{"report_id":"f34cae5c-96b2-4c14-937e-fe8eb2d06b8b","version":6,"status":"done","tags":[],"date":"2026-04-08T12:11:29Z","url":{"schema":"http","addr":"espresso.builders","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"espresso.builders/","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"title":"Espresso Claim Portal","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"espresso.builders","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-13T12:11:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"espresso.builders","ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-08T12:11:34.709762Z","last_seen":"2026-04-08T12:11:34.709762Z","alert_count":46,"request_count":46,"received_data":6342186,"sent_data":21328,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-05T22:35:26.697622Z","alert_count":0,"request_count":1,"received_data":164713,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-05T22:24:03.651898Z","alert_count":0,"request_count":1,"received_data":471029,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","ip":{"addr":"16.15.207.154","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-12-31T12:33:52.777756Z","last_seen":"2026-02-12T20:37:38.413763Z","alert_count":0,"request_count":1,"received_data":57085,"sent_data":518,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"assets.unicorn.studio","ip":{"addr":"34.120.54.136","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-08-17","domain_rank":3759026,"first_seen":"2024-10-30T11:09:32Z","last_seen":"2026-04-06T15:13:29.695762Z","alert_count":0,"request_count":1,"received_data":77121,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"magna-public-assets-prod.s3.amazonaws.com","ip":{"addr":"3.5.30.167","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":0,"first_seen":"2025-12-28T18:47:20.473023Z","last_seen":"2026-02-11T03:00:08.681455Z","alert_count":0,"request_count":3,"received_data":16980,"sent_data":1458,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LBSJK40LXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"196ec2472b318285c4bd4562b1bfad37","sha1":"704f9192a04b9172a0f06fa67597234b7ce26363","sha256":"b91e26d5c7da9cafc4d383f2e93a87a836f51468a9a4cd906fbe08986500bdda","sha512":"c543e707c800af8a83748fb159ca5636c999815d2afe740d72997e651373a203a070b01060f1e34398037a6ebd9fcee2aecc3e1da4e3afaaec8e844543c47cd5","ssdeep":"6144:HBcujG8PtgiI7WdHX4zpWbg8OUa3Ub9wbo9TiI0JlwYrS9S:O8Ptgj+HX4zpWc87IlN","tlshash":"b5a40aceb3d674625396f478903f018ba57b28e2b44cc8aab189ccd42e7465a4177f7c","size":470425,"data":"","first_seen":"2026-04-08T12:11:42.224969Z","last_seen":"2026-04-08T12:13:16.925892Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"31c5ca8344606c644357cc7bc5fcb4f2","sha1":"15e7956f4907328c3862fa720a83785f0ed12b87","sha256":"74dcb4cb8f2d15ddd47a1fa2cdb56cb103d54874a465c7b55698ab4f6c1cd63e","sha512":"d85c94991e10b65bb479d56f3d45b638f0f1e41a162ca309960ef86dcd5b5336ea6100adb6d2e72ef674722cf05978893d4e9c682b133f299d9eb829ac6123ff","ssdeep":"","tlshash":"78f04c0f859102324dfba1692e57a21170b6a0db294a4a0839ad411c7faec2b4785bc0","size":592,"data":"","first_seen":"2025-03-03T03:45:08.736625Z","last_seen":"2026-04-22T07:23:15.789643Z","times_seen":6747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/index-BEXlzE-H.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9129dbaf61b84d21e34a17c036da8e64","sha1":"1b11ab1b76fd311743b4effeb413a60219e098d6","sha256":"c2370c40e8835981e50a8be206b213e8f43dbc88b04facb3b6a6479228f09737","sha512":"edf2b265b57e5161e2d079d59cdbe0a02974e97458d8b98c41ba0baf23ac11e4b0b7f5a2833ed056dc7adeff57ae0af030fb38cf89f396989a7c2d4d4c06f082","ssdeep":"","tlshash":"8271228db7c4f04249c6a960037ba317b2b9377328bec2a193ee99b012675594227f74","size":3680,"data":"","first_seen":"2026-04-08T12:11:42.233211Z","last_seen":"2026-04-08T12:13:16.927661Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/wei-D7GVSARS.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e065176194127ef3104fbc14e1bd3b00","sha1":"039b4c635defe3279321deab3fb61f072e7d065f","sha256":"c3902c83d4f8bc61033b89f57529565f14d42ea0f041b9fdb5b9d0fe5c9475f4","sha512":"1d9acde4385221d0bd76124b774e59d581c7a9e8eaa324a63bc40d745f745db6ffb406267281105ecb9904d77d0e98a3b2ecf72ac19019f2515952270c534c36","ssdeep":"768:c694VJ5YH/os7Dwz5yuLKkyp0rxY5T0ztsZ:c69cXQos7UEuzi0Gku","tlshash":"1fe2c5e972a2f18663e734f201fb9446f13a7d44990d05b5f2088af53cb1686b32af75","size":32145,"data":"","first_seen":"2026-02-12T20:37:44.896165Z","last_seen":"2026-04-08T12:13:16.924687Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/home.page-CQ4lc89L.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a6108f031eda298eba72ce55b6e1dcde","sha1":"b5c90b714ccf9855148afd26f5c8cc3aa9a0911a","sha256":"9c847c97f5284d227c24fedacc0b9f56a64d30a5a42b26b2f4f9923c53ca9ed3","sha512":"31b9441e026eeb2a0db003ecfab380941bd3e71d53fc8d9098129cbbfc1cdab3b1645100a488e9d5e83cbcf7014a89e41a9e07dcb51ddeff5303c6e7778c42db","ssdeep":"384:jK2ny1HXl1VQ5iAkPVPlA75BR6ND0+PfNzcmD+KxuLhOaTI:O2ny1HXLVkiAkPVPlKR6NDBWKxuLhOa8","tlshash":"25522c4ce296a57ee6c345993577d128b3370668b27a8055d33f54360270dc2ba33bea","size":13771,"data":"","first_seen":"2026-04-08T12:11:42.29679Z","last_seen":"2026-04-08T12:13:16.930963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"71dfe42af37cec6e1b8a11bd0a94d293","sha1":"2e30765cce85dc76c46065bc9cd4d5da92f173e3","sha256":"d3fbc2d1399dbbfdc68499799ef4a79ed43b2b8096f14395a2aea2040de6ebd2","sha512":"1f3cdf0a2f826385c2cd428986a9c00ffdd0a995e25a5fd76f74d2db5f5f607b92dc518eba0c04d32995ce8d585e4c98bee88cb9c6c16fc9ef229f659668556c","ssdeep":"","tlshash":"50f09738182a0bed4bd326dc9603bb1a331842836404a531d9eccab834c34fa6033cea","size":472,"data":"","first_seen":"2025-12-07T20:46:41.259343Z","last_seen":"2026-04-17T14:54:37.684439Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c209ae7e667ef953a67fd9e02e026122","sha1":"263c559b9b3d0aa0da8a7ea36790983dc7a0821f","sha256":"1f5ce5ae5b81eeeb68a411dc27cbdeadab04eecff9fca4447d20755e6b770e46","sha512":"6daddffb9e9d093649df98bcb5d7737e9fa7687dac1308a4710689c88076d5dc81b7de5bbfe7abf7a3910d9f53c331207b153b9f582c2eafa4717e553cc07f58","ssdeep":"","tlshash":"2571a791d7f5e09f6b1803b6ff9a14e79432f4e641140b9de55e3361200ee23e91f554","size":3493,"data":"","first_seen":"2025-04-09T07:08:13.379631Z","last_seen":"2026-04-08T12:13:16.922421Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/injectedWallet-H7LYKTQS-CAHJNGc-.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d15e27dd16cca201d14667c3af8cb320","sha1":"a2a412c0b28c967d51856bd18a3f5b1a039cbf94","sha256":"db58171c5bda95e8016d892b4692c77c4f7644fe1fd3ee9b6ac1f561e867aec0","sha512":"20a745ee7cfac75a1160058128403ca4639ca13460191bceb426a295e6ad64e72d63343c73565dff68a719fb7590fe12853a1b213c9a1e0d33a24d2e0937225a","ssdeep":"","tlshash":"fc01f476d22cd45dc91dc36cfd6e68f3234961e6611f4328755c0f2ea2194cbec1e264","size":685,"data":"","first_seen":"2025-04-01T04:17:39.059491Z","last_seen":"2026-04-17T09:09:52.492445Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/okxWallet-GJMKZIND-Ctk5JsJ6.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4c59e31efbcd88c687fc0a977d992ca","sha1":"486cb19e8e6498704d418690e59128ebf9a02c6e","sha256":"92b49f1aed987eee109fd98567002c0420d85c602003e003b0f2ad3513c41f15","sha512":"01d94e855345137a19596757a9b585c74536b3c847f6c34ce07e2890fc4536375a159870aa1c88ff8a9b24f94c3cfee0eac0998d73170b52c9887080dff1ec54","ssdeep":"","tlshash":"8e115b9600ad4ddecc5da1eb937ca4aa573d2df8763881352f4c8b5020aacf8f44ad5c","size":898,"data":"","first_seen":"2025-04-09T07:08:13.428855Z","last_seen":"2026-04-10T09:11:01.53738Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/chunk-EPOLDU6W-BseXRFR5.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5f1edf157f7dfeac3c406bfdb21f9c58","sha1":"4e876bd9b8b0c7c69de2432fb0a5a4ecbd7588e2","sha256":"1b08a20c9e6d9c9417540ba05ba021045b98927957dd906be82aaa9650e6f761","sha512":"6fddaa4098338aa745f95b977fabd0d9043eb88f01603d4dcca3dce351ad91aeff185594646b41d9ae8f44a4614487ea9ff99886e85a47319d23092104b4ad83","ssdeep":"1536:YZe4IJi0G4pPj0hsIkZxr5bRRvMViduOZgVI/rYWYYKyWXMF:Ge4IoMaUZxr/RvMVid1GVI/rYWYYLWI","tlshash":"cac33bf9729270794bef13f180bb0015b3b92ca9246d8015b2acc99e35b5c4c967bf79","size":125122,"data":"","first_seen":"2026-04-08T12:11:42.20458Z","last_seen":"2026-04-08T12:13:16.906699Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"694e1f6dd72af86c8c477f9608975a74","sha1":"3b0def5280cfb0e2cb76b3a039bf7e26986a7f92","sha256":"4a238a92bd23caf58037a8423adebebfc6a84b6762f033bc7e6ebf8741ca1e41","sha512":"7290b10e41ef6e0d7bc27cb24d75327c1493f0d2ae961fb89bf1bb387659a9bc14681b66dbe754722c5f2ea5a98b6cc76c2ca9cde9406de0062262f6f056003f","ssdeep":"","tlshash":"64f022a1a2dcb411186ad336513c5ad4bcd7128cae2e621c32801f1af82009a98c8a79","size":598,"data":"","first_seen":"2024-12-25T05:30:42.515918Z","last_seen":"2026-04-18T12:51:34.188672Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/rainbowWallet-2SR6TVBF-kimcGeuf.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a0e974aa17cd852cfd0a349aa6cde2a","sha1":"3e83142c11e9b7a57432123b72457ff579f8bcb8","sha256":"0813cf58d2da41c33e74c0fb7e5a9671020dc397611becaacd42e1f6ae5b30a4","sha512":"28eac8d72b65f6e1cd4f0ac75cfe58a515be407e04b12aea7a90a8056018133d9f4de319843eb5238f465a23d817971dbd945e4fdbfc59fca26b823efd59a601","ssdeep":"","tlshash":"c071ca958a3dac3be52dc18cee411420710daabfdc894a5272639fef9d784c6ac4c660","size":3646,"data":"","first_seen":"2024-12-25T05:30:42.549882Z","last_seen":"2026-04-18T12:51:34.20253Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a8359b297686a38136a26a10311301","sha1":"5d995f91f19bdd38e876708ea756b76ad53ce55c","sha256":"ff6da22ac4da1356c60264b8a4ca0e3bf79b026e16220dfac81cf1058e40160d","sha512":"28ffda0d4b0fcf35ec80c90c3bfc90103685a5220858159a9016588568e808550fb18e8b2d8ee45f72817087723c842ad4f3872adf933ef1da6267d6cef4fdbb","ssdeep":"","tlshash":"1a3115ef6be412f4d017e3a3d01590267ddb24ba7729ef44421b4ae0ae0149d64c8d78","size":1513,"data":"","first_seen":"2024-12-25T05:30:42.591141Z","last_seen":"2026-04-18T12:51:34.184449Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/index.es-DHdwYWce.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0af0c7fab2ad547fefd0f0a450547a7e","sha1":"64d59c21d8bd3a1bbbb113aa4bd9ad2c34a7c710","sha256":"bba05f2a6903fa3bf862c23b17644c36611148e4e7b4321e3744b18f8e82e34d","sha512":"3464d64c18b60d3a9ba1f91b28f1ccb4f82b1173db8e5a68be9732909587daa292c70b4e79acab841319295daa4cc9592b36b49db215377c175947e060f6ac3f","ssdeep":"6144:QKozfXuuo9pepoE4y4++7o8IR4zHVwSbZnECpGNp6NokV:QRUnep4y4+kO4pwSbZnq6NXV","tlshash":"0c742b8473b6a47603ea95d9a8352201f23458683049d46cffbc6defae844854b3ff76","size":346055,"data":"","first_seen":"2026-04-08T12:11:42.300475Z","last_seen":"2026-04-08T12:13:16.904792Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3e3e350f78cf22bd7b335d70b41a58a","sha1":"cce22220b6a8dff76692755cc45439b4ec474a4d","sha256":"ee6bb81f4e9fc030a39a7c71affc4d1f2b900baa4b4c7af83361388d7c39599b","sha512":"15b6cbf8bd67e82a4952004138ebc95c44e4d373317826f1560eeec13416cc1d6a38d834609ef4b713e7a9c92d1b1bbf84de08e2e4061ed3d1e3891982c25b0a","ssdeep":"","tlshash":"3f90025ff2302063a756122b166f15456421626565550869123830eb4955148474265c","size":57,"data":"","first_seen":"2025-06-30T14:23:19.448274Z","last_seen":"2026-04-22T15:18:48.419745Z","times_seen":39919,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8df1050a92af1815b1c70002a2d24102","sha1":"c173bdca8efcd4b95b6c84c5b1b2a213c818a9fb","sha256":"7db555e8a74edb8f28a4727a2ca8091681e010750b6cb60f5289e8e33d4591f4","sha512":"d8bc497ba81090544eacbd09765ef977edc5e5f47e774e1e79fa4fa29ac9e87b23c9511bf2da73a8cbfcf21ebe21be4d17013ffae1fca967e44c0b945c075d26","ssdeep":"384:/fL31izp42yBEPXLIdFchIU2pbcKZ00AKlvGWuP:/fL3RdFFA8J/li","tlshash":"1282f9aa8900f2721b721fe4233a3ef962ca62da0769145c400dc59916405bfef7f5df","size":17782,"data":"","first_seen":"2026-04-08T12:11:42.30796Z","last_seen":"2026-04-08T12:13:16.933048Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/x.icon-CSJpY8Ci.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8a9cc5282f4a44c6c2bec0bb9fc4b171","sha1":"69dedd1d1cba4b4b7a523a2feb7e32cb91760f10","sha256":"3df8a9dc25782bb35665f53d0098e3278e3be52cced0214f360e577b84a6cb2c","sha512":"ba653a9ab91f1e0b1158f8f1b387c883954bed7c0c0abd30674071bdf73e91a1d4f663256d9e92d1b3cd62e549451aae10aa2cf30361a7eaefa50d11b8dcedda","ssdeep":"","tlshash":"eaf097ff83c1a094485d5f7629b23c251477e5fc93a405a0c9444951ad290f2731ee82","size":458,"data":"","first_seen":"2026-04-08T12:11:42.270038Z","last_seen":"2026-04-08T12:13:16.903665Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/portal-config.context-DngNjrFl.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b12ce6156cf6dedbe0536c46b8df107b","sha1":"4465d4a3f5e4caf7c27c64d6303d69d241ab0c48","sha256":"8800a95bda6985619e76c1a7fc3dd58aff7ea0dcec615d76bdb6c5e95319149b","sha512":"84db024bbafe1de521ce122eb871a16e19fc99114d97ad794afdd4fc63453f2b7b319ab5e213c964e7e4d10352eb20a5b530d8679558837947b872dbe21e27e9","ssdeep":"","tlshash":"a7e0689b6080f67266034de118204534d733286a31258b70c018891abac00e2263f8d2","size":351,"data":"","first_seen":"2026-04-08T12:11:42.281459Z","last_seen":"2026-04-08T12:13:16.920655Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/warning.icon-D42EtpQW.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"056b67f2821776310782e05cac2b35a1","sha1":"5a48a8602fa800a194de6b21ab3e23ecb8de51a4","sha256":"b0a711748f2a8a3fa3c83818c24c34ca1483e3d07b667ca103fd225816e2f460","sha512":"8648183cd30aa6d2eba731d3fdd7eb254bf949b8ecdf62f3b222acbb31c1db609cd7df65001017eee9c463d51cd1e1df142f25962436d576963aa3c041b81250","ssdeep":"","tlshash":"25f0fe76e3f429b87505cea8634f39363177a4a8b7014641a35e580463a00c5b5ae9d2","size":655,"data":"","first_seen":"2026-04-08T12:11:42.298975Z","last_seen":"2026-04-08T12:13:16.916266Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/index-SGWvdP6e.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"282cfde38db6c7c9cd0ef1f08bd7a99f","sha1":"485f15ffc5dc870b0f87a33bbace18d075b890ed","sha256":"a6397c4621d4cae7e0c407f7e1f34ecedac393da26d0a3a0ea1c7e79d12c6449","sha512":"b4e6b2f7deb609d1b8c1d588d6a60c05fca03b5eaaa6fbd4a1c0c3824656e24fd8c04aca28b8a7dabab5f6cadf49ef6b9e5f9348210ed309d927a9328d177b42","ssdeep":"192:q9fz4XaINw0gHL3lnec54Zd840mVA/mUwj0ZwFdS2:+fijw0grlne/44FAuUOFQ2","tlshash":"30222fd97697f0a183a2687480af140bf23cbc68944ed164e5e4e1d9bcbd159d233e3a","size":10249,"data":"","first_seen":"2026-04-08T12:11:42.180614Z","last_seen":"2026-04-08T12:13:16.925287Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/config-Nm9I65CH.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"fd5bddc7a13a2b67c031704794b582cb","sha1":"5b6d6d6a49fc659675b2b0bbba2b05465a588001","sha256":"cb8ad87afb8501ba09b2ddb8c836a1a0ef77e627c1969cf8705fc0040fd92253","sha512":"033e374c21bda7c61fe7eef2fa2de5f9b6d65a53526a7f953a7e3ed5ae62ce1bb0a47f7053759885579c16efa0743c0c4373baf80a938699f9c1d0af90a23acd","ssdeep":"768:0KfTpTKhov8i1Mj0T29B/Iv4Gz5Fy9Mam/Lj7CW4k/fE+Rikfs9GVG8G8kzlHMGQ:55a0T2TQCh9Gg8uzlHfv2d1hx","tlshash":"4523a7ca7186b2162be2d1a4483f4015e2396954780e846cb5bdddd3bd72c8ee17bf38","size":47296,"data":"","first_seen":"2026-04-08T12:11:42.289051Z","last_seen":"2026-04-08T12:13:16.909833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/assets-NU2OP443-COMs-Mo6.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"33ae24799663e13f83cee5987fa8f728","sha1":"2309fcbf480ac447c060a427f2a6cd24974dfa30","sha256":"aac5c0d81b97b3892fafba21cdf014c77be385f12d7b1f525dc3f79d0cb2ede5","sha512":"f576ef24f5393cb38276b01c0aaa4d41c56a04d9bd0b82c8e04202949fe343407f12514560fe743af27fbff37a401bcff5c38a25ed66cecdd581c265ab9ad58d","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVEK:LOCO11D2qYzdyzK","tlshash":"2c82fd9b8728d94e6e6b8ff8ffdcb4d9332c30e5222e04d4115e616291a359feb41d81","size":17965,"data":"","first_seen":"2024-12-25T05:30:42.584192Z","last_seen":"2026-04-18T12:51:34.198627Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/en_US-762U7H2X-ioVsSyfE.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d921f53bf3db339d77e0bd39ef3b8bb0","sha1":"39f9c74716f59366969fc794d8d03dd8d7c69097","sha256":"b389e092208ed12fac479c8c30ba2df02a70c0160925361cfa1d87d3b4fef096","sha512":"8fa88284ec1b444448fa22e3857a0ef1fc44ab46ddad803fbcef93eebe04eae61caaad08792b8bfb21a397be6fd635ca0aa20dd8e4a1b4403f3b80e3ad0d8009","ssdeep":"12288:Ld/7EcwzWIKWTHoX2f+ozuNqxl+SNa45IVWdyU:BzEfzWIKYIXQ2qx8SR0U","tlshash":"fdc46c44b2a0b565439740e914eb1000f1346e9db50c58a876ecd9be3fbaec885fbf6d","size":562283,"data":"","first_seen":"2026-04-08T12:11:42.178247Z","last_seen":"2026-04-08T12:13:16.927012Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/roninWallet-SAB5ESVK-fW2QoTxP.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68f97b0ae9e3156ac22560e59bd69d4e","sha1":"9809da0a9ae9c30ab42202c55b07eef3acd8d1fb","sha256":"8959d6d3640f29ffad2fcde3305042bd42df292e2059935d19d5227dbe809290","sha512":"d9d8677af4e67b9e869da5a01e783a25305798a87461bc1915b6f9c200ec06c5b44b79758c89ecfbc6324647893faa387e3f594b71729f0d7beb1a457370cf2b","ssdeep":"","tlshash":"36119ce5910889aec51fc22cdd109462231f24e67acac697a7fd4f393147443fc07a59","size":975,"data":"","first_seen":"2025-12-31T12:33:59.906467Z","last_seen":"2026-04-08T12:13:16.914673Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/login-CWDTIDNK-DhDUYE4b.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"baa5f0f7116deb709bd4b3a54c31eaff","sha1":"10c4efb11b9c1bcdd87aca0c0443f636c8d29b39","sha256":"63a8daf7039c537fe8d7ff88c50a6b8022e74f447d5df3ffcd6a515723252c33","sha512":"8d534b9541eb5d33576b4a5a2dbd28aadc57c01fc91ea3644bcfb13ad76470288c9ac8228a1fc8d6f30ca5873abb0c3b20136d5377bdb9923c3ff6665542b4bc","ssdeep":"192:dyAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7MV:EiN2Qjw+FWjARaidSpx7MV","tlshash":"261283ea5768627ed89bce6cdf668840130d70fd35b8c8e49a9ecf686057c89fd87010","size":9275,"data":"","first_seen":"2024-12-25T05:30:42.593071Z","last_seen":"2026-04-18T12:51:34.197248Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"00933d3d76fccf8f1d330b001b6dc118","sha1":"72a3f9f693a7d05bb6f1b38fd381a0f4e8bb5c7a","sha256":"4009527b06902e2fcd3c2ce78c0652caf43bda1783d1577198d0c3919782c607","sha512":"8fce1ced1efcaf7f17f0fbc71664f0ca59f5f7bddc682fdbc8b9ef3862def740a845bc3cd5cc3926c09b98782296d14c9b38d50b2dd6cb53b296ec76ba558602","ssdeep":"","tlshash":"090156a9f328199a66d92fbfa06a570c7460603e380600319507edfa1700de021cbd8e","size":845,"data":"","first_seen":"2025-08-20T23:30:20.291724Z","last_seen":"2026-04-22T15:18:48.423094Z","times_seen":30341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/page-meta.component-NrTFCvUJ.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"39a71506d268563490540e3cb0b113e2","sha1":"b4e8fc049cf47278f65b55652e8e0bdcc8f80163","sha256":"58b0e16e1c260b61c676623b0f06d416c8859728b0cb8ac774448812062eaf71","sha512":"60cb7d9cdfedb22e00ccc78992a5709b43277b44909e1adac937b0b87b7bda83c3de0d4e33c82063d12e636ce6954840ef9513d6681bef6ebc7be9b5c7407eaa","ssdeep":"","tlshash":"05018969a910685b176ace010c5af24db07687bfc038c9a1b5a448390ff1fe7c07277d","size":803,"data":"","first_seen":"2026-04-08T12:11:42.297907Z","last_seen":"2026-04-08T12:13:16.90732Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/use-on-connect.hook-BB24Jxr_.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b502d441ce759e7334b1797026811ecd","sha1":"d6c194acaa9d12e2f48f72cdc8368d2d12b97df9","sha256":"76397576d426828df6ed921f2848e2dfad391ed13b708237cd2aebf0e9685855","sha512":"72e2a656e0231732c8acf264f464063c0e27b026b1a18c5481c2b0b240f6fa1433b689e7f2c1c9c1216867bbc02b02ad79fd4038cd60542df3f00740177444fc","ssdeep":"","tlshash":"3ff0d39590c5c2f8931bdce5c439a77e0a311ad87145c6c8dcae4d275691dc0801ea07","size":654,"data":"","first_seen":"2026-04-08T12:11:42.273854Z","last_seen":"2026-04-08T12:13:16.921273Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/user.context-D2-hjU9_.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"02a2a4d231da07ac1849fd31aa4bda77","sha1":"f886816f6431cf57e1947632b3b3b86a3ff4d2dd","sha256":"60b86ee8cad00d15255121f1829da6514c799aa2e56dc1e759d0c1e6ca6da6be","sha512":"eae6986ac890ca0e3ebf64edb28a0a72a72c1051f7a16b793b4095c04e87095c81727110b44b331112f264e29239d790588c54be3dfd19a85cc1a0a4ff7e700f","ssdeep":"384:MPQJMJF7sMqTKP/bSZu/dcLgl1lkkObqtrC8CmUZr8sEo2M48/DFYREV7J/RC5AU:MPQJMJFITKP/b24dcC1lkMtrC8CBl8uM","tlshash":"6fb2f75831d9e0b142e750a4947f620bf17819a0e05ca4a4e2a9fdf439f8d97817bf36","size":23804,"data":"","first_seen":"2026-04-08T12:11:42.176223Z","last_seen":"2026-04-08T12:13:16.908351Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/root-CLr5hmLV.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f046436dacea521b5d95eafa27b39e4a","sha1":"65c500d6b844731a4241803257b6975f94a088cf","sha256":"2c4f0582b0544246a5ed4115da50584cea934f9f4f7d58baab18e7d371862adb","sha512":"9169fbe0f590c61f002b3efae6756cb98a09fde99f67368f245e821ea43dca7d38a4b6abfb329be89afc759ab9dbc8be38d674475236bc76b6833e19c51357f8","ssdeep":"49152:0HYfpqsZn1soO1fZbVviL6ilOtxaQX7h68a6hIi0JP9P6nSeZmG7ufGGqNycgAdv:bfpqkNAVByEpyH2nX0RNm","tlshash":"b0268dd4336ab475079626d4047b0041f138ac46a04c809afeec9bfb6ef949a857bf7d","size":4471052,"data":"","first_seen":"2026-04-08T12:11:42.310197Z","last_seen":"2026-04-08T12:13:16.934591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/metaMaskWallet-YFHEHW7V-BggUDXad.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9faabc0cac059efd75278832f35fba0","sha1":"75a665ec82b0dd2ccab406db25ed49f69ba40931","sha256":"748a6c743322ec0b319bf361b84e929e5099721824636f5a4befd8e0ff8ab826","sha512":"7ab0d0071f01aad00b47c9fd55ef2748c61eeeb46b3abfb66afdae61970d62a77a0f643be0c95cab9a778d28a816b75fbb5c4667be6b794d97cec3937d0b5eec","ssdeep":"192:M1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXV:my933BU+V","tlshash":"17d15deb67488cbcb8271f24e34a3271613836d7692ee6594c738a79090519dbb7fcc4","size":6516,"data":"","first_seen":"2024-12-25T05:30:42.586528Z","last_seen":"2026-04-18T12:51:34.183552Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/background-music.context-zHWXBYPr.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0316b03715dd4be7a8d874d622290042","sha1":"cc8d95d187e0e0a14834817176621cde1c3817a5","sha256":"c7e70e5f478272bc89970a93ba0ee6171c60176596dacd3e5186e60dbe9dc25d","sha512":"1325ca26190bdc3f77ab176408345cea7662d98a54ab2a2f3f19c292e46a995f123f2f6a13224ffe91c0158fbcb999ad6dd309b291271b8519420463dec5bb76","ssdeep":"","tlshash":"48111cb7a8e0907afb8e0aa408a190783b333754300a40f1d13c98ab46d2582e63b399","size":927,"data":"","first_seen":"2026-04-08T12:11:42.197461Z","last_seen":"2026-04-08T12:13:16.901979Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/phantomWallet-IPGVKCAB-BGoqRxdn.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8d3e122c71dad3b911494fe2c10c5f8","sha1":"1b78a2cd20efa5bf8974c3f1d828585a4dec9961","sha256":"074e942e3627e6929f68a9f298e84f7ca26788c12c1dfc6caf7dc90473303910","sha512":"cf37e331c970b63ce5d64b41b174e697175c73e2d942534a7b77daac130ca72233a08809240204283a3bf66bc52c73846ed55ba5add6302341688d4714158d22","ssdeep":"","tlshash":"e411dcd20f3080e50e9aae39ad3878e416b171af737826841349cf34ea83dc74508a50","size":919,"data":"","first_seen":"2025-05-30T14:20:20.549969Z","last_seen":"2026-04-17T09:09:52.493057Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d62fcb8aae79e4ddff0c2f73514cac7f","sha1":"cbf46f8b66d5d226568da0f3ee29eb143784d0c9","sha256":"9a64dbb9af5e9672cc99b091377d7df9a9d1dcb2a910b639360e77b18a31cd71","sha512":"be67b0445a5e1603905d44b113b7d5c70f675e8901d6cf7a7f918cb61f197d581abee3af79af6e846d27cf87b7a0fcac17e0330455992ec09ee337b194a05f35","ssdeep":"3072:2dkdy/7ekEfcyDjn/+H4/l81Ei7PlzLWymGMbnDaURDS5WfeT:2dkdy/7ekEfcMRDS5WfeT","tlshash":"9ef3e9a6716b642e0982818bf0750e07a226655c340dc46d7b7cb8ff68ece5e317d73a","size":163593,"data":"","first_seen":"2026-01-30T19:04:09.913225Z","last_seen":"2026-04-08T12:13:16.904295Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/trustWallet-E2GVGE4U-CcH50yxW.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a25b589fc633676b9a58fa384f2d0334","sha1":"119f38e7d9e19f351e022c5fa0f537f15ea3f933","sha256":"7edbc680126336b8db68846c0b688c957b60afd953859b06ca9dfd6a74a54f02","sha512":"ad917ac1bc65cbd0d55a05d5e39241f3badda088e0a56bf1d332a82c1df6d46e706c54bf3f9ddf22c75c3e754a33d6c3c03b2e6138720a09e85e0ce96cd9dc9b","ssdeep":"","tlshash":"3c01c0dbdb29dc77c85f83bced08a4a3521876db60c8436ee6554f1f25a808b1c0db60","size":760,"data":"","first_seen":"2025-06-03T09:03:10.609568Z","last_seen":"2026-04-17T09:09:52.485468Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/mewWallet-6V4UZOQC-B0qJRky8.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ba9b4ec5d6e0138fdc7dcea74d719b1","sha1":"7e9a5254388ae9b05ccab215bcadfda7cbb92178","sha256":"cabb87e570e8e5c15a34eeb5c010a7651a3e878e76568fa8f274903a86c23047","sha512":"8bbc357ee098b1666e94e09a19e0b9711acc240227e819daa87a564a6a0ff456a338c4b61d83f68344063ce6c0ac09d7ef5e9ccb4c711aefc103562691a600de","ssdeep":"192:vSL2IcUA1oFBu/kyilFZl1s7tWld8YgsII9P3cO6+fzRXygn3IJigNnvMqDCdFIZ:vSL2IcUm/XwZvw0IGrCgivRhilI","tlshash":"9742c5d0332c53f9f507c3a9a7aaa0569a7c30da3daf5158f64f05256b144fa883f843","size":12987,"data":"","first_seen":"2025-12-31T12:33:59.905722Z","last_seen":"2026-04-08T12:13:16.929881Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/hstack-D3Skbdn6.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"bc8ddbc80f28fb32894654ca8ac39786","sha1":"de29f72127bd40a16212187ec3a974a3733889f9","sha256":"98b2f888530648b54dec6fe177f54c96f3f3b34fed37230cb8436ee92f9f952d","sha512":"86943ab7e846f61bf5e7e08a3445c386ad7f00d921fea4f44edc94e8fda47a90990790ee37d23b77214d818d2fffa6c26c0b7cebc109b464b065e949951d0584","ssdeep":"","tlshash":"1cf0d4666441b1b003e5dc5461e6535945de5f9cbb7151c4d0ce8c4e36102c1939ba89","size":473,"data":"","first_seen":"2026-04-08T12:11:42.280112Z","last_seen":"2026-04-08T12:13:16.911958Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/use-is-client.hook-BIfz3olj.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b88e928f1ad4dc1f1fbbd562b4b83321","sha1":"1ab8dcec57d20c96ca48e1b6584eb368a8e053f2","sha256":"72a0b306080535532a4ae56aac406e09f9f6a9caea4cf3b33c1422405cd99340","sha512":"6e24503cb1022034a3642e33543b8d478bb1043725e4900ddc2a7ca73675bdfcc07d67afabcd8671c1ab6defb191e5d4ba4bd48476b943c0e5ef37461c5c8a4f","ssdeep":"","tlshash":"cbc02b6510c2ec70870048b00277deb0983288dc23e51ba0f8254c0667450f34fafc07","size":141,"data":"","first_seen":"2026-04-08T12:11:42.212165Z","last_seen":"2026-04-08T12:13:16.909159Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/vstack-CV5WDr8X.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a986df47f307fdd55f4fb20ab158ba00","sha1":"79b7af2da01eb1e81e93c7864297baaea8e37517","sha256":"d86839e49e60d5b15121908dad7fe301affa3d9ddfa08269a9ff7189ebceed3b","sha512":"8d46265883b9fc378024b297011a8fed2e81f257625ef9d750a5d87c04dae644e335a72b66f7c96ad70f238ae0b74fb919e2a3fdbe810b9314e1c4fa69b485db","ssdeep":"768:HsHWUpDTugn4fMqCgSknl5Qn1upQLpOFZDPTKyPZmZA5J4hdrW:M2bC1YczpOb2Z0J4i","tlshash":"e4e2f9a132541408f6afc7aef8c61f48c13916335413fccab67c8aa8d1517b91b6bb6d","size":32755,"data":"","first_seen":"2026-04-08T12:11:42.278509Z","last_seen":"2026-04-08T12:13:16.926438Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/loader.component-br8cY3J5.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"295557d1c8cbfaeab6a759b79df20c65","sha1":"6ef7b731d121ccc3d492cf76ee7609fa6b4ba93b","sha256":"290e93b25b46a071af3d529ce567689039c02f131cb9fedba29e1dccd1cddfa2","sha512":"afced17b007d0109b925f1ad0e3cb1459e1ba263ef4a23f77b32d67cf80d8b1285f4f3e66083512f3b22640a30484f0927968be6c074739353754797e6f1585a","ssdeep":"1536:LRK0GSaGlSaeey2MZ+40INYm1C5XeJP2CprtD2zj7br:LRcSllS3e070Bm1jrQ","tlshash":"4eb3c79c7882b8a5539b45a590ff010bf27d6c4b700c84a0f268ddaf79738695263fbd","size":117949,"data":"","first_seen":"2026-04-08T12:11:42.182341Z","last_seen":"2026-04-08T12:13:16.912578Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/proxy-rm_CbHRD.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cb24a4e4c172e647f561b0e74e74aef5","sha1":"b5135b0c9b909697f0eb49b19fdf9bf58928314f","sha256":"834b0c535378be30a8382624280b64706b45c7f486a87380916be203878b82a6","sha512":"d7eaff85f116dcbdacf71761441e5fe1a912638f56cf0f8901b5246fcabecdec66f2d2ede7740f7ccb02e55ea1bc2b8984e4c01817b4e648fb8872e781820513","ssdeep":"1536:Z+2TsGd6fOmBgDHte9/Q3t/v5ScoeyUK8wlZWJDFV8lovCt5VyF6Puktr/:Z+2Tdd6WFteRQ3t/vscoJUxwlMIwqr/","tlshash":"39b307c572917561d3d685e9c0bf0b41b73718983009c0bcb63dadcb6d2240aa6bbb7e","size":115479,"data":"","first_seen":"2026-04-08T12:11:42.292071Z","last_seen":"2026-04-08T12:13:16.903004Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/entry.client-CtR3yYe9.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fad6b2b8983e90695840305f73300362","sha1":"5e682456c4a49fbafcdb60f1184b33d3277d68bc","sha256":"3c16bd6f725d083ea198e92a3a859cbba4dfbacc2feade93c71e281c2a9f6d51","sha512":"089cd0fb1e57bfaad2463a3195c744d152689893cc66830ec9ad41fcb17e613006563afef4cb2387ae7f983dd63fe81731422bf97c62a0606f9c105292d0e67d","ssdeep":"3072:1O8GfDyHDZubrIrn6BEnaE2CmfnoSA016Un/m:kvL4VunIz64eoSvL/m","tlshash":"fb041bec32bea7566eb245e6109f1503767c28232c0c4c70a151fe9d66b844a51fbfee","size":189577,"data":"","first_seen":"2026-04-08T12:11:42.215109Z","last_seen":"2026-04-08T12:13:16.928196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/rabbyWallet-FLVUU35F-BZrp4syk.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"174b08de1e202256a72f7663e79b8461","sha1":"602e294d94f061211502895741144c4320248855","sha256":"0767c9b588d0ab9b532619b26d91fe6e5163f541bcc2d6a9e9adae18f670dc8d","sha512":"640ce4e8d836b4ea90ace61f30c3cbe697e7d9a7d6d04c4b4a4e0f1845f850754434d0415ee9f3a7ec0856d679fe14679d1548d99385bb887a205fb0ab6d3b1f","ssdeep":"","tlshash":"594183e8eb38e993edadc67cdf19a475310e30ff909441a551d65b1e30646d33e0a650","size":2370,"data":"","first_seen":"2025-04-01T04:17:39.073172Z","last_seen":"2026-04-10T09:11:01.513661Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/safeWallet-VUYZPLY4-CXnodgMs.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a09d06d29fe2837adda28d773f8d6e5","sha1":"93c50ca2782f3f0b4c1f6d48c9fa33476f772ac0","sha256":"aaaf8c1f6acc96bda06bfc1e526611b918cd12021d54b15cce8fef605554938e","sha512":"7c181bd28ffca7872846372455d30661b0b89069cc473f94ac177247350091749470603dbf2827abc14eee65d5f98c37664defe6105075889415cee5bc3ac9dd","ssdeep":"","tlshash":"c531229136cca6e0770ae321cd04c166f85528effd66e35c6a015862bd0846d758cdfd","size":1449,"data":"","first_seen":"2024-12-25T05:30:42.588753Z","last_seen":"2026-04-18T12:51:34.196287Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0699d9362a4e2603cb8ff2bd6ddd2f4","sha1":"5a735efe15b3ec9246eb2ea710a664e7c850190c","sha256":"44164d886dd9b5bdba5e2ffaf7e55179c53804f86b7f172fb292d7311aeb08d1","sha512":"6a7de46450e6dbba8903543d163632bb33c985f7d5e2a61cd8c22781f9487d01dc468174af39aaf2a7e421f9efd29a80c2c3ff347805331254865fd9c357fa2d","ssdeep":"","tlshash":"c8900220542902aa5ae2815d5612fe3977441985110984620154d60b24d20d690369e4","size":53,"data":"","first_seen":"2025-01-19T19:20:19.81482Z","last_seen":"2026-04-22T08:07:44.284315Z","times_seen":8548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4533235bc340f56829dea0a7d50f01e1","sha1":"57e36d2d5ea0be6ffc8e6001b28f5b4f3b865a43","sha256":"a7b184efc6db3070eb138216ce988c4adb40b13a54bbbc308b9ff0be71f9e0eb","sha512":"dd0bfc5260b16d9a9b387ef134ba454aa5ed7636fab9b79e5034e229418ca5f0e6fd99dca3c881fa091df55204dfaf7e77e4526050a60e8110ed49b41ea4e831","ssdeep":"","tlshash":"1c60000000c000ff0000f0c03ccf0c000c0cf000300c00000003c3000000000030300c","size":16,"data":"","first_seen":"2023-03-08T20:20:25Z","last_seen":"2026-04-22T15:18:48.426022Z","times_seen":20559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/root-Xknqg8tm.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"41b5ed793a0ed295be69deb440489c45","sha1":"85020370198d651058bcdb7de6174177950e9a77","sha256":"6891a03a9f15c32389ba670d96e5503421cfba858b1f86766b8b43f28404b720","sha512":"9aef86726d65ea7cae2d6409f073fdeeaccf62bc579bed85a9f90d1ddf2446b2dbead6cf67621cd0a6463233797196b1abb32f44c1774251679e0e98905c2a30","ssdeep":"","tlshash":"eff02e1bea0043b22286ccf1d160e0b16a33926b8bd2d7b1d8df2b3a43d08b5c598143","size":567,"data":"","first_seen":"2026-04-08T12:11:42.210554Z","last_seen":"2026-04-08T12:13:16.919413Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/sound-button.component-CMRzRWGh.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d31d6e0a5f56039a83e2aa0cd40da31a","sha1":"c3a0851c2dc0f867e8ff0b171b8c170f34f8e392","sha256":"9c6c56485093381a9c64267938157dbf89d472c17aea92b694df1253b3b0a8e9","sha512":"864ce70c1fb38537ccedc8382de155a828031d3dab7957c111724f8f8356551a4d7fe23ce421b6da68dc7f74a1eb53bf0fc1386d7eb6f0528ae7d6f559aa2cce","ssdeep":"","tlshash":"e74174ed870035ac640dab30fd177812b1be14fe8fa557d1814c653c66328e3eb2aad5","size":2189,"data":"","first_seen":"2026-04-08T12:11:42.213995Z","last_seen":"2026-04-08T12:13:16.92004Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/base-modal.component-DCuTse0x.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e5f580fae6b2962739409231347be634","sha1":"52b3b501e612ca82b83ec78763776382fe1ee4df","sha256":"61013333221c082c5b806b341e6f92ae35f3dec714fd692d65c9f29af068eca8","sha512":"2541729fddefb37039c0fe5ddb35de49b5b51835e314a0a9a2f5d0cd61815b022e4663f98a08b7682e8dddbe2f91fe74cbb6dfeb52e840ed8b3cf1ec0577aa61","ssdeep":"192:1pa6OSUazs+Is14LFFe265zhvSZu8apcidPgY4C4S0S1n8Z:vpxUazs+Is12FJ65zFSw8apcidd1M","tlshash":"2df1c91da24ea568f83fc149e0edd64a956e103cf7368a90b2fc952e01d4e42722ffd0","size":8009,"data":"","first_seen":"2026-04-08T12:11:42.290262Z","last_seen":"2026-04-08T12:13:16.910622Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"717b03058e9eccce29ae3a8f15544b1a","sha1":"c2b626e64489c6f9084d3bad64c5fb73df88d797","sha256":"59642a8a9d30d9684f1aa6b4c8ca8886bf9a53491a3e238ad3aadac36f1917d9","sha512":"d339c57445af528cd655bad29dc18dbbf61ef6c5a8f6541b4735e8ef7ed872dbf173d22e3c67f976eb78bd25eb8b30a40b2613698d6ef9f24a485a61c7e9f6ee","ssdeep":"","tlshash":"b7f0abe64b508d00874a03b1cabc94c8313775eea758239cb2720619bd420afb90cbb0","size":443,"data":"","first_seen":"2025-09-05T14:38:20.777264Z","last_seen":"2026-04-17T09:09:52.483064Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"espresso.builders/assets/safeWallet-VUYZPLY4-CXnodgMs.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/safeWallet-VUYZPLY4-CXnodgMs.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15453\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"safeWallet-VUYZPLY4-CXnodgMs.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: W/\"9a09d06d29fe2837adda28d773f8d6e5\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7sgq9-1775650267258-10c214ee7caa\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1449,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1448)","md5":"9a09d06d29fe2837adda28d773f8d6e5","sha1":"93c50ca2782f3f0b4c1f6d48c9fa33476f772ac0","sha256":"aaaf8c1f6acc96bda06bfc1e526611b918cd12021d54b15cce8fef605554938e","sha512":"7c181bd28ffca7872846372455d30661b0b89069cc473f94ac177247350091749470603dbf2827abc14eee65d5f98c37664defe6105075889415cee5bc3ac9dd","ssdeep":"","tlshash":"c531229136cca6e0770ae321cd04c166f85528effd66e35c6a015862bd0846d758cdfd","first_seen":"2024-12-25T05:30:42.588753Z","last_seen":"2026-04-18T12:51:34.196287Z","times_seen":38,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/user.context-D2-hjU9_.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/user.context-D2-hjU9_.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 154381\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"user.context-D2-hjU9_.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"02a2a4d231da07ac1849fd31aa4bda77\"\r\nlast-modified: Mon, 06 Apr 2026 17:18:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xntz7-1775650265390-3d33edb2d31a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23804,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12049)","md5":"02a2a4d231da07ac1849fd31aa4bda77","sha1":"f886816f6431cf57e1947632b3b3b86a3ff4d2dd","sha256":"60b86ee8cad00d15255121f1829da6514c799aa2e56dc1e759d0c1e6ca6da6be","sha512":"eae6986ac890ca0e3ebf64edb28a0a72a72c1051f7a16b793b4095c04e87095c81727110b44b331112f264e29239d790588c54be3dfd19a85cc1a0a4ff7e700f","ssdeep":"384:MPQJMJF7sMqTKP/bSZu/dcLgl1lkkObqtrC8CmUZr8sEo2M48/DFYREV7J/RC5AU:MPQJMJFITKP/b24dcC1lkMtrC8CBl8uM","tlshash":"6fb2f75831d9e0b142e750a4947f620bf17819a0e05ca4a4e2a9fdf439f8d97817bf36","first_seen":"2026-04-08T12:11:42.176223Z","last_seen":"2026-04-08T12:13:16.908351Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/en_US-762U7H2X-ioVsSyfE.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/en_US-762U7H2X-ioVsSyfE.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 47149\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"en_US-762U7H2X-ioVsSyfE.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"d921f53bf3db339d77e0bd39ef3b8bb0\"\r\nlast-modified: Tue, 07 Apr 2026 23:05:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fcj47-1775650265392-d2c2110275c8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":562283,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (7497)","md5":"d921f53bf3db339d77e0bd39ef3b8bb0","sha1":"39f9c74716f59366969fc794d8d03dd8d7c69097","sha256":"b389e092208ed12fac479c8c30ba2df02a70c0160925361cfa1d87d3b4fef096","sha512":"8fa88284ec1b444448fa22e3857a0ef1fc44ab46ddad803fbcef93eebe04eae61caaad08792b8bfb21a397be6fd635ca0aa20dd8e4a1b4403f3b80e3ad0d8009","ssdeep":"12288:Ld/7EcwzWIKWTHoX2f+ozuNqxl+SNa45IVWdyU:BzEfzWIKYIXQ2qx8SR0U","tlshash":"fdc46c44b2a0b565439740e914eb1000f1346e9db50c58a876ecd9be3fbaec885fbf6d","first_seen":"2026-04-08T12:11:42.178247Z","last_seen":"2026-04-08T12:13:16.927012Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/index-SGWvdP6e.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/index-SGWvdP6e.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 47144\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"index-SGWvdP6e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"282cfde38db6c7c9cd0ef1f08bd7a99f\"\r\nlast-modified: Tue, 07 Apr 2026 23:05:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zzp42-1775650265397-d17d0a618632\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10249,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10248)","md5":"282cfde38db6c7c9cd0ef1f08bd7a99f","sha1":"485f15ffc5dc870b0f87a33bbace18d075b890ed","sha256":"a6397c4621d4cae7e0c407f7e1f34ecedac393da26d0a3a0ea1c7e79d12c6449","sha512":"b4e6b2f7deb609d1b8c1d588d6a60c05fca03b5eaaa6fbd4a1c0c3824656e24fd8c04aca28b8a7dabab5f6cadf49ef6b9e5f9348210ed309d927a9328d177b42","ssdeep":"192:q9fz4XaINw0gHL3lnec54Zd840mVA/mUwj0ZwFdS2:+fijw0grlne/44FAuUOFQ2","tlshash":"30222fd97697f0a183a2687480af140bf23cbc68944ed164e5e4e1d9bcbd159d233e3a","first_seen":"2026-04-08T12:11:42.180614Z","last_seen":"2026-04-08T12:13:16.925287Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/loader.component-br8cY3J5.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/loader.component-br8cY3J5.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/home.page-CQ4lc89L.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"loader.component-br8cY3J5.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"295557d1c8cbfaeab6a759b79df20c65\"\r\nlast-modified: Wed, 08 Apr 2026 12:11:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zzp42-1775650265430-06b6ad30b1a6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":117949,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46483)","md5":"295557d1c8cbfaeab6a759b79df20c65","sha1":"6ef7b731d121ccc3d492cf76ee7609fa6b4ba93b","sha256":"290e93b25b46a071af3d529ce567689039c02f131cb9fedba29e1dccd1cddfa2","sha512":"afced17b007d0109b925f1ad0e3cb1459e1ba263ef4a23f77b32d67cf80d8b1285f4f3e66083512f3b22640a30484f0927968be6c074739353754797e6f1585a","ssdeep":"1536:LRK0GSaGlSaeey2MZ+40INYm1C5XeJP2CprtD2zj7br:LRcSllS3e070Bm1jrQ","tlshash":"4eb3c79c7882b8a5539b45a590ff010bf27d6c4b700c84a0f268ddaf79738695263fbd","first_seen":"2026-04-08T12:11:42.182341Z","last_seen":"2026-04-08T12:13:16.912578Z","times_seen":2,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:06.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /gh/hiunicornstudio/unicornstudio.js@v2.0.1/dist/unicornStudio.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 12:11:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 40621\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 2.0.1\r\nx-jsd-version-type: version\r\netag: W/\"27f09-y/Rvi2bV0iZWjaDz7inrFDeE0Mk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220094-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3996109\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eYDgumwVDNYZdGJXUYwlf7QdmllxdswnBKpA8LqyZhg4WWxuU9AglcBnwErYfz8Eo5tiHwxdV%2FLcO%2FFMhtQ5vGBuqh6k1X8Vu7bD6xxBKKkOP%2BAZofwwRP%2FKNPNyWHHjkFQ%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e912c37d8895685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163593,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d62fcb8aae79e4ddff0c2f73514cac7f","sha1":"cbf46f8b66d5d226568da0f3ee29eb143784d0c9","sha256":"9a64dbb9af5e9672cc99b091377d7df9a9d1dcb2a910b639360e77b18a31cd71","sha512":"be67b0445a5e1603905d44b113b7d5c70f675e8901d6cf7a7f918cb61f197d581abee3af79af6e846d27cf87b7a0fcac17e0330455992ec09ee337b194a05f35","ssdeep":"3072:2dkdy/7ekEfcyDjn/+H4/l81Ei7PlzLWymGMbnDaURDS5WfeT:2dkdy/7ekEfcMRDS5WfeT","tlshash":"9ef3e9a6716b642e0982818bf0750e07a226655c340dc46d7b7cb8ff68ece5e317d73a","first_seen":"2026-01-30T19:04:09.913225Z","last_seen":"2026-04-08T12:13:16.904295Z","times_seen":15,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":11,"receive":39,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/phantomWallet-IPGVKCAB-BGoqRxdn.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/phantomWallet-IPGVKCAB-BGoqRxdn.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15452\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"phantomWallet-IPGVKCAB-BGoqRxdn.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: \"d8d3e122c71dad3b911494fe2c10c5f8\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zzp42-1775650267250-8770d89c386f\r\ncontent-length: 919\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":919,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (918)","md5":"d8d3e122c71dad3b911494fe2c10c5f8","sha1":"1b78a2cd20efa5bf8974c3f1d828585a4dec9961","sha256":"074e942e3627e6929f68a9f298e84f7ca26788c12c1dfc6caf7dc90473303910","sha512":"cf37e331c970b63ce5d64b41b174e697175c73e2d942534a7b77daac130ca72233a08809240204283a3bf66bc52c73846ed55ba5add6302341688d4714158d22","ssdeep":"","tlshash":"e411dcd20f3080e50e9aae39ad3878e416b171af737826841349cf34ea83dc74508a50","first_seen":"2025-05-30T14:20:20.549969Z","last_seen":"2026-04-17T09:09:52.493057Z","times_seen":22,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/trustWallet-E2GVGE4U-CcH50yxW.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/trustWallet-E2GVGE4U-CcH50yxW.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"trustWallet-E2GVGE4U-CcH50yxW.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: \"a25b589fc633676b9a58fa384f2d0334\"\r\nlast-modified: Wed, 08 Apr 2026 12:11:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::58zs7-1775650267251-2ef9c2fe811b\r\ncontent-length: 760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (759)","md5":"a25b589fc633676b9a58fa384f2d0334","sha1":"119f38e7d9e19f351e022c5fa0f537f15ea3f933","sha256":"7edbc680126336b8db68846c0b688c957b60afd953859b06ca9dfd6a74a54f02","sha512":"ad917ac1bc65cbd0d55a05d5e39241f3badda088e0a56bf1d332a82c1df6d46e706c54bf3f9ddf22c75c3e754a33d6c3c03b2e6138720a09e85e0ce96cd9dc9b","ssdeep":"","tlshash":"3c01c0dbdb29dc77c85f83bced08a4a3521876db60c8436ee6554f1f25a808b1c0db60","first_seen":"2025-06-03T09:03:10.609568Z","last_seen":"2026-04-17T09:09:52.485468Z","times_seen":36,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/okxWallet-GJMKZIND-Ctk5JsJ6.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/okxWallet-GJMKZIND-Ctk5JsJ6.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 27201\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"okxWallet-GJMKZIND-Ctk5JsJ6.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: \"f4c59e31efbcd88c687fc0a977d992ca\"\r\nlast-modified: Wed, 08 Apr 2026 04:37:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::576tb-1775650267252-61a4b3be4e77\r\ncontent-length: 898\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":898,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (897)","md5":"f4c59e31efbcd88c687fc0a977d992ca","sha1":"486cb19e8e6498704d418690e59128ebf9a02c6e","sha256":"92b49f1aed987eee109fd98567002c0420d85c602003e003b0f2ad3513c41f15","sha512":"01d94e855345137a19596757a9b585c74536b3c847f6c34ce07e2890fc4536375a159870aa1c88ff8a9b24f94c3cfee0eac0998d73170b52c9887080dff1ec54","ssdeep":"","tlshash":"8e115b9600ad4ddecc5da1eb937ca4aa573d2df8763881352f4c8b5020aacf8f44ad5c","first_seen":"2025-04-09T07:08:13.428855Z","last_seen":"2026-04-10T09:11:01.53738Z","times_seen":45,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/background-music.context-zHWXBYPr.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/background-music.context-zHWXBYPr.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"background-music.context-zHWXBYPr.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"0316b03715dd4be7a8d874d622290042\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b5flj-1775650265397-8622c05572bf\r\ncontent-length: 927\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (926)","md5":"0316b03715dd4be7a8d874d622290042","sha1":"cc8d95d187e0e0a14834817176621cde1c3817a5","sha256":"c7e70e5f478272bc89970a93ba0ee6171c60176596dacd3e5186e60dbe9dc25d","sha512":"1325ca26190bdc3f77ab176408345cea7662d98a54ab2a2f3f19c292e46a995f123f2f6a13224ffe91c0158fbcb999ad6dd309b291271b8519420463dec5bb76","ssdeep":"","tlshash":"48111cb7a8e0907afb8e0aa408a190783b333754300a40f1d13c98ab46d2582e63b399","first_seen":"2026-04-08T12:11:42.197461Z","last_seen":"2026-04-08T12:13:16.901979Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/app-Bn1gfBd3.css","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/app-Bn1gfBd3.css HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 45365\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"app-Bn1gfBd3.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"56f8edd1fb51b2b9f8d490a63a06fc1b\"\r\nlast-modified: Tue, 07 Apr 2026 23:34:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xntz7-1775650265250-d9439650fb26\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26173,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (26169)","md5":"56f8edd1fb51b2b9f8d490a63a06fc1b","sha1":"3383fd88d237f2c137f5fec76bed56ed8799271f","sha256":"a2b45923f203c965232f113da0936bb9e0aaa3c504b4d01db70b468f4a54d37c","sha512":"09b458bf095a7c5b45f92068c9fa6add8fdb77e0f46f917149a3e90635db87200e96012b03279c8e6455ad760ad8428e6f6ed454467b3e9f284fc13a3cc20dbe","ssdeep":"768:DvyYADX3HpL1YkPjTem4rRkutSc9zE8UaHbTcf+GJkChLAAoi9KckbFiH5ToIZT:LADX3HpL1YkPjTem4rmutSc9w8UaHbTo","tlshash":"3ac2a689b6009abe7c3be56a576dea0c6309be16ec104eeff91835021be7ff215d1504","first_seen":"2026-04-08T12:11:42.200257Z","last_seen":"2026-04-08T12:13:16.91857Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/root-CLr5hmLV.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/root-CLr5hmLV.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-CLr5hmLV.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"f046436dacea521b5d95eafa27b39e4a\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qh7dp-1775650265389-139195c16f01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4471052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (37480)","md5":"9fe10a38fe1ffea466a40ed705180d05","sha1":"156b9ad12e00659b94f06c33f9ea762fecc543e1","sha256":"dd5202cda33452975e653f70761f3e122a9609debaea15b53c434c804b25117b","sha512":"16cb1b38bdc083ffb0b619b9b9edb4db31942343c585b69e8b54fa87e746581ae02e8bea300e6a8b3f7ba415cedf4f539ea2246bad409724cb0e97d77777a092","ssdeep":"12288:c7HYfpjyUw66bAZdB1so4H0qfcSBWmg28qH7V6yVf6Y2VC:0HYfpWFsZn1soO1fZbVvVv","tlshash":"4625e8ef6a1f5d9c0e61138444eb02d0e1545c83d48c8483f6b89beb5efd4aa905a7fe","first_seen":"2026-04-08T12:11:42.202323Z","last_seen":"2026-04-08T12:13:16.898368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/chunk-EPOLDU6W-BseXRFR5.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/chunk-EPOLDU6W-BseXRFR5.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"chunk-EPOLDU6W-BseXRFR5.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"5f1edf157f7dfeac3c406bfdb21f9c58\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wx2jx-1775650265387-4a8d404170fc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":125122,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (46949)","md5":"5f1edf157f7dfeac3c406bfdb21f9c58","sha1":"4e876bd9b8b0c7c69de2432fb0a5a4ecbd7588e2","sha256":"1b08a20c9e6d9c9417540ba05ba021045b98927957dd906be82aaa9650e6f761","sha512":"6fddaa4098338aa745f95b977fabd0d9043eb88f01603d4dcca3dce351ad91aeff185594646b41d9ae8f44a4614487ea9ff99886e85a47319d23092104b4ad83","ssdeep":"1536:YZe4IJi0G4pPj0hsIkZxr5bRRvMViduOZgVI/rYWYYKyWXMF:Ge4IoMaUZxr/RvMVid1GVI/rYWYYLWI","tlshash":"cac33bf9729270794bef13f180bb0015b3b92ca9246d8015b2acc99e35b5c4c967bf79","first_seen":"2026-04-08T12:11:42.20458Z","last_seen":"2026-04-08T12:13:16.906699Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/metaMaskWallet-YFHEHW7V-BggUDXad.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/metaMaskWallet-YFHEHW7V-BggUDXad.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15452\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"metaMaskWallet-YFHEHW7V-BggUDXad.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: W/\"c9faabc0cac059efd75278832f35fba0\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k9nn6-1775650267248-117dead80198\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6516,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6515)","md5":"c9faabc0cac059efd75278832f35fba0","sha1":"75a665ec82b0dd2ccab406db25ed49f69ba40931","sha256":"748a6c743322ec0b319bf361b84e929e5099721824636f5a4befd8e0ff8ab826","sha512":"7ab0d0071f01aad00b47c9fd55ef2748c61eeeb46b3abfb66afdae61970d62a77a0f643be0c95cab9a778d28a816b75fbb5c4667be6b794d97cec3937d0b5eec","ssdeep":"192:M1vaqYOX292169AY32zqzKHio+21BZBTibnKCU+jpBxMCXV:my933BU+V","tlshash":"17d15deb67488cbcb8271f24e34a3271613836d7692ee6594c738a79090519dbb7fcc4","first_seen":"2024-12-25T05:30:42.586528Z","last_seen":"2026-04-18T12:51:34.183552Z","times_seen":68,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/roninWallet-SAB5ESVK-fW2QoTxP.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/roninWallet-SAB5ESVK-fW2QoTxP.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15453\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"roninWallet-SAB5ESVK-fW2QoTxP.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: \"68f97b0ae9e3156ac22560e59bd69d4e\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qh7dp-1775650267291-f55f16ffd671\r\ncontent-length: 975\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":975,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (974)","md5":"68f97b0ae9e3156ac22560e59bd69d4e","sha1":"9809da0a9ae9c30ab42202c55b07eef3acd8d1fb","sha256":"8959d6d3640f29ffad2fcde3305042bd42df292e2059935d19d5227dbe809290","sha512":"d9d8677af4e67b9e869da5a01e783a25305798a87461bc1915b6f9c200ec06c5b44b79758c89ecfbc6324647893faa387e3f594b71729f0d7beb1a457370cf2b","ssdeep":"","tlshash":"36119ce5910889aec51fc22cdd109462231f24e67acac697a7fd4f393147443fc07a59","first_seen":"2025-12-31T12:33:59.906467Z","last_seen":"2026-04-08T12:13:16.914673Z","times_seen":17,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/root-xUBic4Hn.css","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/root-xUBic4Hn.css HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-xUBic4Hn.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"b791fa2cfe8eea5dc35ba023b26bf0cb\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zzp42-1775650265241-57fb97af897d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28032,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28031)","md5":"b791fa2cfe8eea5dc35ba023b26bf0cb","sha1":"12f5d243511c0b9273162b3018d0dd57ccea4f1f","sha256":"6dc4c7194a918e7786fa782145e281df7b49fad5e2a449716bde8a904e07e0d4","sha512":"8d059d197b5ef2bd53175dc7f2092ddfb74d73c124965b15dc92600efb15e2bfc7efd6622e6e90f9a8513a817cbb9876588cf43f97478a5df12879b9aa71220c","ssdeep":"384:P56ed283ZcW23qWF7O36YBzQ4JYf1ojPFEINi:P56UJoYBzQmSojPFEwi","tlshash":"73c2c9093e2d3f38ba13a32440c0949c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-12-28T18:47:24.374234Z","last_seen":"2026-04-08T12:13:16.905421Z","times_seen":25,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/root-Xknqg8tm.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/root-Xknqg8tm.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"root-Xknqg8tm.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"41b5ed793a0ed295be69deb440489c45\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7sgq9-1775650265343-2f0bd06fe2d2\r\ncontent-length: 567\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":567,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (566)","md5":"41b5ed793a0ed295be69deb440489c45","sha1":"85020370198d651058bcdb7de6174177950e9a77","sha256":"6891a03a9f15c32389ba670d96e5503421cfba858b1f86766b8b43f28404b720","sha512":"9aef86726d65ea7cae2d6409f073fdeeaccf62bc579bed85a9f90d1ddf2446b2dbead6cf67621cd0a6463233797196b1abb32f44c1774251679e0e98905c2a30","ssdeep":"","tlshash":"eff02e1bea0043b22286ccf1d160e0b16a33926b8bd2d7b1d8df2b3a43d08b5c598143","first_seen":"2026-04-08T12:11:42.210554Z","last_seen":"2026-04-08T12:13:16.919413Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/use-is-client.hook-BIfz3olj.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/use-is-client.hook-BIfz3olj.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 27202\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"use-is-client.hook-BIfz3olj.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"b88e928f1ad4dc1f1fbbd562b4b83321\"\r\nlast-modified: Wed, 08 Apr 2026 04:37:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zzp42-1775650265390-e182cb0b1908\r\ncontent-length: 141\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"b88e928f1ad4dc1f1fbbd562b4b83321","sha1":"1ab8dcec57d20c96ca48e1b6584eb368a8e053f2","sha256":"72a0b306080535532a4ae56aac406e09f9f6a9caea4cf3b33c1422405cd99340","sha512":"6e24503cb1022034a3642e33543b8d478bb1043725e4900ddc2a7ca73675bdfcc07d67afabcd8671c1ab6defb191e5d4ba4bd48476b943c0e5ef37461c5c8a4f","ssdeep":"","tlshash":"cbc02b6510c2ec70870048b00277deb0983288dc23e51ba0f8254c0667450f34fafc07","first_seen":"2026-04-08T12:11:42.212165Z","last_seen":"2026-04-08T12:13:16.909159Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/sound-button.component-CMRzRWGh.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/sound-button.component-CMRzRWGh.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/home.page-CQ4lc89L.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"sound-button.component-CMRzRWGh.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"d31d6e0a5f56039a83e2aa0cd40da31a\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fcj47-1775650265424-cd5900d7f78d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2189,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2188)","md5":"d31d6e0a5f56039a83e2aa0cd40da31a","sha1":"c3a0851c2dc0f867e8ff0b171b8c170f34f8e392","sha256":"9c6c56485093381a9c64267938157dbf89d472c17aea92b694df1253b3b0a8e9","sha512":"864ce70c1fb38537ccedc8382de155a828031d3dab7957c111724f8f8356551a4d7fe23ce421b6da68dc7f74a1eb53bf0fc1386d7eb6f0528ae7d6f559aa2cce","ssdeep":"","tlshash":"e74174ed870035ac640dab30fd177812b1be14fe8fa557d1814c653c66328e3eb2aad5","first_seen":"2026-04-08T12:11:42.213995Z","last_seen":"2026-04-08T12:13:16.92004Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/entry.client-CtR3yYe9.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:06.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/entry.client-CtR3yYe9.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15465\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"entry.client-CtR3yYe9.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:06 GMT\r\netag: W/\"fad6b2b8983e90695840305f73300362\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k9nn6-1775650266686-46498da6e39c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":189577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54963)","md5":"fad6b2b8983e90695840305f73300362","sha1":"5e682456c4a49fbafcdb60f1184b33d3277d68bc","sha256":"3c16bd6f725d083ea198e92a3a859cbba4dfbacc2feade93c71e281c2a9f6d51","sha512":"089cd0fb1e57bfaad2463a3195c744d152689893cc66830ec9ad41fcb17e613006563afef4cb2387ae7f983dd63fe81731422bf97c62a0606f9c105292d0e67d","ssdeep":"3072:1O8GfDyHDZubrIrn6BEnaE2CmfnoSA016Un/m:kvL4VunIz64eoSvL/m","tlshash":"fb041bec32bea7566eb245e6109f1503767c28232c0c4c70a151fe9d66b844a51fbfee","first_seen":"2026-04-08T12:11:42.215109Z","last_seen":"2026-04-08T12:13:16.928196Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LBSJK40LXZ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:06.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"GET /gtag/js?id=G-LBSJK40LXZ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\nexpires: Wed, 08 Apr 2026 12:11:07 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156139\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":470425,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"196ec2472b318285c4bd4562b1bfad37","sha1":"704f9192a04b9172a0f06fa67597234b7ce26363","sha256":"b91e26d5c7da9cafc4d383f2e93a87a836f51468a9a4cd906fbe08986500bdda","sha512":"c543e707c800af8a83748fb159ca5636c999815d2afe740d72997e651373a203a070b01060f1e34398037a6ebd9fcee2aecc3e1da4e3afaaec8e844543c47cd5","ssdeep":"6144:HBcujG8PtgiI7WdHX4zpWbg8OUa3Ub9wbo9TiI0JlwYrS9S:O8Ptgj+HX4zpWc87IlN","tlshash":"b5a40aceb3d674625396f478903f018ba57b28e2b44cc8aab189ccd42e7465a4177f7c","first_seen":"2026-04-08T12:11:42.224969Z","last_seen":"2026-04-08T12:13:16.925892Z","times_seen":2,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":105,"dns":1,"connect":8,"send":0,"wait":35,"receive":26,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/assets-NU2OP443-COMs-Mo6.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/assets-NU2OP443-COMs-Mo6.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/en_US-762U7H2X-ioVsSyfE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15453\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"assets-NU2OP443-COMs-Mo6.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: W/\"33ae24799663e13f83cee5987fa8f728\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d22tz-1775650267258-05c554ff7e5b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17965,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (17964)","md5":"33ae24799663e13f83cee5987fa8f728","sha1":"2309fcbf480ac447c060a427f2a6cd24974dfa30","sha256":"aac5c0d81b97b3892fafba21cdf014c77be385f12d7b1f525dc3f79d0cb2ede5","sha512":"f576ef24f5393cb38276b01c0aaa4d41c56a04d9bd0b82c8e04202949fe343407f12514560fe743af27fbff37a401bcff5c38a25ed66cecdd581c265ab9ad58d","ssdeep":"384:LOr2OrPR1YS2qj0FNwZe7QnBZ4pFSMLYp9uVEK:LOCO11D2qYzdyzK","tlshash":"2c82fd9b8728d94e6e6b8ff8ffdcb4d9332c30e5222e04d4115e616291a359feb41d81","first_seen":"2024-12-25T05:30:42.584192Z","last_seen":"2026-04-18T12:51:34.198627Z","times_seen":77,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/index-BEXlzE-H.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/index-BEXlzE-H.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"index-BEXlzE-H.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"9129dbaf61b84d21e34a17c036da8e64\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k9nn6-1775650265397-71711802cbab\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3680,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3679)","md5":"9129dbaf61b84d21e34a17c036da8e64","sha1":"1b11ab1b76fd311743b4effeb413a60219e098d6","sha256":"c2370c40e8835981e50a8be206b213e8f43dbc88b04facb3b6a6479228f09737","sha512":"edf2b265b57e5161e2d079d59cdbe0a02974e97458d8b98c41ba0baf23ac11e4b0b7f5a2833ed056dc7adeff57ae0af030fb38cf89f396989a7c2d4d4c06f082","ssdeep":"","tlshash":"8271228db7c4f04249c6a960037ba317b2b9377328bec2a193ee99b012675594227f74","first_seen":"2026-04-08T12:11:42.233211Z","last_seen":"2026-04-08T12:13:16.927661Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/coinbaseWallet-WWX6LF36-BMRj6mTC.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15453\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"coinbaseWallet-WWX6LF36-BMRj6mTC.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: \"694e1f6dd72af86c8c477f9608975a74\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7sgq9-1775650267249-dd2c8bde4e0f\r\ncontent-length: 598\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":598,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (597)","md5":"694e1f6dd72af86c8c477f9608975a74","sha1":"3b0def5280cfb0e2cb76b3a039bf7e26986a7f92","sha256":"4a238a92bd23caf58037a8423adebebfc6a84b6762f033bc7e6ebf8741ca1e41","sha512":"7290b10e41ef6e0d7bc27cb24d75327c1493f0d2ae961fb89bf1bb387659a9bc14681b66dbe754722c5f2ea5a98b6cc76c2ca9cde9406de0062262f6f056003f","ssdeep":"","tlshash":"64f022a1a2dcb411186ad336513c5ad4bcd7128cae2e621c32801f1af82009a98c8a79","first_seen":"2024-12-25T05:30:42.515918Z","last_seen":"2026-04-18T12:51:34.188672Z","times_seen":60,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/rainbowWallet-2SR6TVBF-kimcGeuf.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/rainbowWallet-2SR6TVBF-kimcGeuf.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 27201\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"rainbowWallet-2SR6TVBF-kimcGeuf.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: W/\"8a0e974aa17cd852cfd0a349aa6cde2a\"\r\nlast-modified: Wed, 08 Apr 2026 04:37:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d22tz-1775650267250-4999f8933756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3646,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3645)","md5":"8a0e974aa17cd852cfd0a349aa6cde2a","sha1":"3e83142c11e9b7a57432123b72457ff579f8bcb8","sha256":"0813cf58d2da41c33e74c0fb7e5a9671020dc397611becaacd42e1f6ae5b30a4","sha512":"28eac8d72b65f6e1cd4f0ac75cfe58a515be407e04b12aea7a90a8056018133d9f4de319843eb5238f465a23d817971dbd945e4fdbfc59fca26b823efd59a601","ssdeep":"","tlshash":"c071ca958a3dac3be52dc18cee411420710daabfdc894a5272639fef9d784c6ac4c660","first_seen":"2024-12-25T05:30:42.549882Z","last_seen":"2026-04-18T12:51:34.20253Z","times_seen":56,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.us-east-1.amazonaws.com/portal-assets/espresso/unicorn-animation.json","fqdn":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","domain":"magna-public-assets-prod.s3.us-east-1.amazonaws.com","tld":"s3.us-east-1.amazonaws.com"},"ip":{"addr":"16.15.207.154","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /portal-assets/espresso/unicorn-animation.json HTTP/1.1\r\nHost: magna-public-assets-prod.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://espresso.builders/\r\nOrigin: https://espresso.builders\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 85IVmOumd1kxvyvRdGb8p89nKJd2wi1KZE+OwFopodjR9Ayg1qxE7gGrAjPBrUGUWFvKPNMvNvLmqga1UfRRLYg2v+EMG12N\r\nx-amz-request-id: 2P4654HTDGSS4C8R\r\nDate: Wed, 08 Apr 2026 12:11:08 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, HEAD\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Fri, 16 Jan 2026 10:57:15 GMT\r\nETag: \"2ea07af947a247d91ddb094057983718\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: yoEgpUTK0HwwaorqC_3lM4zQe4dn91Hn\r\nAccept-Ranges: bytes\r\nContent-Type: application/json\r\nContent-Length: 56423\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":56423,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2ea07af947a247d91ddb094057983718","sha1":"f09ec926559ecf8dd1d7b02e535108c095767f3f","sha256":"260d78304c9f29249b0a22d6ae969adc5229b7f31100cb9cd80cd0e6679436ce","sha512":"5019faf50bff8d5a8f6df76f1bede43f2842942a7aa55280582adb3856740a1b297023fe808265ae0c6456b31a539fd06b9f40caeccd4ec309453c8eb363d00e","ssdeep":"1536:El31c1NrzuK2drRbHZF6pDyzCnCFkCbCFyCbC5L7U7soa9:El31c1NvhorRbHVz0QkOQy0KL7U7st9","tlshash":"5f43c5b464dad1249f07ad5ddc130288e37e70f91844a6979e1ec881e0c735ce7baadb","first_seen":"2026-01-30T19:04:09.864004Z","last_seen":"2026-04-08T12:13:16.917948Z","times_seen":14,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":218,"dns":21,"connect":93,"send":0,"wait":135,"receive":95,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.unicorn.studio/images/hK13GObf5rZ2ZBOA1482Q9StWR73/coin.png","fqdn":"assets.unicorn.studio","domain":"unicorn.studio","tld":"studio"},"ip":{"addr":"34.120.54.136","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.unicorn.studio","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 02:42:18 GMT","end":"Sun, 07 Jun 2026 03:36:13 GMT"},"fingerprint":{"sha1":"0D:C5:53:57:25:00:F6:3E:91:97:81:2B:21:1B:79:89:59:A0:4F:5D","sha256":"E4:02:D5:97:D7:8B:29:C2:ED:E9:A8:91:34:84:E7:11:A7:25:13:32:CF:C3:35:EC:2B:1B:6F:84:35:20:63:28"}}},"request":{"raw":"GET /images/hK13GObf5rZ2ZBOA1482Q9StWR73/coin.png HTTP/1.1\r\nHost: assets.unicorn.studio\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://espresso.builders\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AMNfjG1ZCmzEGxhn-1QclhjKa5H1ZVpEULUVaipGG0JFqxrPbt31pzEDq25joBLkFPTlre22\r\nx-goog-generation: 1762861129615574\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 76234\r\nx-goog-hash: crc32c=s/wkUw==, md5=VUPxydD/UXnXMiBrkbzzgw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 76234\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, ETag, If-None-Match, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Wed, 08 Apr 2026 12:11:08 GMT\r\nlast-modified: Tue, 11 Nov 2025 11:38:49 GMT\r\netag: \"5543f1c9d0ff5179d732206b91bcf383\"\r\ncontent-type: image/png\r\nage: 0\r\ncache-control: public,max-age=3600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":76234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 404 x 408, 8-bit colormap, non-interlaced","md5":"5543f1c9d0ff5179d732206b91bcf383","sha1":"7405c218b26efc284452c6f39c8522148667c4e5","sha256":"5b0b5b3c7175810ea204b14934608e55218c4a9326bdfa23c4c8a1ff4038063b","sha512":"578b57a63cf1cc650711f5525b08259affa1d722374a1cdfdde8c1f7282f315d444be30e134c361e34cce6bedd57f52c4fbde79b70ce3839fcd76c04c29d0fa9","ssdeep":"1536:ub3pH4uPjKs/YvPbs2vYdmUqNcD+LZoQdi+iL:w3pH4uPjKs/kAnqNS+LZoAAL","tlshash":"107302a84b7f871a9400a786a5a688b6e999fc3711b05a3dfdc403787c1c3d0c376da8","first_seen":"2025-12-31T12:33:59.890405Z","last_seen":"2026-04-08T12:13:16.930494Z","times_seen":19,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":90,"dns":11,"connect":13,"send":0,"wait":150,"receive":24,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/fonts/pp-neue-montreal/medium.woff2","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/medium.woff2 HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/fonts/pp-neue-montreal/font.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15457\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"medium.woff2\"\r\ncontent-type: font/woff2\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"b36caee87073c28b3f64d07e13d86b2a\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b5flj-1775650265339-e3e46696ee1f\r\ncontent-length: 51980\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":51980,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51980, version 1.0","md5":"b36caee87073c28b3f64d07e13d86b2a","sha1":"5f77698d1e7c61ee9dbeda0774b7227c0e3ebf3a","sha256":"11a1b227a4f432bdc5587a529d34a46abbed7067b6e1fb913db0c489c7175828","sha512":"4d868669f739643351e9d2d6ec442fce5db761eb35f48e855deb755529556b28bf55adbd1eb4d25b34478efb35cc34662ead7af40342f365f6082b11f337ad38","ssdeep":"1536:mfOh/to3MFPyrfkIsvSfkMmIxH1S0VSIw6b:mfOh/+cJmpOYI0cIXb","tlshash":"f933f254a314656ed906ef65c95c2ba363bd33dae801e84f303d3bdbf91aa312790057","first_seen":"2023-11-11T04:34:18Z","last_seen":"2026-04-22T03:38:54.134872Z","times_seen":327,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/x.icon-CSJpY8Ci.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/x.icon-CSJpY8Ci.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 154381\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"x.icon-CSJpY8Ci.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"8a9cc5282f4a44c6c2bec0bb9fc4b171\"\r\nlast-modified: Mon, 06 Apr 2026 17:18:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sc65d-1775650265387-f3cecb1ef287\r\ncontent-length: 458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (457)","md5":"8a9cc5282f4a44c6c2bec0bb9fc4b171","sha1":"69dedd1d1cba4b4b7a523a2feb7e32cb91760f10","sha256":"3df8a9dc25782bb35665f53d0098e3278e3be52cced0214f360e577b84a6cb2c","sha512":"ba653a9ab91f1e0b1158f8f1b387c883954bed7c0c0abd30674071bdf73e91a1d4f663256d9e92d1b3cd62e549451aae10aa2cf30361a7eaefa50d11b8dcedda","ssdeep":"","tlshash":"eaf097ff83c1a094485d5f7629b23c251477e5fc93a405a0c9444951ad290f2731ee82","first_seen":"2026-04-08T12:11:42.270038Z","last_seen":"2026-04-08T12:13:16.903665Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/login-CWDTIDNK-DhDUYE4b.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/login-CWDTIDNK-DhDUYE4b.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/en_US-762U7H2X-ioVsSyfE.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"login-CWDTIDNK-DhDUYE4b.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: W/\"baa5f0f7116deb709bd4b3a54c31eaff\"\r\nlast-modified: Wed, 08 Apr 2026 12:11:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zd6kk-1775650267258-8ae19503dfa5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9275,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9274)","md5":"baa5f0f7116deb709bd4b3a54c31eaff","sha1":"10c4efb11b9c1bcdd87aca0c0443f636c8d29b39","sha256":"63a8daf7039c537fe8d7ff88c50a6b8022e74f447d5df3ffcd6a515723252c33","sha512":"8d534b9541eb5d33576b4a5a2dbd28aadc57c01fc91ea3644bcfb13ad76470288c9ac8228a1fc8d6f30ca5873abb0c3b20136d5377bdb9923c3ff6665542b4bc","ssdeep":"192:dyAYirZ2ixxPjwzSFW5xrsRo3/58dmho4x7MV:EiN2Qjw+FWjARaidSpx7MV","tlshash":"261283ea5768627ed89bce6cdf668840130d70fd35b8c8e49a9ecf686057c89fd87010","first_seen":"2024-12-25T05:30:42.593071Z","last_seen":"2026-04-18T12:51:34.197248Z","times_seen":77,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/use-on-connect.hook-BB24Jxr_.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/use-on-connect.hook-BB24Jxr_.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/home.page-CQ4lc89L.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"use-on-connect.hook-BB24Jxr_.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"b502d441ce759e7334b1797026811ecd\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7sgq9-1775650265432-6cad315677d7\r\ncontent-length: 654\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":654,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (653)","md5":"b502d441ce759e7334b1797026811ecd","sha1":"d6c194acaa9d12e2f48f72cdc8368d2d12b97df9","sha256":"76397576d426828df6ed921f2848e2dfad391ed13b708237cd2aebf0e9685855","sha512":"72e2a656e0231732c8acf264f464063c0e27b026b1a18c5481c2b0b240f6fa1433b689e7f2c1c9c1216867bbc02b02ad79fd4038cd60542df3f00740177444fc","ssdeep":"","tlshash":"3ff0d39590c5c2f8931bdce5c439a77e0a311ad87145c6c8dcae4d275691dc0801ea07","first_seen":"2026-04-08T12:11:42.273854Z","last_seen":"2026-04-08T12:13:16.921273Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T12:11:04.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ndate: Wed, 08 Apr 2026 12:11:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::k9nn6-1775650264792-65a4b84677ca\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":39913,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18567)","md5":"352c78c3fbb573cb565c35377f5c1f45","sha1":"5ccad45b713608b3031969ef36e04f1a3d16c7f7","sha256":"c8a42a903739021ba87926296769b55b83e509635d289d7e97b9217b302a96e2","sha512":"8431a7923ed7717a3374c35ad3bbc322fce955f9c3439172154b6f8c3864e70ef40bff4289f5cf58b4a9bdaff29ce63719a99f0ad6f88fe8cba61ba9f9b9082e","ssdeep":"768:2AIwk3bTyfMoMmf8pv5uoF+ZFYfL3RdFFA8J/ln:tfMoMmsxpnz3RSc/ln","tlshash":"82034cf1c420d5b616222fa8e6323d99a1d721da4b18849cf05cc55d2740dff8dbbdea","first_seen":"2026-04-08T12:11:42.276218Z","last_seen":"2026-04-08T12:13:16.911291Z","times_seen":2,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":50,"dns":16,"connect":1,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/vstack-CV5WDr8X.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/vstack-CV5WDr8X.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"vstack-CV5WDr8X.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"a986df47f307fdd55f4fb20ab158ba00\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k9nn6-1775650265388-7716934e80c6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32755,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32754)","md5":"a986df47f307fdd55f4fb20ab158ba00","sha1":"79b7af2da01eb1e81e93c7864297baaea8e37517","sha256":"d86839e49e60d5b15121908dad7fe301affa3d9ddfa08269a9ff7189ebceed3b","sha512":"8d46265883b9fc378024b297011a8fed2e81f257625ef9d750a5d87c04dae644e335a72b66f7c96ad70f238ae0b74fb919e2a3fdbe810b9314e1c4fa69b485db","ssdeep":"768:HsHWUpDTugn4fMqCgSknl5Qn1upQLpOFZDPTKyPZmZA5J4hdrW:M2bC1YczpOb2Z0J4i","tlshash":"e4e2f9a132541408f6afc7aef8c61f48c13916335413fccab67c8aa8d1517b91b6bb6d","first_seen":"2026-04-08T12:11:42.278509Z","last_seen":"2026-04-08T12:13:16.926438Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/hstack-D3Skbdn6.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/hstack-D3Skbdn6.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"hstack-D3Skbdn6.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"bc8ddbc80f28fb32894654ca8ac39786\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::b5flj-1775650265389-4556b026e9b0\r\ncontent-length: 473\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":473,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (472)","md5":"bc8ddbc80f28fb32894654ca8ac39786","sha1":"de29f72127bd40a16212187ec3a974a3733889f9","sha256":"98b2f888530648b54dec6fe177f54c96f3f3b34fed37230cb8436ee92f9f952d","sha512":"86943ab7e846f61bf5e7e08a3445c386ad7f00d921fea4f44edc94e8fda47a90990790ee37d23b77214d818d2fffa6c26c0b7cebc109b464b065e949951d0584","ssdeep":"","tlshash":"1cf0d4666441b1b003e5dc5461e6535945de5f9cbb7151c4d0ce8c4e36102c1939ba89","first_seen":"2026-04-08T12:11:42.280112Z","last_seen":"2026-04-08T12:13:16.911958Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/portal-config.context-DngNjrFl.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/portal-config.context-DngNjrFl.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47142\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"portal-config.context-DngNjrFl.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"b12ce6156cf6dedbe0536c46b8df107b\"\r\nlast-modified: Tue, 07 Apr 2026 23:05:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mcbt8-1775650265391-3758c22e9831\r\ncontent-length: 351\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":351,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (350)","md5":"b12ce6156cf6dedbe0536c46b8df107b","sha1":"4465d4a3f5e4caf7c27c64d6303d69d241ab0c48","sha256":"8800a95bda6985619e76c1a7fc3dd58aff7ea0dcec615d76bdb6c5e95319149b","sha512":"84db024bbafe1de521ce122eb871a16e19fc99114d97ad794afdd4fc63453f2b7b319ab5e213c964e7e4d10352eb20a5b530d8679558837947b872dbe21e27e9","ssdeep":"","tlshash":"a7e0689b6080f67266034de118204534d733286a31258b70c018891abac00e2263f8d2","first_seen":"2026-04-08T12:11:42.281459Z","last_seen":"2026-04-08T12:13:16.920655Z","times_seen":2,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/wei-D7GVSARS.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/wei-D7GVSARS.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"wei-D7GVSARS.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"e065176194127ef3104fbc14e1bd3b00\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mcbt8-1775650265397-ea82a53f82d4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":32145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (32144)","md5":"e065176194127ef3104fbc14e1bd3b00","sha1":"039b4c635defe3279321deab3fb61f072e7d065f","sha256":"c3902c83d4f8bc61033b89f57529565f14d42ea0f041b9fdb5b9d0fe5c9475f4","sha512":"1d9acde4385221d0bd76124b774e59d581c7a9e8eaa324a63bc40d745f745db6ffb406267281105ecb9904d77d0e98a3b2ecf72ac19019f2515952270c534c36","ssdeep":"768:c694VJ5YH/os7Dwz5yuLKkyp0rxY5T0ztsZ:c69cXQos7UEuzi0Gku","tlshash":"1fe2c5e972a2f18663e734f201fb9446f13a7d44990d05b5f2088af53cb1686b32af75","first_seen":"2026-02-12T20:37:44.896165Z","last_seen":"2026-04-08T12:13:16.924687Z","times_seen":6,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/bitgetWallet-CLYTW54T-Wwn2QYd0.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15453\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"bitgetWallet-CLYTW54T-Wwn2QYd0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: W/\"c209ae7e667ef953a67fd9e02e026122\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::w7t88-1775650267258-8486f9f38e29\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3493,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3492)","md5":"c209ae7e667ef953a67fd9e02e026122","sha1":"263c559b9b3d0aa0da8a7ea36790983dc7a0821f","sha256":"1f5ce5ae5b81eeeb68a411dc27cbdeadab04eecff9fca4447d20755e6b770e46","sha512":"6daddffb9e9d093649df98bcb5d7737e9fa7687dac1308a4710689c88076d5dc81b7de5bbfe7abf7a3910d9f53c331207b153b9f582c2eafa4717e553cc07f58","ssdeep":"","tlshash":"2571a791d7f5e09f6b1803b6ff9a14e79432f4e641140b9de55e3361200ee23e91f554","first_seen":"2025-04-09T07:08:13.379631Z","last_seen":"2026-04-08T12:13:16.922421Z","times_seen":30,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/injectedWallet-H7LYKTQS-CAHJNGc-.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/injectedWallet-H7LYKTQS-CAHJNGc-.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15453\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"injectedWallet-H7LYKTQS-CAHJNGc-.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: \"d15e27dd16cca201d14667c3af8cb320\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k9nn6-1775650267258-250167f3c14e\r\ncontent-length: 685\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":685,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (684)","md5":"d15e27dd16cca201d14667c3af8cb320","sha1":"a2a412c0b28c967d51856bd18a3f5b1a039cbf94","sha256":"db58171c5bda95e8016d892b4692c77c4f7644fe1fd3ee9b6ac1f561e867aec0","sha512":"20a745ee7cfac75a1160058128403ca4639ca13460191bceb426a295e6ad64e72d63343c73565dff68a719fb7590fe12853a1b213c9a1e0d33a24d2e0937225a","ssdeep":"","tlshash":"fc01f476d22cd45dc91dc36cfd6e68f3234961e6611f4328755c0f2ea2194cbec1e264","first_seen":"2025-04-01T04:17:39.059491Z","last_seen":"2026-04-17T09:09:52.492445Z","times_seen":34,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/logo.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.30.167","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /portal-assets/espresso/logo.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Tt7eoGRrU/51l++OTFkZ4xDFm2cdUSbV4KyXi59OlQTvyTyj+j7FeZM0p7f1IKLX2Or/uDqsMJMIIbqykmeot+0J1nx0lt6T\r\nx-amz-request-id: 2HFRY86KT74BAVPJ\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Wed, 12 Nov 2025 16:32:20 GMT\r\nETag: \"e7d57d12734f150bf16762985f60e68f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TqihulMH7zzidS_xLcOiP5lydJnvVth2\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 10123\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":10123,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7d57d12734f150bf16762985f60e68f","sha1":"8b9e922d3d6cb0e595f06f9be854993143e08c39","sha256":"fff37441b6ebebe425ac73d7370e23f99ef080363dde784aed0d5ab0d2f6d67e","sha512":"c3e6515d8895a288314112f2e450bbac693526a28f7bd3aaeb993e2cb6c387e15b6ae1a666e4c91db478c84ae041786c517745a1f58a7bbf618ddcc14661660c","ssdeep":"192:8+g/3Z39WicEGuje62Ar97zpAa2OiVv4218mT5Uq/ww1y:ng/3xQieuD2AZBAPPy2FTfBy","tlshash":"0d2296da6be8f3f1d506f3e2c65a4078ba2b70f56d66cb18cba52d55aa1045fc884cc0","first_seen":"2025-12-28T18:47:24.370223Z","last_seen":"2026-04-08T12:13:16.923463Z","times_seen":27,"resource_available":false,"data":null}},"time_used":786,"timings":{"blocked":330,"dns":74,"connect":94,"send":0,"wait":120,"receive":1,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/fonts/pp-neue-montreal/font.css","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /fonts/pp-neue-montreal/font.css HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"font.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"06a742c22b0005eafe0d72949986c872\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mcbt8-1775650265239-8abd9d78f196\r\ncontent-length: 366\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":366,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06a742c22b0005eafe0d72949986c872","sha1":"7e6b09f65a487e57f1657b8ad3e509cb54668c30","sha256":"142077c071782b435c1b5d3832094d4c6c23a568c3913ee5ff28a8a9a6753fa9","sha512":"b09ea3eb943e0f136a6a966599776358761b62cfed183063b4a367961f0224b47d668b292eadd08273c59415d62e9e6f80b6990ce9fa1fa7cb906f2363ffe93a","ssdeep":"","tlshash":"d3e08690199ba600e6260c86738f9f272d5d08162052d5be6f7b68489df78b173d1f4f","first_seen":"2026-04-08T12:11:42.287908Z","last_seen":"2026-04-08T12:13:16.924098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/config-Nm9I65CH.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/config-Nm9I65CH.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-Xknqg8tm.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 154381\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"config-Nm9I65CH.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"fd5bddc7a13a2b67c031704794b582cb\"\r\nlast-modified: Mon, 06 Apr 2026 17:18:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7sgq9-1775650265389-3258f967c1ff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":47296,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (47295)","md5":"fd5bddc7a13a2b67c031704794b582cb","sha1":"5b6d6d6a49fc659675b2b0bbba2b05465a588001","sha256":"cb8ad87afb8501ba09b2ddb8c836a1a0ef77e627c1969cf8705fc0040fd92253","sha512":"033e374c21bda7c61fe7eef2fa2de5f9b6d65a53526a7f953a7e3ed5ae62ce1bb0a47f7053759885579c16efa0743c0c4373baf80a938699f9c1d0af90a23acd","ssdeep":"768:0KfTpTKhov8i1Mj0T29B/Iv4Gz5Fy9Mam/Lj7CW4k/fE+Rikfs9GVG8G8kzlHMGQ:55a0T2TQCh9Gg8uzlHfv2d1hx","tlshash":"4523a7ca7186b2162be2d1a4483f4015e2396954780e846cb5bdddd3bd72c8ee17bf38","first_seen":"2026-04-08T12:11:42.289051Z","last_seen":"2026-04-08T12:13:16.909833Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/base-modal.component-DCuTse0x.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/base-modal.component-DCuTse0x.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/home.page-CQ4lc89L.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"base-modal.component-DCuTse0x.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"e5f580fae6b2962739409231347be634\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sc65d-1775650265430-8ae2458ff7a7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8009,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (8008)","md5":"e5f580fae6b2962739409231347be634","sha1":"52b3b501e612ca82b83ec78763776382fe1ee4df","sha256":"61013333221c082c5b806b341e6f92ae35f3dec714fd692d65c9f29af068eca8","sha512":"2541729fddefb37039c0fe5ddb35de49b5b51835e314a0a9a2f5d0cd61815b022e4663f98a08b7682e8dddbe2f91fe74cbb6dfeb52e840ed8b3cf1ec0577aa61","ssdeep":"192:1pa6OSUazs+Is14LFFe265zhvSZu8apcidPgY4C4S0S1n8Z:vpxUazs+Is12FJ65zFSw8apcidd1M","tlshash":"2df1c91da24ea568f83fc149e0edd64a956e103cf7368a90b2fc952e01d4e42722ffd0","first_seen":"2026-04-08T12:11:42.290262Z","last_seen":"2026-04-08T12:13:16.910622Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/proxy-rm_CbHRD.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/proxy-rm_CbHRD.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/home.page-CQ4lc89L.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"proxy-rm_CbHRD.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"cb24a4e4c172e647f561b0e74e74aef5\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mcbt8-1775650265430-6775717bdbb8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115479,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39601)","md5":"cb24a4e4c172e647f561b0e74e74aef5","sha1":"b5135b0c9b909697f0eb49b19fdf9bf58928314f","sha256":"834b0c535378be30a8382624280b64706b45c7f486a87380916be203878b82a6","sha512":"d7eaff85f116dcbdacf71761441e5fe1a912638f56cf0f8901b5246fcabecdec66f2d2ede7740f7ccb02e55ea1bc2b8984e4c01817b4e648fb8872e781820513","ssdeep":"1536:Z+2TsGd6fOmBgDHte9/Q3t/v5ScoeyUK8wlZWJDFV8lovCt5VyF6Puktr/:Z+2Tdd6WFteRQ3t/vscoJUxwlMIwqr/","tlshash":"39b307c572917561d3d685e9c0bf0b41b73718983009c0bcb63dadcb6d2240aa6bbb7e","first_seen":"2026-04-08T12:11:42.292071Z","last_seen":"2026-04-08T12:13:16.903004Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/favicon.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.29.212","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /portal-assets/espresso/favicon.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9YZs1bZ0NM2/Zuy1tDMYg9+DKmAZGUJNsL6FSTpMsTb/zCZLOYB9ZcSuaf6Gul7dX04L4X3+qi/LEru4uZqUSN3IDN/d+JTIS0KbjVOc9kI=\r\nx-amz-request-id: X27KD49F12H4B17W\r\nDate: Wed, 08 Apr 2026 12:11:07 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Mon, 03 Nov 2025 06:36:25 GMT\r\nETag: \"0e5690d3b329d727d3beebed48d6c2d8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: auKTxiUYoPRtGjfydffsemwNuvEyinOQ\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 2660\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5690d3b329d727d3beebed48d6c2d8","sha1":"46b9b822697390227617c5ae61b21db0bd9674cd","sha256":"99b5446fdb0675412588659f6eacf34bd66b95ddb4d340801d98d6b8f297a149","sha512":"bd902ea28f21257e5cecaf6d06b6a2585b0b937a8815b357b170f618e575343710c9a741c267176410640221cead59ad991db5e9e32b0ae74245618a29eea20e","ssdeep":"","tlshash":"3451ffdc361cd1854a5c6bcb9f5aa0791c26e1e0de8e8509ea442e1f38c5c6f6c393c5","first_seen":"2025-12-28T18:47:24.367929Z","last_seen":"2026-04-08T12:13:16.913402Z","times_seen":28,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":1,"connect":92,"send":0,"wait":116,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/rabbyWallet-FLVUU35F-BZrp4syk.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/rabbyWallet-FLVUU35F-BZrp4syk.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15453\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"rabbyWallet-FLVUU35F-BZrp4syk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: W/\"174b08de1e202256a72f7663e79b8461\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fcj47-1775650267295-32ce69d73637\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2370,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2369)","md5":"174b08de1e202256a72f7663e79b8461","sha1":"602e294d94f061211502895741144c4320248855","sha256":"0767c9b588d0ab9b532619b26d91fe6e5163f541bcc2d6a9e9adae18f670dc8d","sha512":"640ce4e8d836b4ea90ace61f30c3cbe697e7d9a7d6d04c4b4a4e0f1845f850754434d0415ee9f3a7ec0856d679fe14679d1548d99385bb887a205fb0ab6d3b1f","ssdeep":"","tlshash":"594183e8eb38e993edadc67cdf19a475310e30ff909441a551d65b1e30646d33e0a650","first_seen":"2025-04-01T04:17:39.073172Z","last_seen":"2026-04-10T09:11:01.513661Z","times_seen":32,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/walletConnectWallet-FNSU4KNU-B0ci71fU.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 15453\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"walletConnectWallet-FNSU4KNU-B0ci71fU.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: W/\"05a8359b297686a38136a26a10311301\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zzp42-1775650267258-0b8a19a9268c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1513,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1512)","md5":"05a8359b297686a38136a26a10311301","sha1":"5d995f91f19bdd38e876708ea756b76ad53ce55c","sha256":"ff6da22ac4da1356c60264b8a4ca0e3bf79b026e16220dfac81cf1058e40160d","sha512":"28ffda0d4b0fcf35ec80c90c3bfc90103685a5220858159a9016588568e808550fb18e8b2d8ee45f72817087723c842ad4f3872adf933ef1da6267d6cef4fdbb","ssdeep":"","tlshash":"1a3115ef6be412f4d017e3a3d01590267ddb24ba7729ef44421b4ae0ae0149d64c8d78","first_seen":"2024-12-25T05:30:42.591141Z","last_seen":"2026-04-18T12:51:34.184449Z","times_seen":71,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/home.page-CQ4lc89L.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/home.page-CQ4lc89L.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 154381\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"home.page-CQ4lc89L.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: W/\"a6108f031eda298eba72ce55b6e1dcde\"\r\nlast-modified: Mon, 06 Apr 2026 17:18:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k9nn6-1775650265344-fbe200f4b701\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13771,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13119)","md5":"a6108f031eda298eba72ce55b6e1dcde","sha1":"b5c90b714ccf9855148afd26f5c8cc3aa9a0911a","sha256":"9c847c97f5284d227c24fedacc0b9f56a64d30a5a42b26b2f4f9923c53ca9ed3","sha512":"31b9441e026eeb2a0db003ecfab380941bd3e71d53fc8d9098129cbbfc1cdab3b1645100a488e9d5e83cbcf7014a89e41a9e07dcb51ddeff5303c6e7778c42db","ssdeep":"384:jK2ny1HXl1VQ5iAkPVPlA75BR6ND0+PfNzcmD+KxuLhOaTI:O2ny1HXLVkiAkPVPlKR6NDBWKxuLhOa8","tlshash":"25522c4ce296a57ee6c345993577d128b3370668b27a8055d33f54360270dc2ba33bea","first_seen":"2026-04-08T12:11:42.29679Z","last_seen":"2026-04-08T12:13:16.930963Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/page-meta.component-NrTFCvUJ.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/page-meta.component-NrTFCvUJ.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/home.page-CQ4lc89L.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15464\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"page-meta.component-NrTFCvUJ.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"39a71506d268563490540e3cb0b113e2\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sc65d-1775650265422-01badb3cc073\r\ncontent-length: 803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":803,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (802)","md5":"39a71506d268563490540e3cb0b113e2","sha1":"b4e8fc049cf47278f65b55652e8e0bdcc8f80163","sha256":"58b0e16e1c260b61c676623b0f06d416c8859728b0cb8ac774448812062eaf71","sha512":"60cb7d9cdfedb22e00ccc78992a5709b43277b44909e1adac937b0b87b7bda83c3de0d4e33c82063d12e636ce6954840ef9513d6681bef6ebc7be9b5c7407eaa","ssdeep":"","tlshash":"05018969a910685b176ace010c5af24db07687bfc038c9a1b5a448390ff1fe7c07277d","first_seen":"2026-04-08T12:11:42.297907Z","last_seen":"2026-04-08T12:13:16.90732Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/warning.icon-D42EtpQW.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/warning.icon-D42EtpQW.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/home.page-CQ4lc89L.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"warning.icon-D42EtpQW.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:05 GMT\r\netag: \"056b67f2821776310782e05cac2b35a1\"\r\nlast-modified: Wed, 08 Apr 2026 12:11:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fcj47-1775650265430-9fd9363b1b4e\r\ncontent-length: 655\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":655,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (654)","md5":"056b67f2821776310782e05cac2b35a1","sha1":"5a48a8602fa800a194de6b21ab3e23ecb8de51a4","sha256":"b0a711748f2a8a3fa3c83818c24c34ca1483e3d07b667ca103fd225816e2f460","sha512":"8648183cd30aa6d2eba731d3fdd7eb254bf949b8ecdf62f3b222acbb31c1db609cd7df65001017eee9c463d51cd1e1df142f25962436d576963aa3c041b81250","ssdeep":"","tlshash":"25f0fe76e3f429b87505cea8634f39363177a4a8b7014641a35e580463a00c5b5ae9d2","first_seen":"2026-04-08T12:11:42.298975Z","last_seen":"2026-04-08T12:13:16.916266Z","times_seen":2,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"magna-public-assets-prod.s3.amazonaws.com/portal-assets/espresso/favicon.svg","fqdn":"magna-public-assets-prod.s3.amazonaws.com","domain":"magna-public-assets-prod.s3.amazonaws.com","tld":"s3.amazonaws.com"},"ip":{"addr":"3.5.30.167","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:05.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D4:87:03:14:FE:12:27:46:E3:63:CC:7B:43:A1:D0:D8:B9:17:AF:7D","sha256":"7E:BF:42:63:5D:C3:2B:CB:97:F6:0E:38:3E:E1:F8:63:39:AA:CE:A2:39:E1:56:B9:8D:74:1C:79:12:67:14:36"}}},"request":{"raw":"GET /portal-assets/espresso/favicon.svg HTTP/1.1\r\nHost: magna-public-assets-prod.s3.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: QfNY1Nha7nSGFAbxJ45aSQ2khTJoFE+5DgqTJnvW9enqa4tOYkKp/2AttgwLqriC+dk5R7acZNLq2udoZAnfcXoOU2+0Sbun\r\nx-amz-request-id: 2HFPSFP4WWPYXXEQ\r\nDate: Wed, 08 Apr 2026 12:11:06 GMT\r\nx-amz-replication-status: COMPLETED\r\nLast-Modified: Mon, 03 Nov 2025 06:36:25 GMT\r\nETag: \"0e5690d3b329d727d3beebed48d6c2d8\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: auKTxiUYoPRtGjfydffsemwNuvEyinOQ\r\nAccept-Ranges: bytes\r\nContent-Type: image/svg+xml\r\nContent-Length: 2660\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e5690d3b329d727d3beebed48d6c2d8","sha1":"46b9b822697390227617c5ae61b21db0bd9674cd","sha256":"99b5446fdb0675412588659f6eacf34bd66b95ddb4d340801d98d6b8f297a149","sha512":"bd902ea28f21257e5cecaf6d06b6a2585b0b937a8815b357b170f618e575343710c9a741c267176410640221cead59ad991db5e9e32b0ae74245618a29eea20e","ssdeep":"","tlshash":"3451ffdc361cd1854a5c6bcb9f5aa0791c26e1e0de8e8509ea442e1f38c5c6f6c393c5","first_seen":"2025-12-28T18:47:24.367929Z","last_seen":"2026-04-08T12:13:16.913402Z","times_seen":28,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/index.es-DHdwYWce.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/index.es-DHdwYWce.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 154381\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"index.es-DHdwYWce.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: W/\"0af0c7fab2ad547fefd0f0a450547a7e\"\r\nlast-modified: Mon, 06 Apr 2026 17:18:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4bmv2-1775650267019-37de89a3351b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":346055,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (53209)","md5":"0af0c7fab2ad547fefd0f0a450547a7e","sha1":"64d59c21d8bd3a1bbbb113aa4bd9ad2c34a7c710","sha256":"bba05f2a6903fa3bf862c23b17644c36611148e4e7b4321e3744b18f8e82e34d","sha512":"3464d64c18b60d3a9ba1f91b28f1ccb4f82b1173db8e5a68be9732909587daa292c70b4e79acab841319295daa4cc9592b36b49db215377c175947e060f6ac3f","ssdeep":"6144:QKozfXuuo9pepoE4y4++7o8IR4zHVwSbZnECpGNp6NokV:QRUnep4y4+kO4pwSbZnq6NXV","tlshash":"0c742b8473b6a47603ea95d9a8352201f23458683049d46cffbc6defae844854b3ff76","first_seen":"2026-04-08T12:11:42.300475Z","last_seen":"2026-04-08T12:13:16.904792Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/ledgerWallet-KZKJ5Q2S-DdZeAsds.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 15453\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"ledgerWallet-KZKJ5Q2S-DdZeAsds.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: \"717b03058e9eccce29ae3a8f15544b1a\"\r\nlast-modified: Wed, 08 Apr 2026 07:53:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zd6kk-1775650267248-234a6c0322fa\r\ncontent-length: 443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (442)","md5":"717b03058e9eccce29ae3a8f15544b1a","sha1":"c2b626e64489c6f9084d3bad64c5fb73df88d797","sha256":"59642a8a9d30d9684f1aa6b4c8ca8886bf9a53491a3e238ad3aadac36f1917d9","sha512":"d339c57445af528cd655bad29dc18dbbf61ef6c5a8f6541b4735e8ef7ed872dbf173d22e3c67f976eb78bd25eb8b30a40b2613698d6ef9f24a485a61c7e9f6ee","ssdeep":"","tlshash":"b7f0abe64b508d00874a03b1cabc94c8313775eea758239cb2720619bd420afb90cbb0","first_seen":"2025-09-05T14:38:20.777264Z","last_seen":"2026-04-17T09:09:52.483064Z","times_seen":21,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"espresso.builders/assets/mewWallet-6V4UZOQC-B0qJRky8.js","fqdn":"espresso.builders","domain":"espresso.builders","tld":"builders"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://espresso.builders/","date":"2026-04-08T12:11:07.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"espresso.builders","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 12:34:35 GMT","end":"Mon, 22 Jun 2026 12:34:34 GMT"},"fingerprint":{"sha1":"80:15:37:7E:04:65:9E:67:4E:30:B0:E0:14:F3:12:B4:F0:1F:F9:F9","sha256":"91:1A:76:96:1E:02:09:FA:34:60:B2:27:3B:1C:AA:5B:77:F6:CB:58:FB:95:E5:AB:0B:04:85:BC:21:26:B0:9D"}}},"request":{"raw":"GET /assets/mewWallet-6V4UZOQC-B0qJRky8.js HTTP/1.1\r\nHost: espresso.builders\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://espresso.builders/assets/root-CLr5hmLV.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 27201\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"mewWallet-6V4UZOQC-B0qJRky8.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 08 Apr 2026 12:11:07 GMT\r\netag: W/\"0ba9b4ec5d6e0138fdc7dcea74d719b1\"\r\nlast-modified: Wed, 08 Apr 2026 04:37:45 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::w7t88-1775650267253-466b8427a730\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12987,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12986)","md5":"0ba9b4ec5d6e0138fdc7dcea74d719b1","sha1":"7e9a5254388ae9b05ccab215bcadfda7cbb92178","sha256":"cabb87e570e8e5c15a34eeb5c010a7651a3e878e76568fa8f274903a86c23047","sha512":"8bbc357ee098b1666e94e09a19e0b9711acc240227e819daa87a564a6a0ff456a338c4b61d83f68344063ce6c0ac09d7ef5e9ccb4c711aefc103562691a600de","ssdeep":"192:vSL2IcUA1oFBu/kyilFZl1s7tWld8YgsII9P3cO6+fzRXygn3IJigNnvMqDCdFIZ:vSL2IcUm/XwZvw0IGrCgivRhilI","tlshash":"9742c5d0332c53f9f507c3a9a7aaa0569a7c30da3daf5158f64f05256b144fa883f843","first_seen":"2025-12-31T12:33:59.905722Z","last_seen":"2026-04-08T12:13:16.929881Z","times_seen":17,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"espresso.builders","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}