{"report_id":"f711430a-3d47-42ba-afc1-6e26d9714b3a","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-04-28T14:23:42Z","url":{"schema":"https","addr":"mintcampaign13.vercel.app","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"title":"Mintcampaign","dom":{"size":85061,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2418)","md5":"1c0b2254c34f12917c6412d316ca7a05","sha1":"2d66ee9076674e755f9a235896846d6ebb27b8dd","sha256":"14cbc1839c85cccbfade44aca1d3df03e30162e9b3b8f1df2721ceccca908cf2","sha512":"d64c80415fe509f9968542f4c9985edf24378e77fb79acfcf856a8403e6d0b385a710dbae2fc825c4bea94823e1ec91bb2a7453cb4d2d844a12ad32b72cfa6d0","ssdeep":"768:QcAEOVFxLhXTrXXN19LHwvHe3Cl47WGvuCv1rkve0ehXTrXXN19LHcVT0BLD:jOVZrxHCHe3IbGjy+rxHWT0Bf","tlshash":"eb831af453f662f5b105d3d4daa6452a3b2650b7e942c624f3ed5bcc5fc288e8c4b848","dom_hash":"domhashb8aa6ce7e1ce5d8a1387c24480aa3036","first_seen":"2026-04-28T14:23:49.923293Z","last_seen":"2026-04-28T14:23:49.923293Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mintcampaign13.vercel.app","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T14:23:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-28","alert":"Detects file containing Telegram Bot API","trigger":"mintcampaign13.vercel.app/assets/index-4cbab871.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-26T22:35:53.043088Z","alert_count":0,"request_count":1,"received_data":1411636,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mintcampaign13.vercel.app","ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-28T14:23:45.035088Z","last_seen":"2026-04-28T14:23:45.035088Z","alert_count":16,"request_count":14,"received_data":3121734,"sent_data":6836,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/index-4cbab871.js","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"md5":"474b05874944bb2eb600f30668e6b9c0","sha1":"9290692df6466e970978ed8d1766eb00be8f0e4d","sha256":"795d189f1888b7e13354af74ab44356cbae24ce618ac04eef9bb59c46156f854","sha512":"befd65b2a3a2f4f214df323a0aca39cadaf1eed5703cb57a97bd859e6951bb449bbee5859b3d0d52b17272e24190bec00c9c673140c7dacad5e3ca46fe10eb4c","size":1022893,"token":"8022389324:AAE3c90RWU9Tt3thfDA_QGiYGUlKRR0Miyw","is_revoked":false,"bot":{"token":"8022389324:AAE3c90RWU9Tt3thfDA_QGiYGUlKRR0Miyw","user_id":"8022389324","username":"Minter90_bot","first_name":"Mintbot_linker","last_name":"","chat":{"chat_id":"-1003657541538","title":"Xygen group","type":"supergroup","bot_is":"administrator","total_users":9,"active_members":null,"admins":[{"user_id":8022389324,"username":"Minter90_bot","first_name":"Mintbot_linker","last_name":"","is_bot":true},{"user_id":6421731592,"username":"Williams5448","first_name":"Williams","last_name":"","is_bot":false}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac833e2f73af3c1b6f06bd571d412a65","sha1":"c02095c5b90aa482cb4ececc39706812e7891b4d","sha256":"993a5e2cca7f133ee0234d6a691002a62b68f2acdf39739756f1e7b57e34b4e7","sha512":"c2f98cbb3d3e8958863b56de9e57182448e52e4bddef04e63ec6b33e16380f3e61c1771beff112699476451075e1c0024eb3c7d43e1c1c11ff2077967036fef7","ssdeep":"","tlshash":"fcc012df3eab131006ce642745ae174c3830c00d4c4516052d788ae04961eb63c27888","size":191,"data":"","first_seen":"2025-04-28T13:51:37.805758Z","last_seen":"2026-05-03T14:33:13.070005Z","times_seen":1178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/index-4cbab871.js","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"474b05874944bb2eb600f30668e6b9c0","sha1":"9290692df6466e970978ed8d1766eb00be8f0e4d","sha256":"795d189f1888b7e13354af74ab44356cbae24ce618ac04eef9bb59c46156f854","sha512":"befd65b2a3a2f4f214df323a0aca39cadaf1eed5703cb57a97bd859e6951bb449bbee5859b3d0d52b17272e24190bec00c9c673140c7dacad5e3ca46fe10eb4c","ssdeep":"24576:kU6cV7WzSYIpgymQ+B8n+MqwWC/NMCotFdRQ1k:kU6cV5qymQ+B8n+MqwWC/NMhF3Q1k","tlshash":"a8254b8472a5b07143ee59e494771103f238bc14704980acfa6c9dff7ea9989967bf38","size":1022893,"data":"","first_seen":"2026-04-28T14:23:49.926415Z","last_seen":"2026-04-28T14:23:49.926415Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-28","alert":"Detects file containing Telegram Bot API","trigger":"mintcampaign13.vercel.app/assets/index-4cbab871.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"98aa30b83ac0d88a48253f9986b54b72","sha1":"353348e4e611b1ae538f4a010f2547d87987bf88","sha256":"1503a21c2184746d0cdfa7ec2f27db7c99d463084026b38a96982186d8dc100e","sha512":"e353e717e2a81d84551313f274c20539440d2c606eaee46e661148b9d79ba690d4781ebdc8623837e8bbeeada6470bcc307fb7c2dae655c7f866e06af7b844d9","ssdeep":"","tlshash":"8131e0d393330b7665d743d94ae3a4f82a1e140b1845ecb9bbecc6418f6318b180b9ed","size":1505,"data":"","first_seen":"2026-04-28T14:23:49.935535Z","last_seen":"2026-04-28T14:23:49.935535Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"37953b0f5bfb0e203e444fe51da5813a","sha1":"ca3b451484c3956f1ede29de389f4e4a681ee8f6","sha256":"79b76f87e396582e8948f4c7b1cabe9d9d8ed2c4d4dcf8e7ad22c74f6f83743e","sha512":"d78ab75bae4a3dd9d939d65fab5a1a53e9af9e3a54696a8e3bde392e99c6cb20f6fb30b499b0fed90cf2aef75e1cd96c2019ff912d208fcd2bdcd915684a6077","ssdeep":"","tlshash":"1d11661c7ff6204641b371aaa7dba00160343013314ded18ba4ca25a4fa6e20f8daecc","size":865,"data":"","first_seen":"2026-04-28T14:23:49.936539Z","last_seen":"2026-04-28T14:23:49.936539Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-10T22:55:43.951619Z","times_seen":741481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-10T22:55:43.951619Z","times_seen":741481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@1.7.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"554f2d7597d6d65dc63fba197055a465","sha1":"f1497fa3f34d0b0c8eb1aa70424a066d46109a00","sha256":"bced77707ea8c595e9fb9cf628ebbc131090b6e9fb9fd00c82b3b4cc0337f160","sha512":"0badd5d26173c25f0a5767d1cf440934a5f477df3beeeace2d252ae5652af2750e84397af6129d1abf6602f979ee4e3b18d8ea10c02d8ae7ecbc39e4ef1b3cfb","ssdeep":"12288:pROXC+/974QnTeams8H4mSj3u3YamsDaD3:pROl7VnTe54mSeYqo","tlshash":"2e65fac47690b091c3a36aa1402f900be33efd686c4c4169b757ecf71cb9a995527f3a","size":1410842,"data":"","first_seen":"2023-04-13T10:13:19Z","last_seen":"2026-06-27T06:19:27.274115Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bac31bcd407fcd38d2e48cf24a9ab39d","sha1":"8d17c7b7d88d0c5a2dbf47a4703e4945abdfadd7","sha256":"75c5fa95935867aadb97cd839c968e8e8c1fee1aae04c1f64e9bbaeb5b68bfe8","sha512":"6d23e1ec88301f2a21d09b4b92f5a09dd592d02de6eabdc1ad3beace4edba3952c9957b5819f5110020019108fb49f7702fc531d1d6f109db558b2f4dcf2bd4f","ssdeep":"","tlshash":"e441432132ba5e38eccb508b3f0b369d7021c01f9c8da914b06d02da0f50fa4587a7f8","size":2288,"data":"","first_seen":"2026-04-28T14:23:49.939451Z","last_seen":"2026-04-28T14:23:49.939451Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/NotoSans-Bold-f1700d35.ttf","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/NotoSans-Bold-f1700d35.ttf HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/assets/index-31f60fcd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 24194\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"NotoSans-Bold-f1700d35.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: W/\"823cee14eaf6d98a42455ec9aad5b29b\"\r\nlast-modified: Tue, 28 Apr 2026 07:40:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fkrs7-1777386200770-07133f974d6a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":557000,"size_decoded":0,"mime_type":"font/ttf","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T22:57:27.441562Z","times_seen":17826364,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/NotoSans-Medium-8af6a60b.ttf","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/NotoSans-Medium-8af6a60b.ttf HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/assets/index-31f60fcd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 24194\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"NotoSans-Medium-8af6a60b.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: W/\"079154e587f13d9f0a31e8c059cbe0b1\"\r\nlast-modified: Tue, 28 Apr 2026 07:40:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::78vw9-1777386200776-39ca249a741f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":554904,"size_decoded":0,"mime_type":"font/ttf","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T22:57:27.441562Z","times_seen":17826364,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3@1.7.0/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/web3@1.7.0/dist/web3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.7.0\r\nx-jsd-version-type: version\r\netag: W/\"15871a-8Ul/o/NNCwyOsapwQkoGbUYQmgA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1005479\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\nx-served-by: cache-fra-etou8220104-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 287193\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1410842,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63684)","md5":"94a3328674715e9dfae4eb13f1c588e3","sha1":"36980127125211058740c0880f085d8c2b6bf506","sha256":"c5b3113527d5243dfa353882485bea519cc12acdea45fe2492263a965a0aef82","sha512":"afde8f388503143aee0de810f11bd308166dd62c8b3fadbcc788a88a7b44b84f95a4a807bf1ab0d3a9d47b21d3d89a1b1b4603b86f17762414e8f7a61d35b684","ssdeep":"6144:zg+DJAm/CgZavLc/oMtjwVXC+5tnw5GeGYAvJhPd2qLxNXBThICNvmsHcca4mhd/:pROXC+/974QnTeams8H4mf","tlshash":"d125f9c47691b091c3a365a1406f900fe33ebd682c4c4168f756ecf72cb9a99552bf3a","first_seen":"2025-08-11T20:38:54.082545Z","last_seen":"2026-06-27T06:19:27.1008Z","times_seen":20,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":56,"dns":1,"connect":27,"send":0,"wait":29,"receive":86,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/index-4cbab871.js","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/index-4cbab871.js HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24195\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-4cbab871.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: \"786f161a5b1d3d1e2ef8de6a3480756d\"\r\nlast-modified: Tue, 28 Apr 2026 07:40:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jjcb9-1777386200204-758cddc1391d\r\ncontent-length: 290455\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1022893,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39444)","md5":"474b05874944bb2eb600f30668e6b9c0","sha1":"9290692df6466e970978ed8d1766eb00be8f0e4d","sha256":"795d189f1888b7e13354af74ab44356cbae24ce618ac04eef9bb59c46156f854","sha512":"befd65b2a3a2f4f214df323a0aca39cadaf1eed5703cb57a97bd859e6951bb449bbee5859b3d0d52b17272e24190bec00c9c673140c7dacad5e3ca46fe10eb4c","ssdeep":"24576:kU6cV7WzSYIpgymQ+B8n+MqwWC/NMCotFdRQ1k:kU6cV5qymQ+B8n+MqwWC/NMhF3Q1k","tlshash":"a8254b8472a5b07143ee59e494771103f238bc14704980acfa6c9dff7ea9989967bf38","first_seen":"2026-04-28T14:23:49.926415Z","last_seen":"2026-04-28T14:23:49.926415Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-04-28","alert":"Detects file containing Telegram Bot API","trigger":"mintcampaign13.vercel.app/assets/index-4cbab871.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/0_ZkmOIVPdrbOU6tFW-0452f6e2.gif","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/0_ZkmOIVPdrbOU6tFW-0452f6e2.gif HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 24194\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"0_ZkmOIVPdrbOU6tFW-0452f6e2.gif\"\r\ncontent-type: image/gif\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: \"f4d5a400de84b363e74b4fe46fab4adb\"\r\nlast-modified: Tue, 28 Apr 2026 07:40:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wjm4w-1777386200200-4c452c8807b0\r\ncontent-length: 263166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":263166,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1000 x 563","md5":"f4d5a400de84b363e74b4fe46fab4adb","sha1":"9775142f604e6d608ff6f942bc9fa8a2180f4018","sha256":"0452f6e29465260ea32f39ac04528ccec27680778e0dc18d58bd7029c20d4ba1","sha512":"4435ea6be50da7cdfd70dbb0aa9484242c6827a8ec7f55c721c8e7ff1e209ffb31056450709fc5b2e586ac26624f42eabec50e2605cace1b6fb9a7ecabfbeee9","ssdeep":"6144:FszEZ22I6ZqGjmUTHOSYgmSM7cqO+zuVhHW2itt09D:FszEZ22I6caRpmS/q8hVc09D","tlshash":"734412082342930def36d3735d694f4578e677c74ee2ecf3b0f174852b6985898a98a1","first_seen":"2026-04-28T14:23:49.927529Z","last_seen":"2026-04-28T14:23:49.927529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/IMG-20251206-WA0002-57104453.jpeg","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/IMG-20251206-WA0002-57104453.jpeg HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22158\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"IMG-20251206-WA0002-57104453.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: \"907c14fffc55242c72bce2fe014c86f8\"\r\nlast-modified: Tue, 28 Apr 2026 08:14:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pd9p7-1777386200200-e6645ade87c6\r\ncontent-length: 30208\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30208,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x766, components 3","md5":"907c14fffc55242c72bce2fe014c86f8","sha1":"66fddbbea3db9302003692edbfdb5e4025730ca6","sha256":"57104453a2b4b3b45d51c56c1fc3f7af8b501628a7056d338a646694bfab4200","sha512":"144727c7ba643cb987a861bbec071d3b058d0dd986a54ff365e2d06eea61df0a5f7b3086b45e9b08db0849145aacc07ee41c88f2867dff9066a79c0277b8448f","ssdeep":"768:ONk41CHplWIXloE9XzmJ4ZUZ3JBDmoRG7MQgWT3zMX7Q2:6CHialoE9XzdebVmoR0FxLz8Q2","tlshash":"67d2e09cbfb87446dd132379fc42126a781a7d41606931bfd50826c67b2ec7a6e284e3","first_seen":"2026-04-28T14:23:49.928757Z","last_seen":"2026-04-28T14:23:49.928757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/Telegram_logo-27829c10.svg","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/Telegram_logo-27829c10.svg HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 24194\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Telegram_logo-27829c10.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: W/\"73f9a0ede528882146ea4bfe2ae935b5\"\r\nlast-modified: Tue, 28 Apr 2026 07:40:05 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::csqtb-1777386200200-651a38d4019b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73f9a0ede528882146ea4bfe2ae935b5","sha1":"6b9013170b87afc220743bd14ace3bc5d5322f5e","sha256":"27829c103cfc0689ebf915133e6424a0a0bc1f97ddcd7e8784dd916d96f7a4d8","sha512":"9b5686c202edc6d2f1726ae0dbb56370a5b6d3febd96f8e6e99ab4c004b6eeec777e00b332adc66c1e26fc39b2bca5fafd853396d768a65c7d42f234aa3e5354","ssdeep":"","tlshash":"012132bae13f5c26e91cc7949fe4307a021d9c8db0a74274db816b4411951fbea28d50","first_seen":"2023-07-06T01:48:16Z","last_seen":"2026-08-10T20:32:07.353488Z","times_seen":1947,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/IMG-20251206-WA0002-57104453.jpeg","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/IMG-20251206-WA0002-57104453.jpeg HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 22159\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"IMG-20251206-WA0002-57104453.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: \"907c14fffc55242c72bce2fe014c86f8\"\r\nlast-modified: Tue, 28 Apr 2026 08:14:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jjcb9-1777386200834-2b60b8937a8f\r\ncontent-length: 30208\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":30208,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x766, components 3","md5":"907c14fffc55242c72bce2fe014c86f8","sha1":"66fddbbea3db9302003692edbfdb5e4025730ca6","sha256":"57104453a2b4b3b45d51c56c1fc3f7af8b501628a7056d338a646694bfab4200","sha512":"144727c7ba643cb987a861bbec071d3b058d0dd986a54ff365e2d06eea61df0a5f7b3086b45e9b08db0849145aacc07ee41c88f2867dff9066a79c0277b8448f","ssdeep":"768:ONk41CHplWIXloE9XzmJ4ZUZ3JBDmoRG7MQgWT3zMX7Q2:6CHialoE9XzdebVmoR0FxLz8Q2","tlshash":"67d2e09cbfb87446dd132379fc42126a781a7d41606931bfd50826c67b2ec7a6e284e3","first_seen":"2026-04-28T14:23:49.928757Z","last_seen":"2026-04-28T14:23:49.928757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/images/load%202.html","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/load%202.html HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::2wlsh-1777386200198-ba170ed41caa\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"e03bc5394e9059b3b9df7c3d67ff9611","sha1":"cd8a80642e58e360ab6ca7a70e144df1ddb2ba65","sha256":"aea550deab0a4696acb9b3bd75580276c218cd6d97f38d6b4122cf4cedfa8be2","sha512":"305cfed13165736eabd93b8671246fbee55e722b19c070da644fa9634b4afd7db67fdd22eb6d830eb712bb8957812d643ede77f656c817c01a98fda2005bb5b6","ssdeep":"","tlshash":"69a0240d07471d4d73c010001007033c30041033fdd0d5c414cd5704134c5cfd340043","first_seen":"2026-04-28T14:23:49.930436Z","last_seen":"2026-04-28T14:23:49.930436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/1-b77b97fe.html","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/1-b77b97fe.html HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 17918\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"1-b77b97fe.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: W/\"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Tue, 28 Apr 2026 09:24:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j8csb-1777386200199-e4640bf77f70\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-10T20:32:07.340214Z","times_seen":4799,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/images/load%202.html","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/load%202.html HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::g59nh-1777386200676-838c6ba8d4ff\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"6a6192e2f09d793213216dd3333953db","sha1":"9bd5a91639f343332edabf0ec5e65756727244cf","sha256":"6e45e1154117d39e6d163d57f852d93eede8ae5ad843d22da587efe92988869e","sha512":"6d3a182e016e5222ab3af6e2e8f66e85cefe93c64468025051a345a930dd7c0b5af3745554bf63f93c0330029d50781a02677f31958292435cc3b43aeea4cb6c","ssdeep":"","tlshash":"72a0110f08888f88b3802880a20222380020822abee2e208028caa3832c02cfe300083","first_seen":"2026-04-28T14:23:49.932014Z","last_seen":"2026-04-28T14:23:49.932014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/1-b77b97fe.html","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/1-b77b97fe.html HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 17919\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"1-b77b97fe.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: W/\"0a27a4163254fc8fce870c8cc3a3f94f\"\r\nlast-modified: Tue, 28 Apr 2026 09:24:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v84fn-1777386200676-bd8239995bb7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0a27a4163254fc8fce870c8cc3a3f94f","sha1":"f27cf04699668916346eee510eab7e5a17e83997","sha256":"b77b97fe780d35d18248abd1d2f42f444afbabe43f6abcd8fa8ebb3d47825eee","sha512":"552e388db389c5142d303ca531bbe6ec5706864a84e78b91a16e1169b45d08ac1b9b1df576055b86f3a0f9c6668fe3488e3664e191bc1978848594358a256019","ssdeep":"","tlshash":"6c31012b8b915e0ff14740113ac3b7425b59c9076207b63f3e4c9615cf8e466d1e3388","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-08-10T20:32:07.340214Z","times_seen":4799,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/NotoSans-SemiBold-e8c95204.ttf","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/NotoSans-SemiBold-e8c95204.ttf HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/assets/index-31f60fcd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 24194\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"NotoSans-SemiBold-e8c95204.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: W/\"47996efbbcaa36da783042b371e454aa\"\r\nlast-modified: Tue, 28 Apr 2026 07:40:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jjcb9-1777386200778-f03b89c6eedf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":556551,"size_decoded":0,"mime_type":"font/ttf","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T22:57:27.441562Z","times_seen":17826364,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T14:23:19.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 24261\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:23:19 GMT\r\netag: W/\"230863031330593a9f38a035745a68a4\"\r\nlast-modified: Tue, 28 Apr 2026 07:38:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v84fn-1777386199851-55db14d0d45f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":82784,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2151)","md5":"230863031330593a9f38a035745a68a4","sha1":"4d72ad50f178aa8e32b41988fc813979d8811db5","sha256":"dfa450a550bfe1effd085a2536513987e0a7e2c24721ad80b8102c4b0063c039","sha512":"97b9095a987160caaa9e398cbd0c803f16bb55c736abcdf6d2fbbeba20e9c8119b22458ee7b0c569d0b5b55b13a80c77fea1a8f31d485a5de4369210d98d2384","ssdeep":"768:pcAEOVFxAhXTrXXN19LHQvH+sFOZWGvOCPVrkPe0dhXTrXXN19LHcITvBLK:MOV8rxHiH+GLGDSnrxH1TvB2","tlshash":"82832bf553f563b6e102d3d4dba649263f2650a79842c924f3ec5fd85f82c8e8c5b888","first_seen":"2026-04-28T14:23:49.932962Z","last_seen":"2026-04-28T14:23:49.932962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":52,"dns":33,"connect":1,"send":0,"wait":11,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mintcampaign13.vercel.app/assets/index-31f60fcd.css","fqdn":"mintcampaign13.vercel.app","domain":"mintcampaign13.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mintcampaign13.vercel.app/","date":"2026-04-28T14:23:20.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/index-31f60fcd.css HTTP/1.1\r\nHost: mintcampaign13.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mintcampaign13.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 12627\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-31f60fcd.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 28 Apr 2026 14:23:20 GMT\r\netag: \"690102b2b76c953d216c23c6656cc4fa\"\r\nlast-modified: Tue, 28 Apr 2026 10:52:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zgl9j-1777386200198-a4d66b683bfe\r\ncontent-length: 3149\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11656,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11655)","md5":"d067bb3c3bfb8069e298e9ae8b227516","sha1":"02bdfecce377d275ec78dfe19c228f78041d140a","sha256":"31f60fcd2f99d72178f63f347b040d6a6c9ca2d606bbdba7e4252cf3aad34e5f","sha512":"6727bbe16dac8b974c919ac9f312c56fc2aabc7116541e188e0d80c754ef2b6b38046b038ab3fb76312a41444f54956b5e03c979b1ad8dd318f4f84178a127de","ssdeep":"192:dEwJ9NF0jjFZi9lev9gycGlHklhqG+blc:ioCv9gO0qZlc","tlshash":"d33252326625712cf93bd55678d096ce7024c103e2375baefa66393ac5cb1932b71bc8","first_seen":"2026-04-28T14:23:49.933959Z","last_seen":"2026-04-28T14:23:49.933959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"mintcampaign13.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}