{"report_id":"fd59d43b-e414-4d64-a451-88cf47ef20df","version":6,"status":"done","tags":[],"date":"2026-02-16T17:17:23Z","url":{"schema":"https","addr":"unisocks-fi.xyz","fqdn":"unisocks-fi.xyz","domain":"unisocks-fi.xyz","tld":"xyz"},"ip":{"addr":"172.67.163.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"unifinances.pages.dev/checker/","fqdn":"unifinances.pages.dev","domain":"unifinances.pages.dev","tld":"pages.dev"},"title":"Unisocks Exchange","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"unisocks-fi.xyz","fqdn":"unisocks-fi.xyz","domain":"unisocks-fi.xyz","tld":"xyz"},"ip":{"addr":"172.67.163.195","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-23T17:17:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-16T17:17:00Z","timestamp":1771262220,"ip_dst":{"addr":"172.66.44.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35612,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-02-16T17:17:00.615343+0000\",\"flow_id\":1243669269840095,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.22\",\"src_port\":35612,\"dest_ip\":\"172.66.44.92\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"unifinances.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3474,\"start\":\"2026-02-16T17:17:00.590047+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"unisocks-fi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"unisocks-fi.xyz","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-08","domain_rank":0,"first_seen":"2026-02-16T17:17:24.347436Z","last_seen":"2026-02-16T17:17:24.347437Z","alert_count":1,"request_count":1,"received_data":17138,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cloud.umami.is","ip":{"addr":"104.26.0.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-07-18","domain_rank":524054,"first_seen":"2022-11-15T19:45:49Z","last_seen":"2026-02-15T02:49:34.299672Z","alert_count":0,"request_count":1,"received_data":4096,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"socks.uniswap.org","ip":{"addr":"172.66.0.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-11-26","domain_rank":0,"first_seen":"2020-09-24T20:15:41Z","last_seen":"2026-02-16T04:00:57.450382Z","alert_count":0,"request_count":1,"received_data":153695,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"mainnet-chain.xyz","ip":{"addr":"172.67.208.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-11","domain_rank":0,"first_seen":"2026-01-30T11:40:36.168307Z","last_seen":"2026-02-16T04:00:57.684712Z","alert_count":4,"request_count":2,"received_data":3588305,"sent_data":879,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unifinances.pages.dev","ip":{"addr":"172.66.44.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-02-16T04:00:56.789844Z","last_seen":"2026-02-16T04:00:56.789844Z","alert_count":0,"request_count":2,"received_data":47141,"sent_data":963,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api-gateway.umami.dev","ip":{"addr":"104.21.29.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-11","domain_rank":261649,"first_seen":"2024-04-27T09:44:52Z","last_seen":"2026-02-12T17:21:05.571614Z","alert_count":0,"request_count":2,"received_data":2446,"sent_data":1059,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mainnet-chain.xyz/1.php","fqdn":"mainnet-chain.xyz","domain":"mainnet-chain.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8588274119af46921306c7976dba6946","sha1":"bb6e2d4f5cc0927ca348b465c080533645e2dcb8","sha256":"295090f036a5829cb3e6650fbc4f102bf20ed21ecbcc9f40365c76e529f3da5a","sha512":"c28e17fceb8bbe8c98cabfad403e6a32c528f9499f1c139680e599d308a55dc3a97621009d2ad5b28ad92bda6e323816919a0564c97c095b213e4a1ab0fee123","ssdeep":"3072:FKpiydya/q0flR9rPTRfBcR8GI6N8PK4KLgchjWypYOc:F6t1dVfKCG8PK4KLgchjWypYOc","tlshash":"8804a4d65da281ab7e19469cccf6ac08d4088d337f4de0e2e6defd842416f61c19a367","size":182996,"data":"","first_seen":"2026-02-16T17:17:27.99778Z","last_seen":"2026-02-16T17:24:52.783393Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unifinances.pages.dev/checker/","fqdn":"unifinances.pages.dev","domain":"unifinances.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7d610c203667c1540c59de668d5dc0dc","sha1":"5c4f34c783ab2ad8c68c6fa91c348dd98b0d4252","sha256":"9fdc6270476f2bb5096a6bb3f1f4de595ddc17d4e325479b17a72e29f147bfa7","sha512":"a0f02d8016e5fdd97a8418910b6b159e77ebd952483205f219f524272c62e0113c22e2e6edc696ecd06c83eaa26293361f9059cca89c3d2d3eed64db4c0355a7","ssdeep":"3072:HkjGENhLO4XvFDXTBnh0h8W4SFKK4KLgchjWypYcy:HADnqyW+K4KLgchjWypYcy","tlshash":"89e3a485df27809d8e68458dc1b6b949e8288d77cf4da4e3de1edcc4291ab7181c327b","size":156692,"data":"","first_seen":"2026-02-16T17:17:28.002974Z","last_seen":"2026-02-16T17:24:52.790115Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.umami.is/script.js","fqdn":"cloud.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"104.26.0.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97b0370b3ca09c7cee1d9812c9c11fc1","sha1":"24edf69a5ac397ed0fe72cea720f005a055c2b70","sha256":"95f8c65a2c5486ea5c21603e26f41ab2545ff9cd05e0406a4cad8469888637a8","sha512":"bd44fc5b5a55ba9dff6ec19515ae03786a3ee9a0facf9708570364f6848846c7aadbd9760a11c5696cadb10bf859ffc4a59977a4f19c4e26c4eb83906afc07ff","ssdeep":"","tlshash":"4e51b6f53185f0f17f692890d17aa620b93a2e72b81a48d0a6ff4c572a3e50e9431d29","size":2700,"data":"","first_seen":"2026-02-05T07:38:21.809415Z","last_seen":"2026-03-23T12:17:39.047194Z","times_seen":379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unifinances.pages.dev/checker/","fqdn":"unifinances.pages.dev","domain":"unifinances.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e60da6628dee46e79bc01513fad60f1d","sha1":"be5e0c27757c35ae2834339d63a382ed2a93c5d3","sha256":"6e7d936f0a9c769f8b11e736c1b213a3757d701eb6197099523725160d7a0a5c","sha512":"796f4c0c39bf5860ddb628bba4001e140cd73af70351fb8b58d7a533d9f1fa4ba2bf76a4ccbc8613845522027195082ce2145c041e937dbf883efddfd99b0881","ssdeep":"768:HKrZ8b2EczLelvW9FQi5c6QcHUcycY1l5Lcj5IhXsVUg0HcPn89/:uMsI5/Jd","tlshash":"752363e1aa5bd4e49e5514ddd037ec01e4281967ceacf293b92ceec2742df22858713b","size":47015,"data":"","first_seen":"2026-02-16T17:17:28.003821Z","last_seen":"2026-02-16T17:24:52.791059Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"socks.uniswap.org/static/media/test.a2def363.png","fqdn":"socks.uniswap.org","domain":"uniswap.org","tld":"org"},"ip":{"addr":"172.66.0.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unifinances.pages.dev/checker/","date":"2026-02-16T17:17:00.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socks.uniswap.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 06:21:43 GMT","end":"Sat, 21 Mar 2026 07:21:38 GMT"},"fingerprint":{"sha1":"51:42:17:D6:65:94:D1:F8:C6:42:43:9F:88:C9:FD:C3:02:A3:88:55","sha256":"28:FA:53:A3:BF:7A:F3:43:93:10:96:23:5F:05:F8:3E:4A:1B:BA:76:F6:F1:19:A2:11:B9:D1:A8:F7:22:22:52"}}},"request":{"raw":"GET /static/media/test.a2def363.png HTTP/1.1\r\nHost: socks.uniswap.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinances.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 17:17:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 152244\r\ncf-ray: 9ceeb230be5b0731-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\netag: \"a4a7999e94518fd2ba786bb8faea5bbc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=Q7zENJSZKLfrMz4uxqyU8JGNIs4JrGRvSASu8BxQVss-1771262221-1.0.1.1-g8I9kgzVlLDEghJWKFOPsQDfTZ.82kjOaGb9Wp2jsrKq0RbOYmN4qzBjwxT8pQXR5Fx5ggZ9M68yYtHiOCH_6bZo_L5bc1gPMRXWikNdH8U; path=/; expires=Mon, 16-Feb-26 17:47:01 GMT; domain=.uniswap.org; HttpOnly; Secure; SameSite=None\n__cf_bm=fcM6JtSf3E1Hw6IZj1xnKjiCHHu_9pkGS4GdCQlS54g-1771262221-1.0.1.1-pVXFTKFMDWkejDraTdhjQCj_aEhu04akVrzv3X3j4IqTbg94EqVB0_txvnEdt1MlvSP.C8vVOcIEc_qaLB2apZ1gVYJL9UlvwaUoN74yvNM; path=/; expires=Mon, 16-Feb-26 17:47:01 GMT; domain=.uniswap.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ejtpGW05PQ5NddeD8oGTEBgNkw28dPK8hKH%2FsBjm7uop9RIkvip5oM4yIhkJr%2FB4aNc6ZaNppUgntBgIQ3A1AERnGuw5MIcU4w%2BVK764byh%2BrD9Kba6WB9ifXQCDi7vGU8xsKA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nexpires: Mon, 16 Feb 2026 21:17:01 GMT\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":152244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 736, 8-bit colormap, non-interlaced","md5":"a2def36354de47526570226444bd954f","sha1":"fbce6a6e4ed441da06008294ce6e294e9830f3b2","sha256":"cc3819b5afa5d84c9a72d6e743798557e3fbeb908532b40dd577161b7d22297c","sha512":"6304ac7cf891f1a587d25459edbaeceb8106bf6b31a64262b605ff4c56d98c2ff2fd5ab37f5ab4d47ed2ef73d736d9be59ebba41fa7cf47deb0970a8949fe489","ssdeep":"3072:f0nO95AdRrGPmcKR6fdK06sABTYwk2YGo2PPLO0VL8P5bL:fx95AdVEmcfdVbwCGzPLFVLc5H","tlshash":"88e31241f5bea018d16a117ef6b9564cff4afa368d8221eae1b7f7494280e050c153bf","first_seen":"2024-08-19T16:05:03.870357Z","last_seen":"2026-03-20T09:34:30.341934Z","times_seen":45,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":53,"dns":25,"connect":1,"send":0,"wait":184,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet-chain.xyz/1.php","fqdn":"mainnet-chain.xyz","domain":"mainnet-chain.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unifinances.pages.dev/checker/","date":"2026-02-16T17:17:00.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mainnet-chain.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:41:54 GMT","end":"Sat, 11 Apr 2026 21:40:37 GMT"},"fingerprint":{"sha1":"34:4D:51:82:19:C1:58:48:59:F9:C2:F0:C4:EE:1D:21:8A:C8:45:D5","sha256":"D1:1C:5D:A4:22:F7:11:8C:83:0C:3D:F6:CF:2E:C4:89:24:E8:98:E3:1C:FA:37:FA:61:91:CF:2E:18:F3:93:C6"}}},"request":{"raw":"GET /1.php HTTP/1.1\r\nHost: mainnet-chain.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinances.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 17:17:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wp636FZ%2B5nbpeERcjJ0icaZ6UnlUwQY5tz%2F6I5GaW8RaiqH8iSbavGXFI45KAIn3WR0Sr7FqBaAmk1FGKgUza2UW7DwqtGL%2BMD63XE3vuNr7\"}]}\r\ncf-ray: 9ceeb2310d81370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182996,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8588274119af46921306c7976dba6946","sha1":"bb6e2d4f5cc0927ca348b465c080533645e2dcb8","sha256":"295090f036a5829cb3e6650fbc4f102bf20ed21ecbcc9f40365c76e529f3da5a","sha512":"c28e17fceb8bbe8c98cabfad403e6a32c528f9499f1c139680e599d308a55dc3a97621009d2ad5b28ad92bda6e323816919a0564c97c095b213e4a1ab0fee123","ssdeep":"3072:FKpiydya/q0flR9rPTRfBcR8GI6N8PK4KLgchjWypYOc:F6t1dVfKCG8PK4KLgchjWypYOc","tlshash":"8804a4d65da281ab7e19469cccf6ac08d4088d337f4de0e2e6defd842416f61c19a367","first_seen":"2026-02-16T17:17:27.99778Z","last_seen":"2026-02-16T17:24:52.783393Z","times_seen":4,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":96,"dns":57,"connect":8,"send":0,"wait":252,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unifinances.pages.dev/checker/favicon.ico","fqdn":"unifinances.pages.dev","domain":"unifinances.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://unifinances.pages.dev/checker/","date":"2026-02-16T17:17:01.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unifinances.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 20:14:59 GMT","end":"Fri, 15 May 2026 21:12:36 GMT"},"fingerprint":{"sha1":"5D:21:E4:EC:48:D4:69:AB:AD:C6:BD:B3:CF:2C:B0:94:BD:03:8C:05","sha256":"BC:90:F0:D1:C2:74:2D:B5:8F:C7:BC:E5:A8:FF:66:42:56:E5:98:3B:63:5F:67:BF:AB:9D:5D:28:31:A8:D7:AB"}}},"request":{"raw":"GET /checker/favicon.ico HTTP/1.1\r\nHost: unifinances.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinances.pages.dev/checker/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 17:17:01 GMT\r\ncontent-type: image/x-icon\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M0EwNy59Bh2vNLRonpglzTgWH9xEyntbObWNmkiT3iu9vQRPSPn9gLogv9js%2BydDTkQtsYqX%2FoYMNaNTL18NxpIuY9lRSAd7B68UqTUFK79zlSbpEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fe26595548cb269e1113e5c26adacb3a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ceeb2367f96370a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29033,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"43a45b405d8bcdba10d7029c47240001","sha1":"857d9c720188eaa1f67b7c38bd318a322dbd0053","sha256":"32a8d1bf26848369ca352a756462bf48920339f852158e5b279731fe26e5d943","sha512":"36c894d50b4da19a2439c63769ce79ec52c80a589ca5a9c92b0f41f6a059cf736384b5beefad64b387606627f05327d1a0ece6ba0aa068d0afa85d0acc506ecb","ssdeep":"384:R9l8BTamtPICnH61v1Rqj7NZt/dc4WHIjPGP5ButP78Qww5HgLSYNZw3FPGf+pH:R07tAMHu1R8FS1KPGBw7I6EKBG2pH","tlshash":"f5d2f156ea764d6b078ba8f324e46da33e33d522d4cfb3ad1ac14a2a4e957f10d04438","first_seen":"2024-08-19T13:05:22.106213Z","last_seen":"2026-03-20T09:34:30.340515Z","times_seen":44,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.umami.dev/api/send","fqdn":"api-gateway.umami.dev","domain":"umami.dev","tld":"dev"},"ip":{"addr":"104.21.29.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unifinances.pages.dev/checker/","date":"2026-02-16T17:17:01.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:13:29 GMT","end":"Wed, 06 May 2026 12:13:18 GMT"},"fingerprint":{"sha1":"FA:87:3C:DF:4C:D0:B6:8B:A0:C0:B6:84:77:CC:66:8C:8A:31:94:D3","sha256":"17:AE:89:5C:EB:BF:EB:42:BE:0B:FB:17:88:9E:98:75:B7:11:9C:3E:7E:FC:04:CE:F6:88:F9:0F:AE:BC:F8:94"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: api-gateway.umami.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://unifinances.pages.dev/\r\nOrigin: https://unifinances.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 17:17:01 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\ncf-placement: remote-HAM\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dyojdr5BXCV9QY3wVmJOXFxp7J7zbfNyKQojgM8HUvykJuSL0TLOuz%2BzV6FClkqxW5puZEa0QT0kEFFYEvIul5Xp%2B4k7UiEOfiwYjqRhIFJk4Vk4nQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9ceeb236f858e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":63,"dns":26,"connect":8,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unisocks-fi.xyz/","fqdn":"unisocks-fi.xyz","domain":"unisocks-fi.xyz","tld":"xyz"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-16T17:17:00.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unisocks-fi.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 11:24:44 GMT","end":"Wed, 08 Apr 2026 12:22:25 GMT"},"fingerprint":{"sha1":"42:FF:76:FC:6C:8B:7D:CA:31:A1:8A:97:04:5F:42:CE:50:BC:09:7D","sha256":"53:21:E8:3C:71:6C:0F:CA:1F:9A:4A:FC:F4:80:BE:89:35:E8:5C:DB:12:79:3D:92:33:02:23:0A:DD:FF:36:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: unisocks-fi.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 16 Feb 2026 17:17:00 GMT\r\ncontent-length: 0\r\nlocation: https://unifinances.pages.dev/checker/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2hbgQlWTl5SLXAS%2B2DFlNAZpQl2eXY0KJTa8DvgKWVENoOeenlxkGDHPlttZi872qKjRDNJoJ4Wvt715EN%2FDAUOq25nNa3ShS0kksSziTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ceeb22e6d725868-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16631,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T11:47:06.182466Z","times_seen":13373545,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":102,"dns":69,"connect":8,"send":0,"wait":12,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"unisocks-fi.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet-chain.xyz/1.php?m=2952103","fqdn":"mainnet-chain.xyz","domain":"mainnet-chain.xyz","tld":"xyz"},"ip":{"addr":"172.67.208.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unifinances.pages.dev/checker/","date":"2026-02-16T17:17:01.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mainnet-chain.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 20:41:54 GMT","end":"Sat, 11 Apr 2026 21:40:37 GMT"},"fingerprint":{"sha1":"34:4D:51:82:19:C1:58:48:59:F9:C2:F0:C4:EE:1D:21:8A:C8:45:D5","sha256":"D1:1C:5D:A4:22:F7:11:8C:83:0C:3D:F6:CF:2E:C4:89:24:E8:98:E3:1C:FA:37:FA:61:91:CF:2E:18:F3:93:C6"}}},"request":{"raw":"GET /1.php?m=2952103 HTTP/1.1\r\nHost: mainnet-chain.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinances.pages.dev/\r\nOrigin: https://unifinances.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 16 Feb 2026 17:17:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upBPlUdK5bHHbKIv4xPSXtAKHjOHRlSzksEF7xDaiDCePDpHVn8DQdqaKH0qKrcHrdDFO%2FmTJM7wwvJTsDV6DUprQ6EgZjnfK%2BHAquRrkcgk\"}]}\r\ncf-ray: 9ceeb236b96a24b1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3403803,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"45c8c1d0bc3bb9202e263d5dfb538370","sha1":"1230e2bca8e027734d1b79bca4cdd9e56cf1ed04","sha256":"1762267aba22a70ef8903d742d9f5c7bdf3c6deb1a0f3dd6046e871c4ee52dac","sha512":"51ef315740271dbdc021c2408dc00a43c2a1e76286c96ba3e325322f162c6ae806d592e6345b3f7f73255eebc195e8fdd9093fab1ba75c91f17e6e6e1c73c1ff","ssdeep":"24576:kV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdooM0u8Rvg:k7OwPEZJsdDg","tlshash":"21252300ad6bfd5a8f4cb7a5b0b76e0399511b42c8cd94dfa935edc021f827641dba0e","first_seen":"2026-02-16T17:17:27.999964Z","last_seen":"2026-02-16T17:24:52.785095Z","times_seen":4,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":22,"dns":1,"connect":0,"send":0,"wait":173,"receive":451,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"mainnet-chain.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.umami.dev/api/send","fqdn":"api-gateway.umami.dev","domain":"umami.dev","tld":"dev"},"ip":{"addr":"104.21.29.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://unifinances.pages.dev/checker/","date":"2026-02-16T17:17:01.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:13:29 GMT","end":"Wed, 06 May 2026 12:13:18 GMT"},"fingerprint":{"sha1":"FA:87:3C:DF:4C:D0:B6:8B:A0:C0:B6:84:77:CC:66:8C:8A:31:94:D3","sha256":"17:AE:89:5C:EB:BF:EB:42:BE:0B:FB:17:88:9E:98:75:B7:11:9C:3E:7E:FC:04:CE:F6:88:F9:0F:AE:BC:F8:94"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: api-gateway.umami.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinances.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 241\r\nOrigin: https://unifinances.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":241,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"d9cb6fb8-3903-495a-84d8-0fc05dd3d97f\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Unisocks Exchange\",\"hostname\":\"unifinances.pages.dev\",\"url\":\"https://unifinances.pages.dev/checker/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 17:17:02 GMT\r\ncontent-type: application/json\r\ncf-ray: 9ceeb237595ce0de-ARN\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\ncf-placement: remote-HAM\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nx-dns-prefetch-control: on\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BxH%2F%2F63iJHOVrijbyJLRM2%2FogYrpI0vvFjdSanRalUDMbYvB2j2YzWMuPQuLY0rgfUWH2mDfaSX8nxD5E6ikUwEM2KKnuN7KxufRCUDPd1X45h6SvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0a0e2840fee99f1e3e65e405a9611c03","sha1":"d9b43bbc2de7264aa741ecf66a85fdca8fbc79a6","sha256":"682a13e0bbf6543bc24603f289888b7d6ba1aff58b99699db5be54e781f3a3da","sha512":"ff668f2c4434085521a0903e7dd8c9f6230df49e8602a047200617b249cc636ca532c64e78bae3b1bd6a773cc04a5c1fb56e791f78dbddbe2d695f38c10501a4","ssdeep":"","tlshash":"61e0f1e7b54c1fe87aadafc80d60866d434c26f1266812fd70f020336ea4f972453168","first_seen":"2026-02-16T17:17:28.000898Z","last_seen":"2026-02-16T17:17:28.000898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unifinances.pages.dev/checker/","fqdn":"unifinances.pages.dev","domain":"unifinances.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.92","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-16T17:17:00.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unifinances.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 20:14:59 GMT","end":"Fri, 15 May 2026 21:12:36 GMT"},"fingerprint":{"sha1":"5D:21:E4:EC:48:D4:69:AB:AD:C6:BD:B3:CF:2C:B0:94:BD:03:8C:05","sha256":"BC:90:F0:D1:C2:74:2D:B5:8F:C7:BC:E5:A8:FF:66:42:56:E5:98:3B:63:5F:67:BF:AB:9D:5D:28:31:A8:D7:AB"}}},"request":{"raw":"GET /checker/ HTTP/1.1\r\nHost: unifinances.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 17:17:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bo9DQTwTshwyPVhvnX8nKeFZb3ddsca5%2BggC1odkimOYf7Te25QaQ3Py8sUA3WnikEOpuMrAy87MH5LuPgHA4DZL3LOhZJ7On3IYy0lSc90sgAS2xw%3D%3D\"}]}\r\netag: W/\"1bd87176c626f17bb4222d1d1658bfac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ceeb22efa59b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16631,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"cdf8514a1b2400068f875d7c25142dd4","sha1":"7171ca78d91e34dac2484f5325fccd1573d87636","sha256":"4ef9cffe78aa0f73d51f7c9415a56428f78647ec8c028688d5362cfb2667a253","sha512":"d6339f5b4310f93fda97dc6d8d5e3a449cc6a0b522ecd70a5c2fda149ac0f936ed739f3c85441370ff1d5abb64a540943410d81b26a61120fa304b69177e3217","ssdeep":"192:OH1zvokhoHiOoo1voPZkL0k7D0DaVdLX/AI3iZTorA4eqmoKEokbxT2Fd1c/1PaC:OH1zvoJdDE3vJFLc/1PpHs9xzY","tlshash":"7b72459708a300057953e8582be31b4e33a5d513d54bc96a3fdd6688cfcbae969d338c","first_seen":"2026-01-30T11:40:40.898665Z","last_seen":"2026-03-20T09:34:30.335051Z","times_seen":37,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":70,"dns":30,"connect":8,"send":0,"wait":59,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.umami.is/script.js","fqdn":"cloud.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"104.26.0.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://unifinances.pages.dev/checker/","date":"2026-02-16T17:17:00.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:45:05 GMT","end":"Tue, 24 Mar 2026 08:44:52 GMT"},"fingerprint":{"sha1":"83:8D:08:60:A1:62:9B:52:5B:D9:73:64:FE:B8:C3:57:C9:CD:49:7D","sha256":"A6:63:DA:E1:52:5F:EF:4E:CA:15:B5:6F:1D:11:D1:5A:8F:9E:4E:C5:57:A6:BD:F7:8B:91:35:6E:39:CB:F4:70"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: cloud.umami.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://unifinances.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 17:17:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1537\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 46026\r\ncache-control: public, max-age=86400, must-revalidate\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors *;\r\netag: \"a1e75470e626003713b18b1f1e721148\"\r\nlast-modified: Tue, 10 Feb 2026 01:52:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-dns-prefetch-control: on\r\nx-frame-options: SAMEORIGIN\r\nx-matched-path: /script.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::9gd5n-1770870560902-d0beabc1f414\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9hMr7lggFxbwMhABlBsYLs3hOs2pQwdFAGnfXdASih5Zurprpn0vKrm%2Fupl4%2FFAmdS3CNlwuyJPi2DkBZ4bcwsWVU24h9rzPjl5ofS8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9ceeb230da01acd4-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2700,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2699)","md5":"97b0370b3ca09c7cee1d9812c9c11fc1","sha1":"24edf69a5ac397ed0fe72cea720f005a055c2b70","sha256":"95f8c65a2c5486ea5c21603e26f41ab2545ff9cd05e0406a4cad8469888637a8","sha512":"bd44fc5b5a55ba9dff6ec19515ae03786a3ee9a0facf9708570364f6848846c7aadbd9760a11c5696cadb10bf859ffc4a59977a4f19c4e26c4eb83906afc07ff","ssdeep":"","tlshash":"4e51b6f53185f0f17f692890d17aa620b93a2e72b81a48d0a6ff4c572a3e50e9431d29","first_seen":"2026-02-05T07:38:21.809415Z","last_seen":"2026-03-23T12:17:39.047194Z","times_seen":379,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":71,"dns":33,"connect":12,"send":0,"wait":19,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}