU+CiAgPC9kaXY+Cgo8c2NyaXB0Pgpjb25zdCBUT0tFTl9JTkZPID0gewogIGFyYml0cnVtOiB7CiAgICBVU0RDOiB7IGFkZHJlc3M6ICIweGFmODhkMDY1ZTc3YzhjQzIyMzkzMjdDNUVEYjNBNDMyMjY4ZTU4MzEiLCBkZWNpbWFsczogNiwgY2hhaW5JZDogNDIxNjEsIHJwY0hleDogIjB4IiArICg0MjE2MSkudG9TdHJpbmcoMTYpIH0KICB9LAogIGJzYzogewogICAgVVNEQzogeyBhZGRyZXNzOiAiMHg4YWM3NmE1MWNjOTUwZDk4MjJkNjhiODNmZTFhZDk3YjMyY2Q1ODBkIiwgZGVjaW1hbHM6IDE4LCBjaGFpbklkOiA1NiwgcnBjSGV4OiAiMHgiICsgKDU2KS50b1N0cmluZygxNikgfQogIH0KfTsKbGV0IE5FVFdPUksgPSAiYXJiaXRydW0iOwpsZXQgcHJvdmlkZXIsIHNpZ25lciwgY3VycmVudEFjY291bnQ7CgovLyDwn5SNIOaWsOWinuWFvOWuueaAp+ajgOa1i+WHveaVsApmdW5jdGlvbiBnZXRXYWxsZXRQcm92aWRlcigpIHsKICBpZiAod2luZG93Lm9reHdhbGxldCAmJiB3aW5kb3cub2t4d2FsbGV0LmV0aGVyZXVtKSB7CiAgICBjb25zb2xlLmxvZygiRGV0ZWN0ZWQgT0tYIFdhbGxldCIpOwogICAgcmV0dXJuIHdpbmRvdy5va3h3YWxsZXQuZXRoZXJldW07CiAgfQogIGlmICh3aW5kb3cub2t4d2FsbGV0KSB7CiAgICBjb25zb2xlLmxvZygiRGV0ZWN0ZWQgT0tYIFdhbGxldCAobGVnYWN5KSIpOwogICAgcmV0dXJuIHdpbmRvdy5va3h3YWxsZXQ7CiAgfQogIGlmICh3aW5kb3cuZXRoZXJldW0pIHsKICAgIGNvbnNvbGUubG9nKCJEZXRlY3RlZCBNZXRhTWFzayBvciBFVk0gd2FsbGV0Iik7CiAgICByZXR1cm4gd2luZG93LmV0aGVyZXVtOwogIH0KICByZXR1cm4gbnVsbDsKfQoKZnVuY3Rpb24gc2V0T3V0cHV0KG1zZyl7IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJvdXRwdXQiKS5pbm5lclRleHQgPSBtc2c7IH0KZnVuY3Rpb24gYXBwZW5kT3V0cHV0KG1zZyl7IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJvdXRwdXQiKS5pbm5lclRleHQgKz0gIlxuIiArIG1zZzsgfQpmdW5jdGlvbiB1cGRhdGVVSSgpewogIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJhZGRyZXNzIikuaW5uZXJUZXh0ID0gY3VycmVudEFjY291bnQgPyBjdXJyZW50QWNjb3VudCA6ICLmnKrov57mjqUiOwogIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJjb25uZWN0QnRuIikuZGlzYWJsZWQgPSAhIWN1cnJlbnRBY2NvdW50OwogIGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJkaXNjb25uZWN0QnRuIikuZGlzYWJsZWQgPSAhY3VycmVudEFjY291bnQ7Cn0KCmFzeW5jIGZ1bmN0aW9uIGNvbm5lY3RXYWxsZXQoKXsKICB0cnl7CiAgICBjb25zdCBpbmplY3RlZCA9IGdldFdhbGxldFByb3ZpZGVyKCk7CiAgICBpZighaW5qZWN0ZWQpIHRocm93IG5ldyBFcnJvcigi5pyq5qOA5rWL5Yiw6ZKx5YyF77yM6K+35a6J6KOFIE1ldGFNYXNrIOaIliBPS1gg6ZKx5YyF44CCIik7CgogICAgcHJvdmlkZXIgPSBuZXcgZXRoZXJzLkJyb3dzZXJQcm92aWRlcihpbmplY3RlZCk7CiAgICBjb25zdCBhY2NvdW50cyA9IGF3YWl0IHByb3ZpZGVyLnNlbmQoImV0aF9yZXF1ZXN0QWNjb3VudHMiLCBbXSk7CiAgICBjdXJyZW50QWNjb3VudCA9IGFjY291bnRzWzBdOwogICAgc2lnbmVyID0gYXdhaXQgcHJvdmlkZXIuZ2V0U2lnbmVyKCk7CiAgICB1cGRhdGVVSSgpOwogICAgc2V0T3V0cHV0KCLinIUg6ZKx5YyF5bey6L+e5o6lOiAiICsgY3VycmVudEFjY291bnQpOwogIH1jYXRjaChlKXsgc2V0T3V0cHV0KCLinYwg6L+e5o6l5aSx6LSlOiAiICsgZS5tZXNzYWdlKTsgfQp9CgpmdW5jdGlvbiBkaXNjb25uZWN0V2FsbGV0KCl7CiAgY3VycmVudEFjY291bnQgPSBudWxsOwogIHByb3ZpZGVyID0gbnVsbDsKICBzaWduZXIgPSBudWxsOwogIHVwZGF0ZVVJKCk7CiAgc2V0T3V0cHV0KCLwn5SMIOW3suaWreW8gOmSseWMhei/nuaOpeOAgiIpOwp9Cgphc3luYyBmdW5jdGlvbiBzZW5kVVNEQygpewogIGlmKCFzaWduZXIpIHJldHVybiBzZXRPdXRwdXQoIuivt+WFiOi/nuaOpemSseWMheOAgiIpOwogIHRyeXsKICAgIGNvbnN0IGluZm8gPSBUT0tFTl9JTkZPW05FVFdPUktdLlVTREM7CiAgICBjb25zdCByZWNpcGllbnQgPSBkb2N1bWVudC5nZXRFbGVtZW50QnlJZCgidG8iKS52YWx1ZS50cmltKCk7CiAgICBjb25zdCBhbW91bnRIdW1hbiA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJhbW91bnQiKS52YWx1ZS50cmltKCk7CiAgICBjb25zdCBuZXQgPSBhd2FpdCBwcm92aWRlci5nZXROZXR3b3JrKCk7CiAgICBpZihOdW1iZXIobmV0LmNoYWluSWQpIT09aW5mby5jaGFpbklkKXsKICAgICAgYXBwZW5kT3V0cHV0KGDlsJ3or5XliIfmjaLnvZHnu5zliLAgJHtORVRXT1JLfS4uLmApOwogICAgICBhd2FpdCBwcm92aWRlci5zZW5kKCJ3YWxsZXRfc3dpdGNoRXRoZXJldW1DaGFpbiIsIFt7Y2hhaW5JZDppbmZvLnJwY0hleH1dKTsKICAgIH0KICAgIGNvbnN0IHRva2VuID0gbmV3IGV0aGVycy5Db250cmFjdChpbmZvLmFkZHJlc3MsWyJmdW5jdGlvbiB0cmFuc2ZlcihhZGRyZXNzIHRvLHVpbnQyNTYgYW1vdW50KSByZXR1cm5zIChib29sKSJdLHNpZ25lcik7CiAgICBjb25zdCBhbW91bnQgPSBldGhlcnMucGFyc2VVbml0cyhhbW91bnRIdW1hbixpbmZvLmRlY2ltYWxzKTsKICAgIGNvbnN0IHR4ID0gYXdhaXQgdG9rZW4udHJhbnNmZXIocmVjaXBpZW50LGFtb3VudCk7CiAgICBzZXRPdXRwdXQoIuS6pOaYk+W3suWPkemAge+8jOetieW+heehruiupC4uLlxuVHhIYXNoOiAiK3R4Lmhhc2gpOwogICAgY29uc3QgcmNwdCA9IGF3YWl0IHR4LndhaXQoKTsKICAgIGFwcGVuZE91dHB1dChyY3B0LnN0YXR1cz09PTE/IuKchSDmiJDlip8hIOWMuuWdl+WPtzoiK3JjcHQuYmxvY2tOdW1iZXI6IuKaoO+4jyDlpLHotKXvvIzor7fmo4Dmn6XljLrlnZfmtY/op4jlmajjgIIiKTsKICB9Y2F0Y2goZSl7IHNldE91dHB1dCgi4p2MIOWPkemAgeWksei0pTogIitlLm1lc3NhZ2UpOyB9Cn0KCmZ1bmN0aW9uIHN3aXRjaFRvQlNDKCl7CiAgTkVUV09SSyA9IE5FVFdPUks9PT0iYnNjIj8iYXJiaXRydW0iOiJic2MiOwogIHNldE91dHB1dChg8J+UhCDlvZPliY3npLrkvovnvZHnu5zlt7LliIfmjaLkuLogJHtORVRXT1JLLnRvVXBwZXJDYXNlKCl9IOOAgmApOwp9Cjwvc2NyaXB0PgoKCjwvYm9keT48L2h0bWw+"}},"submit":{"url":{"schema":"https","addr":"testwalllet.pages.dev","fqdn":"testwalllet.pages.dev","domain":"testwalllet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.245","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-05T08:49:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-31T08:49:01Z","timestamp":1761900541,"ip_dst":{"addr":"172.66.45.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.19","port":54108,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-10-31T08:49:01.126866+0000\",\"flow_id\":1373803137323999,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":54108,\"dest_ip\":\"172.66.45.11\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"testwalllet.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":923,\"bytes_toclient\":3544,\"start\":\"2025-10-31T08:49:01.119775+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-26T22:16:47.70733Z","alert_count":0,"request_count":1,"received_data":479837,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"testwalllet.pages.dev","ip":{"addr":"172.66.45.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-10-31T08:49:22.983296Z","last_seen":"2025-10-31T08:49:22.983296Z","alert_count":0,"request_count":2,"received_data":11669,"sent_data":939,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-31T08:49:01Z","timestamp":1761900541,"ip_dst":{"addr":"172.66.45.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.19","port":54108,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-10-31T08:49:01.126866+0000\",\"flow_id\":1373803137323999,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":54108,\"dest_ip\":\"172.66.45.11\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"testwalllet.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":923,\"bytes_toclient\":3544,\"start\":\"2025-10-31T08:49:01.119775+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"testwalllet.pages.dev/","fqdn":"testwalllet.pages.dev","domain":"testwalllet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a7d43cda96d0c81af4d81c4aabf7e0c","sha1":"40e86394d5527d361a381ff8215152469a43582f","sha256":"89a5e892ae5f4cac455b83988ad3c08fc16a96f80c0ef98c071c53a4e1a0f202","sha512":"0320c6ee6fc7d146c902b03006fb71da06fae9d8c3cd3fbe82c5a9000712f97454acfa784542e481f2343d787b62fc0d17774d0e3c6544328abff15d4900a489","ssdeep":"","tlshash":"7d51639771f3283140bb19aa365b9624762492273c44c895b6cc8e365f17a4fc87aecc","size":3108,"data":"","first_seen":"2025-10-31T08:49:26.549134Z","last_seen":"2025-10-31T08:49:26.549134Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.7.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"043c24aff95a63f456ddebe340beec06","sha1":"a4b3b93c056280623f987bd3c4c7e2801cb9126f","sha256":"265af1ee2aed895f8f97d689f6ddda67888be8570ee9e622b526c94786ab7e12","sha512":"6cbc0baf797324dd5cbed6c2941321283c9a0f4ba87169a9862a8ef2fd30dffcff5ea530ce4334d2066aec15777504bd990bb4adaad9313b3195c9c81eccc494","ssdeep":"12288:aSHQpYX+NZ55NVxXufEgP981ffttg9Pv12NzevTp:aSHJX+NZ5jXufEzbGYNzerp","tlshash":"a4a44dd132e3a4b187d618e128650902f638f952705d40ecf6acd9e23e7bd89957bf38","size":479045,"data":"","first_seen":"2025-08-31T15:37:24.112579Z","last_seen":"2026-07-30T17:22:43.553782Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@6.7.0/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://testwalllet.pages.dev/","date":"2025-10-31T08:49:01.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/ethers@6.7.0/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testwalllet.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 6.7.0\r\nx-jsd-version-type: version\r\netag: W/\"74f45-pLO5PAVigGI/mHvTxMfigBy5Em8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 268535\r\ndate: Fri, 31 Oct 2025 08:49:01 GMT\r\nx-served-by: cache-fra-eddf8230169-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 147037\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479045,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"043c24aff95a63f456ddebe340beec06","sha1":"a4b3b93c056280623f987bd3c4c7e2801cb9126f","sha256":"265af1ee2aed895f8f97d689f6ddda67888be8570ee9e622b526c94786ab7e12","sha512":"6cbc0baf797324dd5cbed6c2941321283c9a0f4ba87169a9862a8ef2fd30dffcff5ea530ce4334d2066aec15777504bd990bb4adaad9313b3195c9c81eccc494","ssdeep":"12288:aSHQpYX+NZ55NVxXufEgP981ffttg9Pv12NzevTp:aSHJX+NZ5jXufEzbGYNzerp","tlshash":"a4a44dd132e3a4b187d618e128650902f638f952705d40ecf6acd9e23e7bd89957bf38","first_seen":"2025-08-31T15:37:24.112579Z","last_seen":"2026-07-30T17:22:43.553782Z","times_seen":147,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":28,"dns":1,"connect":13,"send":0,"wait":14,"receive":33,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testwalllet.pages.dev/favicon.ico","fqdn":"testwalllet.pages.dev","domain":"testwalllet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://testwalllet.pages.dev/","date":"2025-10-31T08:49:02.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testwalllet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 07:30:13 GMT","end":"Thu, 29 Jan 2026 08:27:44 GMT"},"fingerprint":{"sha1":"B7:66:0A:D8:2D:CA:56:16:A4:83:4E:E1:94:AC:78:74:C3:AB:A5:D2","sha256":"2A:9A:D8:E1:23:21:D8:4D:FE:5E:21:6C:62:51:45:31:51:A4:A1:1C:F6:6A:A4:69:45:9A:67:8B:44:9D:67:90"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: testwalllet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://testwalllet.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 31 Oct 2025 08:49:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hShPjMHv9KZz9IBKyIW9u2KFDdHaTxB9sgskWLorx5pOoVTBrGUeJ4mjQT6HZ1fausJyOxoWMXwwo80euK%2Fk6%2B%2F52dPdgz0HmwjQpUq9ZfjN06yn5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1898354e59c027d8f027c843df0ab8fa\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9971e5960a3123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5069,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d23aa700e78ab98e79ca3d171cc1619a","sha1":"4324d3fc0c322b4f9d0aeb5e1ef862a498595b7c","sha256":"f65b6c82cb08d87d06a71c860b80f29f48ddedeb93cc37a42b2252d2dee150bd","sha512":"f5f6c17e76ff0de5656a04a630bfa5695c17829bd6ee0eb3f689ef1716b6c8d21c2f033eb703965639c2edff4b89b2d5784a973c77fdee19e49fd76444c6f93f","ssdeep":"96:pupgyIxGwjt4wFwymLnuyMfI+LSFAXpkkT5cq5XMBSyPSmT7Lc0Zl29XaChweTff:pupgyIxGIt4cLmLnu32KpDFcqGBSyPSJ","tlshash":"36a1d79361f26832817b096a3553d215b62091277844d898b7cd8eb4cf4bf4fc8bba8d","first_seen":"2025-10-31T08:49:26.546926Z","last_seen":"2025-10-31T08:49:26.546926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"testwalllet.pages.dev/","fqdn":"testwalllet.pages.dev","domain":"testwalllet.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-31T08:49:01.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"testwalllet.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 07:30:13 GMT","end":"Thu, 29 Jan 2026 08:27:44 GMT"},"fingerprint":{"sha1":"B7:66:0A:D8:2D:CA:56:16:A4:83:4E:E1:94:AC:78:74:C3:AB:A5:D2","sha256":"2A:9A:D8:E1:23:21:D8:4D:FE:5E:21:6C:62:51:45:31:51:A4:A1:1C:F6:6A:A4:69:45:9A:67:8B:44:9D:67:90"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: testwalllet.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 08:49:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DfC8xvbzVbdUM0eqefWXHm8rjYRmltARiNavrWHhlL6Q4yTg%2FZXxvuBoOjebq8VJ2YUGP7qGuh6t0QC7qjtNM8awWCQEzMAQPYwE6d7imNcgL18%3D\"}]}\r\netag: W/\"1898354e59c027d8f027c843df0ab8fa\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9971e58e19dfb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":5069,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d23aa700e78ab98e79ca3d171cc1619a","sha1":"4324d3fc0c322b4f9d0aeb5e1ef862a498595b7c","sha256":"f65b6c82cb08d87d06a71c860b80f29f48ddedeb93cc37a42b2252d2dee150bd","sha512":"f5f6c17e76ff0de5656a04a630bfa5695c17829bd6ee0eb3f689ef1716b6c8d21c2f033eb703965639c2edff4b89b2d5784a973c77fdee19e49fd76444c6f93f","ssdeep":"96:pupgyIxGwjt4wFwymLnuyMfI+LSFAXpkkT5cq5XMBSyPSmT7Lc0Zl29XaChweTff:pupgyIxGIt4cLmLnu32KpDFcqGBSyPSJ","tlshash":"36a1d79361f26832817b096a3553d215b62091277844d898b7cd8eb4cf4bf4fc8bba8d","first_seen":"2025-10-31T08:49:26.546926Z","last_seen":"2025-10-31T08:49:26.546926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":22,"dns":7,"connect":1,"send":0,"wait":56,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}