{"report_id":"0045beed-9aec-4234-9191-a4d170d6bf3a","version":6,"status":"done","tags":[],"date":"2026-04-28T18:27:27Z","url":{"schema":"http","addr":"xexbestpro.com","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"title":"XEX","dom":{"size":26814,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20372)","md5":"f830983c091156937a64e5077eb7ad91","sha1":"6203fbfa14f09987834565da719150259c75627e","sha256":"88f987ad721b8f23959ab9066450974cdd1625688d8ef19235e5ded2f8da1c72","sha512":"6b87e46c281881b0eae11b471df630b7d2e786bc973fd93fa581a7aa6a4736d0b909f7eb3d7378a3bae1ecd7ba085f5120c68e3cf213a4d53aafbcb49f670dd5","ssdeep":"192:eeuT7KPY1P1hU/F4UcZCxfe72nfD3b92Fgx/FTsh0Fw0F10FOz0F+E+wiE28cuae:Y6NQZCx22lr/FTfFtFiFOYFbUpnCYS44","tlshash":"5cc268b1e1020aa246fb9dc5e4617e1e76d6f30f842ac9803abcd59a1fd3cf5f921064","dom_hash":"domhash791b141a9fcb6982eced843e234ce227","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xexbestpro.com","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T18:27:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":12,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:12Z","timestamp":1777400832,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53374,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:12.887195+0000\",\"flow_id\":1386930772141156,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53374,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":899,\"bytes_toclient\":6037,\"start\":\"2026-04-28T18:27:12.353380+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:12Z","timestamp":1777400832,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:12.909118+0000\",\"flow_id\":549940430398495,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53358,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T18:27:12.353311+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:12Z","timestamp":1777400832,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53338,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:12.915354+0000\",\"flow_id\":873239798637439,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53338,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-28T18:27:12.353151+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:12Z","timestamp":1777400832,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53342,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:12.921299+0000\",\"flow_id\":663022624334802,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53342,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":899,\"bytes_toclient\":6037,\"start\":\"2026-04-28T18:27:12.353234+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:12Z","timestamp":1777400832,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53332,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:12.928708+0000\",\"flow_id\":1668075036369615,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53332,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":899,\"bytes_toclient\":6037,\"start\":\"2026-04-28T18:27:12.352975+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:12Z","timestamp":1777400832,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53382,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:12.958483+0000\",\"flow_id\":2155712738260800,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53382,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":899,\"bytes_toclient\":6037,\"start\":\"2026-04-28T18:27:12.423744+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:13Z","timestamp":1777400833,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53396,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:13.112602+0000\",\"flow_id\":1165026991807012,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53396,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":899,\"bytes_toclient\":1634,\"start\":\"2026-04-28T18:27:12.596516+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:13Z","timestamp":1777400833,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53390,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:13.135413+0000\",\"flow_id\":937513984202862,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53390,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T18:27:12.596078+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:13Z","timestamp":1777400833,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53404,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:13.140141+0000\",\"flow_id\":1650933821872843,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53404,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":899,\"bytes_toclient\":6037,\"start\":\"2026-04-28T18:27:12.596683+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:13Z","timestamp":1777400833,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53392,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:13.148496+0000\",\"flow_id\":2950575430002,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53392,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T18:27:12.596338+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:13Z","timestamp":1777400833,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53408,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:13.162589+0000\",\"flow_id\":1003141084486524,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53408,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-28T18:27:12.596860+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-28T18:27:13Z","timestamp":1777400833,"ip_dst":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":53424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-28T18:27:13.208702+0000\",\"flow_id\":493246862085558,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.26\",\"src_port\":53424,\"dest_ip\":\"47.79.64.186\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"heco.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-28T18:27:12.675254+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"heco.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-06-19T02:24:37.940355Z","last_seen":"2026-04-27T17:19:20.417483Z","alert_count":0,"request_count":14,"received_data":2345580,"sent_data":6479,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"xexbestpro.com","ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":35,"request_count":35,"received_data":3540337,"sent_data":14514,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"webapi.xexbestpro.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":21,"request_count":21,"received_data":81292,"sent_data":10779,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.kraken.com","ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-04-03","domain_rank":854257,"first_seen":"2019-10-31T16:08:46Z","last_seen":"2026-04-27T17:19:20.285123Z","alert_count":0,"request_count":17,"received_data":159158,"sent_data":7739,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xexbestpro.com/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"451756440ca68ca1b27e08fdfa258302","sha1":"74504cd01875285434d7ef1b4b7c6b8a00d2b662","sha256":"30cb8d8f367cd34d3665a749928250088cd43b98be9f5743c793c4ef973fd7d5","sha512":"90f22b4cdcaf0b7a135466cf3d593f5a6a5c6288c6caa8d85e65ca98d8050b72b4a7ebd5a21007dbae607d31459dd290fb24a13f90831e473dd31613ed2e1d76","ssdeep":"","tlshash":"6911abfe191a602d6303405f976b7801643260f9000a185177cc9a9dbb9ab7dd0cfb8c","size":1048,"data":"","first_seen":"2025-06-19T02:24:45.900668Z","last_seen":"2026-04-28T19:33:36.679215Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"19a5d7d1ade3feaa08192c60e18ad06e","sha1":"e04b1dc5c8a67b5003caf5864cc17c4757e9d89a","sha256":"636b16b1cb26ec6d8b9a9369e17c3f983978e36ad9a499bb14215003de62090d","sha512":"efe6ebfd5f0d6475b9862921a0c4a5e3adbf254034527c71fef320ca7497a3a362030f2c04cb73ea3147eb5f87d7943b92b8a8fc64b0b3ca526eb6f965d33bf7","ssdeep":"","tlshash":"92c08cc4a0c76d202606765025bf38e490284027b8881b038c94d8682ea30b0c237e98","size":149,"data":"","first_seen":"2025-02-02T00:35:42.301728Z","last_seen":"2026-04-28T19:33:36.680677Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-06-08T00:50:34.090492Z","times_seen":664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-08T05:16:21.741287Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/charting_library/charting_library.min.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-08T05:16:21.679615Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-06-08T05:16:21.744552Z","times_seen":895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-08T11:27:23.68344Z","times_seen":5628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-06-08T05:16:21.785301Z","times_seen":1012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/en-fad3186f.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ee0aa9979231e441bba765bf0b3f6d4","sha1":"a7ebc9a8902b8846dfb126ad8365be0c4839ccfc","sha256":"65996f5aa608c26dd8f178672b7121ea9a44d355717b11b2516361d258f115c9","sha512":"df80fd6f49267800a1909616b543a83cc1562230db9b69118ed3317121bb5ff2814001c6f12c50b3d59d8a3192507ccca5c97a0590aa0ff2609f6dd64cdf5962","ssdeep":"768:9Y/4tZcEw/o7rKOdAFsifnAMC2rAaAMEVoP6+6sPG9q1mwO6fpk7aOLxO:9wponKOdebE2rdEVLsPWqqLxO","tlshash":"a603c6897e1a989a04f3536774ce6e1120f60ac28255881f4fedc9fd53d2b67a363b34","size":41104,"data":"","first_seen":"2025-02-02T00:35:42.29314Z","last_seen":"2026-04-28T19:33:36.6389Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-08T11:52:17.849047Z","times_seen":36463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/filters-78ce0663.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c93d3ab6485a831b6bdbe46cf0b5a804","sha1":"b98fc7b3776258900ec30f2b64cc6ef2d135f1f4","sha256":"9a2dcd43650683060f243038bb3cc8ac66f6861f89a1c432d5587099faf3fa2d","sha512":"c91a50fa5b54aab5644d266a27d48de2d52623035a6a71327aa7b8a3abe6ec1f5c6f6aa0d4980c0e760b73c943ba69a591476aca0b122a8bedcd5fb7ab7d27af","ssdeep":"","tlshash":"e96125edfcd7613756fa6ae9002c855172ceae20785e0e49f54bd041597388ce0bfb64","size":3448,"data":"","first_seen":"2025-06-19T02:24:45.734561Z","last_seen":"2026-04-28T19:33:36.640071Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/currencyItem-69dc0017.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"eb61a566e218a149dd68df005aab1352","sha1":"6115952faa45d8706e3d99c77ea727b5c92f8dd9","sha256":"18d7c4c9f1b2a857ceff701ca1ed6effe6558317e6587e556acec18d86a8c292","sha512":"56c24586a5093d4c97c06211641a7aa41985fba045cca9937cdad2da5dfe5a398bb3b469b5d4f44c36bff9fe1de895ce2c36fee1c8a0ba80b07208ae40337c79","ssdeep":"","tlshash":"2721df9aad02c7b1cabe946281bd4414131d7bda700185c1ebed148a37876fcd728a31","size":1206,"data":"","first_seen":"2025-06-19T02:24:45.764118Z","last_seen":"2026-04-28T19:33:36.660472Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-77fcdb44.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"be6df40b3e8eda9e3cf728cd083571e2","sha1":"83e915a410f1739b964ea695433a6c5130c93014","sha256":"ac8a877c285826fdbe79f20daa17d41aa34e9b7ceb0592b9e5cce3bfdaa673c8","sha512":"2dc48fac570f6bb7e9596dc14487b5cfd823c8ab22f9204d68c880ccd35dab1a64b6ced89b2e2bc2bd4a4dc1bb5736553da578e7799b5fa2c018d219e6cd69cc","ssdeep":"","tlshash":"4201fdf9fc0c8ebb0ea20a4042902600140a1fddfa1419f198867d661be4940d7ce32d","size":776,"data":"","first_seen":"2025-06-19T02:24:45.779468Z","last_seen":"2026-04-28T19:33:36.650336Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-06-07T17:52:02.029585Z","times_seen":525,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-08T11:52:17.849561Z","times_seen":38751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-e32aa1de.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"655c3f713e41926298350a3a6ce3b866","sha1":"503e001ddb55c616b4dca07046b80d29f1c65b3f","sha256":"213f6f1fd49a7677ab70e21204eb07269d389ed9ceca4b6fcf770290ba419ea7","sha512":"f0896768567bbf14226fbea8db0333fe651ea15590eeaa2a1007b36eddacd4d4fd161503d838b0f7d82df9db572899b36c8fe4a0d28e6121cbe3ac89013644dd","ssdeep":"384:+DcwS7VAjw7zeyndG7FY8tJfUlwCD8+AAgW6k6MjzprhlcYCO7sSyX:8dSnFmztJfU6fmvprhlcYC3LX","tlshash":"c852d862f9079a3cf5fba05140c80050b6697ffb501a89e2b9bc6d4a3356ef8b35d718","size":13897,"data":"","first_seen":"2025-06-19T02:24:45.762431Z","last_seen":"2026-04-28T19:33:36.662676Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-07T18:30:52.990769Z","times_seen":666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ff3b235d98dffafc7ed0aa1d332fb355","sha1":"35bbd3ec2bde01b19dd6008bdc1d0bc304046ba1","sha256":"9f4cfcc2c4a357fb7b59d31bd9a1a35d6d9c8a41ade4355dc36babe850200a46","sha512":"6f2615651114dab0460eff12675506e65047c70b496a26bed020c0f15fe38fce8b7b720d33ce8d097287fcca681a203eeb1693bd017be87eca21394b92a20385","ssdeep":"","tlshash":"e5c08cc4a0c22e005622641014af28e4a034402ab08d5b52cd99e84a3e620b0c237eac","size":148,"data":"","first_seen":"2025-02-02T00:35:42.28685Z","last_seen":"2026-04-28T19:33:36.684443Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-06-06T23:47:44.218976Z","times_seen":411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-06-04T04:33:14.487894Z","times_seen":440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-06-07T17:52:02.05263Z","times_seen":702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-36a2a4a7.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c188853dfc6cffdf97083825328b4c9d","sha1":"9f96cb169ecd6f4264ec2381f2dfabd6baec1fe3","sha256":"cc49710d81d13cdc7eb3347fa0b898f8393385bcf9de09584e49f8e6963982b1","sha512":"4adfb9006bb33e52b790a78146b31996cfe536d0cfecff0e9afc0fa40e6df911c791f4b823047c7e91be45a2b2a401ea3b6f32e0305c37f438767d808ec4292f","ssdeep":"","tlshash":"73f00e7f7d6a80722bf388e8a2b30820b62c1b4a3b54c4d4d9871e10d774ce3d16f228","size":510,"data":"","first_seen":"2025-06-19T02:24:45.775316Z","last_seen":"2026-04-28T19:33:36.64799Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-06-04T04:33:14.481005Z","times_seen":445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-07T17:52:02.043963Z","times_seen":527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-2051d7e3.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"602edcb3b7c76fd8e44ef4e7db63b874","sha1":"5b6d5fd84c621034babfcf1d7437b481a0ac4b8f","sha256":"74b0ae11d0cd842b466ed6e04e1ab0c8e842b0a81cf8bf35f842284915024514","sha512":"9ab3254a49bbf0def55192f700f49995cf9c2e63ba67ff9f6aaad0e094acb45fa2a9c7d9e923f707c3377167530ef3f54eb3fe29a49964bc4816f9f164f8ba60","ssdeep":"1536:LT6qqjy7zO/5qFlPt1wQWaqde3qbsYs7+Co1JS3uHHE:PAy7zO/5qFIde3qbsYs7+YD","tlshash":"5aa35c8a78071fff6dee4844a559895021b42f9399cccc93b3bdae1527f6cd4238a319","size":102069,"data":"","first_seen":"2026-04-28T18:27:36.031239Z","last_seen":"2026-04-28T19:33:36.652422Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-06-07T18:30:52.962806Z","times_seen":376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-99bb0d24.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"eeb51c4d24f2679cef33768da06e3eb1","sha1":"6457d6d39e6e68f207f3f06e5a5e62935d104e99","sha256":"841e6501d5e0586a05b325aba1baf4d4c3fb62d88d459c737ccc6d6c886c2a6f","sha512":"b0e6698f2e2da189cd9795f67ac105d0ace3602571350033e627b6ca643a2c7f737443d98b10ea582fa87bc469b0ca423e059ddc593f91f59ef62a18f91e7c7e","ssdeep":"96:EXVnSRrFwcrblYUB9qCwGjRjd4a45xfGRai3PXHBNKDwYCArbw2U8z9kxT3haG3w:qVnSRrFwoYULqCwGldV4vlivHBNKDwRm","tlshash":"5cb1a589b802cebcea77984145ec102125583be6b10c88e6f6fefd462374eb69745335","size":5586,"data":"","first_seen":"2026-04-28T18:27:36.064588Z","last_seen":"2026-04-28T19:33:36.670775Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-06-08T05:16:21.760327Z","times_seen":3523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-06-08T05:16:21.757738Z","times_seen":963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/vendor-59d1d097.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"34a4e6bb0b5ccecddb517c50a51d4ac7","sha1":"d071d1c69bedc0f9afdd35bf85cebf068d4feb72","sha256":"525eb4c25143e6e43b27ff094d7ab2c5b69ef5610d8a0799aac95a0232fd235d","sha512":"cbe77e6e02b1acee2540d117ede908f6081b8bde35e7226f3815e365dde836a88a6cd61d817e2da02a0991e333595d8349f98eb6d30f5afc982a2a4c6ea7003c","ssdeep":"12288:NrgoZ+A7lCFumfDT1SaBRMhWiOpEIWVTzuLfatf2OqWKwvU7ola2Uj:NUo4A7lqf/YSRLpEIWnAOqWKwvba2y","tlshash":"c3153ac57292f06147ab20e210bb1006f3396e59744e84a4f16d98db7d7ad89e2b7f3c","size":879678,"data":"","first_seen":"2025-06-19T02:24:45.742771Z","last_seen":"2026-04-28T19:33:36.648689Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/#/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-06-08T05:16:21.767001Z","times_seen":1327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getCoinList","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:10.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O457B%2BTNel6J4Bapp6Z0prlj6v9rxfCH%2BPPxiKIuLWgoyMY9CpOtbnf45ZLqakQuv11yw7Mk8olJmSb9LOHWH4kzsah7nIfTCc8BHImLLqfdOc2CdBnAt79YDG5l4we6yD3ez4ZLbCQ%3D\"}]}\r\ncf-ray: 9f381e980f2f1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36137,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (36121), with no line terminators","md5":"9974165efda44a2091d757d4903ccd6d","sha1":"0877eaebc7a2a3dd70040452a59890eb82ccd750","sha256":"edbe6c6e8f60e01a7737a527164b3d2ed890aab343bbd9db00946efb0e48b207","sha512":"9c2dec8fd2a328815cb6b30d1a36507e3c29aff11de2eaef3b861fcba1185d782af3767bd66ba217839641ba5596e900a3f5abc4e2b07316f21767c85500e632","ssdeep":"192:kXYIXk+X1NWXZ9FXEY0XToXc8WXslXQd1XnzX43X2+JX4RXjCXJPXml/XC8qX6wF:TeD5RIyTIKq","tlshash":"d9f22141162c95bdc93ed1d12ebf790650cd327fe8c2ca1b86ce4d9c8ed9ab5160af06","first_seen":"2026-04-28T18:27:35.969982Z","last_seen":"2026-04-28T18:27:35.969982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getCoinList","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BvLpBjau2ZYUnYb6r6JXkcfcYoNAojS9ZthoK7jjKfaqApgvRo4yc%2F5tWsownUDugn5MniMYy3Zry6B2b7a7tBOgsNVPjqCLOAI9sGaMibG2tNMJlQo66eJyZwbwJCpOc%2BshgXxQxk%3D\"}]}\r\ncf-ray: 9f381e92eba41a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":966,"timings":{"blocked":77,"dns":43,"connect":1,"send":0,"wait":810,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_bch.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_bch.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8522\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"ee463cf6eb3de1cbb3de22dced87bae8\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:14 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=Qp9NZhCYYhBd5ydEjPqh5dXLVrlbra6vjNLXbQ31ovM-1777400832.4053767-1.0.1.1-rMJA82vkSuCUQIA8IZELxZUhYENtorBzqigisSP_MJYQddV1WxGhkNF1Mz51gBviyRC.G_ax8I.i34A98iaFoUdMUBkek6PapSdf7IoB6Mvr6QHGYiU0Cr.apiFMpXtS; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9f381ea28a065684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee463cf6eb3de1cbb3de22dced87bae8","sha1":"7536b4baaaf20c49133c4818e73bde4d2e08dbf6","sha256":"3e226b3d01e2a4c65ae99c6310f1f4a6ea50d892fd420ac0193e27475f4e0adc","sha512":"aa5d409c93fe26c360ad2ff4c830035a36e7101261996222bf4b4f913ac05ee011c14c54f9d15c8609320e9957df38a6d3f06bc435f86d3020554f8ec260611d","ssdeep":"192:k89NAY5SmzbZ0KPwDPbC0Z7iUYXcLkRTpF2jUNR:1+mzRPuPb3OUYXcLkRds6R","tlshash":"4302bf95faca76e3df1c40e971848a23f84e84446355e90db2e8cb36e313e5b1e15984","first_seen":"2025-06-04T17:05:58.480873Z","last_seen":"2026-05-13T11:09:14.355408Z","times_seen":33,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":121,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_trx.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_trx.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10598\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"4493b31c10b681f06ad4fd66fb36bc17\"\r\nlast-modified: Tue, 03 Mar 2026 01:46:24 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=Hr8iUwAPMoQVEoLEHlVMaRjZ8P4cjLh.rTSmkOEriUE-1777400832.418123-1.0.1.1-j5wbt.fmkPwpFxKaO2rBBHI3cGkJFygam7Yh0liYqvJ6Tec8CyEXyIKEnbCI8SnqcvU7e.9NO8N8hseo2dyMiNcrUtiPqQkynTiwX3hR9M1.etTK3il_mv.BghElh79x; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9f381ea29a2f5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10598,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4493b31c10b681f06ad4fd66fb36bc17","sha1":"7dd63bfb69e872c098cfefd05a12c2a303ec7622","sha256":"5fb5b00621008c4d9285796f63dee0ad9d9ce244edc8704fc23415e69b886198","sha512":"526eeef55cc755adf804c41badd07169ce20a497a420cd518f7566e294e9baea43a25e6cb669859dfa876916268a442d8521ed99c936a63cc5dddd6497089a4c","ssdeep":"192:g89NAY5SmzbZ0KPwnM3Y3suMnJc1Z+oh5YjTQL5Uq+upP7/OgsbCQwz9:x+mzRPA4aMJc1E3G3zz5sbCbz9","tlshash":"3422c00419d49127713c4063ac96213bd5899266006c2175dbcdfb23f72fabd4dd5cf8","first_seen":"2025-06-04T17:05:58.587825Z","last_seen":"2026-05-13T11:09:14.271811Z","times_seen":39,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpe695d1e1f1f8436b978aea7f4c0e25a3.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpe695d1e1f1f8436b978aea7f4c0e25a3.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 35354\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC02C78BAF33309E48FB\r\nAccept-Ranges: bytes\r\nETag: \"A2CDC1CDD4AC11CEBA881FC9CC8DACC0\"\r\nLast-Modified: Sat, 28 Dec 2024 06:21:57 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15221090416855285112\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: os3BzdSsEc66iB/JzI2swA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":35354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"a2cdc1cdd4ac11ceba881fc9cc8dacc0","sha1":"2d16875ea02c9fea71b2ae41c1e79c4281c58dad","sha256":"c5d8a3c59d24a3da72ea65c63f5b7f5a4262706e1f3ad57e187f57a27c4081ff","sha512":"c88d03a3c1d7195d2948c53319bbd614a0adc02f81f4dd3eb528daa3fe23c41a6e7985ade393eed5fe32de7a675ecd7d53e6806a4a3501e976bb18633b20ba42","ssdeep":"768:wAA2B89E7+jz9SRBCukz5+TdBIPjFbbxEcixNcqSLvEevQl:wGe9E7+jzcBv8+JwjBxEci0qzl","tlshash":"98f2e0665f021f1ac6b923756c1f661c6cf740a2e7c4285ef422c0babd1b2729163b0b","first_seen":"2025-02-02T00:35:42.26129Z","last_seen":"2026-04-28T19:33:36.641728Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1940,"timings":{"blocked":1644,"dns":0,"connect":0,"send":0,"wait":279,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp88077a1214e14f7897c7e48241db037f.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp88077a1214e14f7897c7e48241db037f.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 370023\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC02AB4B81383858A1B0\r\nAccept-Ranges: bytes\r\nETag: \"A381DB0B785A07066ABE9386956071F3\"\r\nLast-Modified: Sat, 28 Dec 2024 06:22:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11132760987835081693\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: o4HbC3haBwZqvpOGlWBx8w==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":370023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1300 x 1054, 8-bit/color RGBA, non-interlaced","md5":"a381db0b785a07066abe9386956071f3","sha1":"fc780da65e5fa456d9d5f1597dcb1ac5c8288117","sha256":"c1808d5bfbe24674d0f471f033d44445ee28790a6755a8d5ed6c3bb546e91531","sha512":"10ec63f4cfb5319abd3e745afe02d45c511b4626e81685581b0a1b7ac6fccc5e5dc1f8a7c93454245201d2c42ca9176dd432614b619140679b57c4ae8ace3c12","ssdeep":"6144:2yOvTSv4EaxbYemICE9bvnKS4MoG7iki52QxkNapmhWO0Tz7sy5hJ0cmpg7l:2x+v4b+e1GSkuiki52Q6SmsOEB6O5","tlshash":"c874221aedd78db29feb2a636ad34ced1300731edb123a7260580f79fd6212812197d5","first_seen":"2025-02-02T00:35:42.267543Z","last_seen":"2026-04-28T19:33:36.661707Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2567,"timings":{"blocked":1857,"dns":0,"connect":0,"send":0,"wait":280,"receive":430,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-77fcdb44.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-77fcdb44.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6794b2e0-308\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7UNAT2HRidUR7jAVuhTQgyLmnxFRzQwKaYe2CLeNB2ce0pWtaQrzpn%2FppcnCNOUSXzsyda3NaDHm%2BcDhC1197%2Fd7BW7I4wToD0aYIQhEJsEXlo6JaWtUHxRAupy1eipRw%3D%3D\"}]}\r\ncf-ray: 9f381e927fd83181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"be6df40b3e8eda9e3cf728cd083571e2","sha1":"83e915a410f1739b964ea695433a6c5130c93014","sha256":"ac8a877c285826fdbe79f20daa17d41aa34e9b7ceb0592b9e5cce3bfdaa673c8","sha512":"2dc48fac570f6bb7e9596dc14487b5cfd823c8ab22f9204d68c880ccd35dab1a64b6ced89b2e2bc2bd4a4dc1bb5736553da578e7799b5fa2c018d219e6cd69cc","ssdeep":"","tlshash":"4201fdf9fc0c8ebb0ea20a4042902600140a1fddfa1419f198867d661be4940d7ce32d","first_seen":"2025-06-19T02:24:45.779468Z","last_seen":"2026-04-28T19:33:36.650336Z","times_seen":3,"resource_available":true,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getMt5Amount?coin=xau","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:11.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYn4nZtB9X9Jst4ETQPN%2BoxXJjprkHqwdu4t27JNn4ejv20Ep1OP6uKIgZg4hvs8SKp6ez8r3hs0knxmypQ1kTt2qawHcIQVtm2w8VOlDgMmnzKzz8usK2cZlytgaNKYMadN2FeUmGU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e9bca8bb50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8c82b5b7aa066f63df28b3ef227f565f","sha1":"6bfe55872893ca0834da564b7caa440521f44b05","sha256":"f891676ee4632e0f90dcbdf164caf47c6fb1b0ce5ca0d11dae769ec88cd10af2","sha512":"0fea4e9008f4c379744df984ffabbe715127033f0a9489962edd0dd69e2ee06e8ae1997437f71dc793ec55836ff8f823af8c07dfce458760cf787d03af3e62a6","ssdeep":"","tlshash":"1f9002551c1c9242b88320e69606220440743161677493485c5d512580881662080858","first_seen":"2026-04-28T18:27:35.984139Z","last_seen":"2026-04-28T18:27:35.984139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpe3e63f01a8674663847954e76203756f.jpg","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpe3e63f01a8674663847954e76203756f.jpg HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 7240\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC01AB4B813838129DB0\r\nAccept-Ranges: bytes\r\nETag: \"8CCA2D43013702857716A396577D44E3\"\r\nLast-Modified: Sat, 28 Dec 2024 06:29:47 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3073341817212770405\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: jMotQwE3AoV3FqOWV31E4w==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7240,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"8cca2d43013702857716a396577d44e3","sha1":"7ff2e7a4325182e396fc0b1774ac006ab99e6787","sha256":"3e1e8510f1b39004f5caeecf47a029037d6650f8d21dbf981447fbd89fc51385","sha512":"18fcb7f97ad41dd1f1889130479fb9d5bb825d757bb32a90a1ed98e4309b3337b46d0f664a6dd9160c9113d7889eb0feba914a15661cab03a66a7bdea253bf55","ssdeep":"96:LLimmsf40pUtnwF2iwGy/LyVnhFSH/xw8uJLGfYAIR+ppKJHVPfJclMIwu1RWjWc:LLTLiw5L3MR0Gf1+0aDeMRekWaXueXn","tlshash":"2de19f028fce8276e64a1bb12cddfe7b5615682129506776009160da58ef4e6ceeb0f8","first_seen":"2025-02-02T00:35:42.251518Z","last_seen":"2026-04-28T19:33:36.667927Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1992,"timings":{"blocked":863,"dns":56,"connect":265,"send":0,"wait":268,"receive":1,"ssl":534},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/resource/svg/light/mengbanzu13.svg?2.0.1737798368368","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu13.svg?2.0.1737798368368 HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 25 Jan 2025 09:45:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2c7-4b2\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBIuvtvp5qIZrHEQRGrilcdFMB5Mc6KpFL6fkuE6mNnG7ZZazVvyyf7DwvuSGOvHY%2BSnTLIH6aC159ImVJT9Q%2Fx3fEuDcKj8dOj8W720qvcAFWQyoC3HMOyZxWOpJabtgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381ea1fa773181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d850b982245ca50f3a2e230e0b1398d","sha1":"283d9ec8c786aa91786d80ba54164723bb6699b4","sha256":"852697a3439e4c3cb0d426221c5b3a345e333b69bd39ff63f731fe02a1a04826","sha512":"2884fe7d0dbc512dbc44a091be6f35bf6f66cb15c8ca1f763c60896d101df4b196c29ec631e040cc8116edc43dfdcf63b48c4a9c1b0c420940f32d960ec7a710","ssdeep":"","tlshash":"072144b9c510128a62814f8cdbd82b06623ef167f3f54d9db39016b20d78d9f11bca21","first_seen":"2024-12-28T13:26:38.912526Z","last_seen":"2026-06-04T04:33:14.456617Z","times_seen":322,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/resource/svg/light/zu447.svg?2.0.1737798368368","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /resource/svg/light/zu447.svg?2.0.1737798368368 HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:13 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6794b2c7-1a4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kNB6iY9SDhBIDoRW6%2FPZypOv0jwyM1Ar9%2FOt3vaWDlMYgU5cPf04VnN0rtbGntxsRS9I85iIY3SiZkuK913AMNnT1DlSEhXQ5ZAXrbD8A%2F6WK2RdbdDXTqyNzYv1v%2F6kdQ%3D%3D\"}]}\r\ncf-ray: 9f381ea20a793181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-06-04T04:33:14.432722Z","times_seen":390,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_btc.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_btc.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7130\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"36441b8c1738e01457c54a0056faa169\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:30 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=a3YDupBB8pYLNlV535zYS6h5wiAZkfHOf4Exe1xuCyw-1777400832.3846745-1.0.1.1-MxLR2_AvH3erGL.hzegcnEP1CYe5_HyNZphjeB7D0n9_BS1Lmax2RIJ1YuJ52Bpmj5Fp.jFanCPqK8IBUkTKDUSyJsAqNYUfjlBJpFcM8anLioabjzXcdPtHMmNd0hxm; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\ncf-ray: 9f381ea269bf5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36441b8c1738e01457c54a0056faa169","sha1":"ba29760bded8c06b8889b58ec58f149101b69653","sha256":"5c2068d84042e001d833bad39a7f4294e69aedb0802a3d6c6c80a54efc99379d","sha512":"61c9ccca1e309dd7c8cc88da2432749fd3a8c905fa919f2df85321a9686353d7a53e8eac0fdd9bfa3f13f045d1ebacebd0f93a385ccace59994c23f6d03b0f57","ssdeep":"192:AVP2cjhWtsbV+EwEAO3HqulF0V5qCCKcDcqbpDU:AVucjhWto+EWIOnT9cB2","tlshash":"4ee18ea762a59c6231214624fc8a59627567c022b0776993bfb8187672c5b3d7380b8a","first_seen":"2025-06-04T17:05:58.570745Z","last_seen":"2026-05-13T11:09:14.226314Z","times_seen":41,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":49,"dns":1,"connect":1,"send":0,"wait":118,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/resource/fonts/DINOT-Medium.otf","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xexbestpro.com/assets/index-00a05960.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:13 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Sat, 25 Jan 2025 09:45:43 GMT\r\netag: \"6794b2c7-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0DOfacQpR%2B8fd9F5igvGevTy0DCJKqrExaMwpjW10grQ5dbC1ZBYLX1o2%2FbQgeLDjYQQiRVKYZCA7nHcj0b5VcPnfNDKv00hi48SvM%2BYMHFiOiIuAstpZcy8dL%2BmAaG5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f381ea2ea9f3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-08T05:16:21.696807Z","times_seen":961,"resource_available":false,"data":null}},"time_used":1401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":590,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wmJz5OMXv8R0HdnJyJBHi16yVZIjHE7bh6Ve78Bj2gDynsIFRKWSEXu%2FfbtJep1h%2BAVcdF4Y0e5Yctwz76MlYu9BP1TmCGi%2FxWTqBbyqN6QSbI9JWDbHpxFImHgy8zkNga%2BzyWF6i2U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381ea2f9ffb50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T18:27:05.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 30 May 2025 10:06:07 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pSvm7k14iBjkhtg%2BZnd1%2BlArgE6KKLvnrLdGhwv7KgdKCJhq5PRDsVTLVBqTgND681wWOp8edDBbo7zaqyChNpsDSdpoedf0r8zIwQB%2F8MVnXH%2FohLSnTgcbzXnjJGHCUA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f381e75e9f85687-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5223,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094)","md5":"8a994b6a8a02227e925e366d63123e1d","sha1":"c72bbf27f17a03b86d9fcae25dadf8729f8afd36","sha256":"20799d3694c60488cd36b39d96ed8996cadc0afbc118ea249cbdc0eca536c7a2","sha512":"18f6fc6f3d4bb05eea883d7c6aa49552fcf18c9510488922c7996455dc11008ff7ce7a48c5e8eea8edb64ceb0581b33f74f1318172cd58242b7404b8c75323b1","ssdeep":"96:Tr82IQx5yKuc670dQY1O1GQkQAF/Q2dQ9r6TCZydHRH/g872mUsGKAiowGpuB1nx:TF3xL67zY1O1h7AF4BrZCxfJ72nfD3bw","tlshash":"9cb14fb75cb4d91a2392053bead7b0089e6111e3851a9c64b4cd90fd8fd0fd589dbb60","first_seen":"2026-04-28T18:27:35.989104Z","last_seen":"2026-04-28T19:33:36.671367Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1011,"timings":{"blocked":107,"dns":79,"connect":1,"send":0,"wait":796,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-00a05960.css","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:06.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-00a05960.css HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-4abba\"\r\nexpires: Wed, 29 Apr 2026 06:27:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BRytfkcPyK%2FV8XfWOXICeH4AHvrG1zt%2FxCvh%2BFvSk92rMBgSI6blycU52S48gjmG9utzsvh054ANvpAxijq5rINNLv1Wi5t88V6xlQuVOsW8CB1TeZ4NNHCcWUQ%2BFMMphA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e7bb81e3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306106,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"159470ba85e49c422558ca66964f03aa","sha1":"4537785fca85311c615e5d7aff8508b7745ba764","sha256":"00a05960e354464bacc8a5dc1b2a8f0e3fde0021dfe4850b42a7bf3c5447325a","sha512":"b009676715fb5966ffe1b8f5dc21d7ff4ef087dc9a250b06683333728d3b141324660828e050016b1ff2f1946b43a1261a736b711b8012d755f091474dc1fd5d","ssdeep":"6144:nevxsalDWzEkZ8w71ZACkFDS3vyf58rBeV05Tn:ev10zdZ8w71ZACkFDS3vyf58rBeV05Tn","tlshash":"a154d6a9a590117c6f27aa759bce5ad8f23ce6719c118de8f20160094fc3ff92363617","first_seen":"2025-06-19T02:24:45.885922Z","last_seen":"2026-04-28T19:33:36.660098Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1057,"receive":315,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-36a2a4a7.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:10.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-36a2a4a7.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6794b2e0-1fe\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdImMbZIi6O63WBv4tSqUWnN4xpdB%2Fis1cRD18OinWBp4qcTTy6mRgWNm%2FnuQeGHV2Tai3DQZAmdvLpQdcMw02ni1tb2k0KKFERz4xvmwViLEqZ2%2FG3yTryL0Gr5aN4nRQ%3D%3D\"}]}\r\ncf-ray: 9f381e9838ca3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"c188853dfc6cffdf97083825328b4c9d","sha1":"9f96cb169ecd6f4264ec2381f2dfabd6baec1fe3","sha256":"cc49710d81d13cdc7eb3347fa0b898f8393385bcf9de09584e49f8e6963982b1","sha512":"4adfb9006bb33e52b790a78146b31996cfe536d0cfecff0e9afc0fa40e6df911c791f4b823047c7e91be45a2b2a401ea3b6f32e0305c37f438767d808ec4292f","ssdeep":"","tlshash":"73f00e7f7d6a80722bf388e8a2b30820b62c1b4a3b54c4d4d9871e10d774ce3d16f228","first_seen":"2025-06-19T02:24:45.775316Z","last_seen":"2026-04-28T19:33:36.64799Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_link.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_link.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8852\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"12ea75c7763a70aedf0fc9a338283794\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:19 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=GVkG4gUEgE6.cqZSNkXQWEexRNpuhj18sfiM7vcVk2g-1777400832.389696-1.0.1.1-p8nUsX_GrdJnRs6mCbOwV3F3DEbyLw3CkhoMQ7lr18UD_b7hPcF_zo06SsGAKcxz9pse20nLTfr06l53eYVxnOflMBwaHwTkOevH_m9s1laLjFsMxMr9JYRxioQ8qHzg; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9f381ea269d45684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12ea75c7763a70aedf0fc9a338283794","sha1":"526d1565d88da3f89969f259dfbd1feb91579a52","sha256":"958567cc4b9735878ac46706a3d5590f988dc7b714b1a9af267dc1e438d16b09","sha512":"5a7412982073716fcaaa1bd83f375d40610a99bf6470ca68e7e689f84982326653a047db7de4319772912313b07d6613a5beb3c72bc9d7430a347f116cd7b9c4","ssdeep":"192:x89NAY5SmzbZ0KPwZMSMhIwt3LNhMzowcgHtilnXwkrd6o1s31bz:i+mzRP+OhMkwcgNiRXrrdBsp","tlshash":"4c02ae0cc2d6bd57acba927236e410c7010da002f892c5287da9ddf7a17f8ca5e929a0","first_seen":"2025-06-04T17:05:58.534741Z","last_seen":"2026-05-13T11:09:14.134659Z","times_seen":33,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_xrp.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_xrp.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4970\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"d6f898061d520d0f0f9786fc7fc34475\"\r\nlast-modified: Tue, 03 Mar 2026 01:47:00 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=92_0FuJI9SCr6zDjs7vCTjmu4KnfMtbTmeLFJROZtYo-1777400832.3961687-1.0.1.1-0BIP_2kTmaEgI3BP3eLYJkeWVwqsqotR3sG4_07Zx9Gtwj3lzI9wPKTQm7lAcopXdhdBBk3jJdnSHcXMRmfFyF2W9OD3oUxemZtfWUH5IYId9GrzOocKXIvS35cmNXmE; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\ncf-ray: 9f381ea279e85684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6f898061d520d0f0f9786fc7fc34475","sha1":"4f835dbe651d9b8ca6ac3a761656dfde658ad53d","sha256":"1cea9fa89c2472fe699ba61dd2867072d84cd4ee4b1e3042c15a2deaa9f46973","sha512":"8df222e4cde754b5d541600fc247588c3701c6081861e39e0f4e6734face877584d187b2977dcf9b00e5bd4a4f045016fe886d90fc15c67b52ce3385f0f9e0eb","ssdeep":"96:kJKpGINSQyHVK5Sm1ta0eRE3EkNLQMYjrf49h+nKX+JeJncPQMG4RN7CO:S89NAY5SmzbZ0KPwrs0nKOJeNcPTLRNV","tlshash":"e6a17e8cc3c194d2967cc0635cd6801be50d900291abdd6e375dd617751ac9f5f19ae4","first_seen":"2025-06-04T17:05:58.509816Z","last_seen":"2026-04-28T19:33:36.653578Z","times_seen":41,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp54fb52365de64f3e9df2cfa2b45a2493.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp54fb52365de64f3e9df2cfa2b45a2493.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 35354\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC01AB4B8138384E9EB0\r\nAccept-Ranges: bytes\r\nETag: \"A2CDC1CDD4AC11CEBA881FC9CC8DACC0\"\r\nLast-Modified: Sat, 28 Dec 2024 06:21:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15221090416855285112\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: os3BzdSsEc66iB/JzI2swA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":35354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"a2cdc1cdd4ac11ceba881fc9cc8dacc0","sha1":"2d16875ea02c9fea71b2ae41c1e79c4281c58dad","sha256":"c5d8a3c59d24a3da72ea65c63f5b7f5a4262706e1f3ad57e187f57a27c4081ff","sha512":"c88d03a3c1d7195d2948c53319bbd614a0adc02f81f4dd3eb528daa3fe23c41a6e7985ade393eed5fe32de7a675ecd7d53e6806a4a3501e976bb18633b20ba42","ssdeep":"768:wAA2B89E7+jz9SRBCukz5+TdBIPjFbbxEcixNcqSLvEevQl:wGe9E7+jzcBv8+JwjBxEci0qzl","tlshash":"98f2e0665f021f1ac6b923756c1f661c6cf740a2e7c4285ef422c0babd1b2729163b0b","first_seen":"2025-02-02T00:35:42.26129Z","last_seen":"2026-04-28T19:33:36.641728Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1330,"timings":{"blocked":1034,"dns":0,"connect":0,"send":0,"wait":279,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/charting_library/charting_library.min.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:06.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 09:45:43 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2c7-2a6b\"\r\nexpires: Wed, 29 Apr 2026 06:27:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jv%2Fcs%2B8NpC1y6zcia6mRCu%2FPMHj9rjZMS7BiF6rrwZeZCzvmpQem9lReuXDZOCTWwOAt2FaY0LDCfLEoPLQIRjV5zMT%2F7jROh9WL1DAzsAo%2BOPIjfxV8rMueX6e%2BRLWM8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e7bb81a3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-06-08T05:16:21.679615Z","times_seen":1000,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":838,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-9a0b2c3d.css","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-9a0b2c3d.css HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-d5a\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R38gEEp454D5OaSdANrnYjY0LZupfsL0xglN76iNrOM5tfVULloVA8IkvX9%2FcPYbLGGknRlsdImCSkFVpqbFF21PNJbscOZMwhq%2BAePV6kfO3wo2%2FkCmtB0BvCcCI2w0%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e927fd03181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3418,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3417)","md5":"fdfded223e069d71f2bc091ec898be0a","sha1":"d94b1001da0d96708927b581c2d85acdc95befe9","sha256":"9a0b2c3d3e784293fa3be0da4140a8b5d94540335f080cbcbe57bc4264d7f9ca","sha512":"086db3d5e075a05c8ddf24b690b6cb6bf55f147901da1b78c5866c5b517695f43c0b51b58055b49f53908bb380cfd186e647fdde9a91da138dd6aa756a149b72","ssdeep":"","tlshash":"4761334efa6917355d37d5cfae0c5adcc4046da2f00aacd8e14397250bcf6d3271262a","first_seen":"2025-06-19T02:24:45.847615Z","last_seen":"2026-04-28T19:33:36.655281Z","times_seen":3,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":888,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp077939b8336c40fd9efad763fcd44f52.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp077939b8336c40fd9efad763fcd44f52.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1599\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC01AB4B813737329DB0\r\nAccept-Ranges: bytes\r\nETag: \"7982395C5BE4A71C84A0E6ED25C0FFE6\"\r\nLast-Modified: Sat, 28 Dec 2024 06:24:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10124007141188402507\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eYI5XFvkpxyEoObtJcD/5g==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"7982395c5be4a71c84a0e6ed25c0ffe6","sha1":"47b16735c5532d2f02fd0f2d644d2e32c4a29a5a","sha256":"18c72092134e339b1b587b0791f93ce88e6d7a4e3fb8ceb46f708050d9e5caf7","sha512":"410cd3f16dfed2cae78da54fbb283132c9ea52b14649abd5ff3812f16038b1c6acd50c84c7cc202cb0f40580bf636f473ec90563f84ce246b6b17f5f156141e2","ssdeep":"","tlshash":"0b310adf6e4f2cabf7f43855e3125e48de33d1e43874071d87a2e10230516560584a45","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-06-06T04:02:55.264255Z","times_seen":125,"resource_available":false,"data":null}},"time_used":2057,"timings":{"blocked":888,"dns":42,"connect":279,"send":0,"wait":283,"receive":0,"ssl":562},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_uni.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_uni.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9526\r\nset-cookie: __cf_bm=LwfYpHwlXn2XL2yEHl.UPEKIX9I51HoRyyT.19.l6gY-1777400832.4037864-1.0.1.1-06VD88PsXhEHbfy3GMKNVeiQCFGQ6zCNqd7vTagou1LC9pbHO7p9vRNs2Ha_kiPVj2RTtMkC3JUmekJZjA.ZdG0GNXfQjDxUCklq1g1azB3knKhAf4sTL1hR1BgdKDcw; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"463edac4d6b6690320100cf326418903\"\r\nlast-modified: Tue, 03 Mar 2026 01:46:29 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=9rqqlROpPHOUuS35j51yffY6zODZp.avztrzITMCxKw-1777400832.4037864-1.0.1.1-8K0k8GzBw019Yzc2xJuwTsm6pFRwyklcWy7cNqmVwLfI1f9qs17xS_4W0pBIQnUTBzxl8az6MRhU.KidbvGqGra_zsMsphgKxOzX8ySWaoHhAJI96NUDvswG17biKnxyT.J1PwqNvfksnHb6MzakHWpBm377bVhuBEaFhfTSfapWV8w4ls2CuAYoCYVY2bZR; report-to cf-csp-endpoint\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=9rqqlROpPHOUuS35j51yffY6zODZp.avztrzITMCxKw-1777400832.4037864-1.0.1.1-8K0k8GzBw019Yzc2xJuwTsm6pFRwyklcWy7cNqmVwLfI1f9qs17xS_4W0pBIQnUTBzxl8az6MRhU.KidbvGqGra_zsMsphgKxOzX8ySWaoHhAJI96NUDvswG17biKnxyT.J1PwqNvfksnHb6MzakHWpBm377bVhuBEaFhfTSfapWV8w4ls2CuAYoCYVY2bZR\"}]}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9f381ea28a005684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"463edac4d6b6690320100cf326418903","sha1":"6a15d1b0ef4df572b67204cf7926a3f410c5f4e5","sha256":"33a0c5c9458bd473aa1e4f9af78e3b5911d34d2c4e51e23ce006eda847e6b0cf","sha512":"cab65e07bc70899df217a98aeacbe0904316c4aac0b73f96432b0a155bf6bfca1126de2f04a627e6431e979c2205faccb07c768dfd4b894efe4e5c7d676e3bf3","ssdeep":"192:M89NAY5SmzbZ0KPwkCJ9kcU57Zmm9DO7PnuO6IqZ/EDvm6w/OoUGY5md:N+mzRPN8K5JqrnuO6IqpED+6iBYUd","tlshash":"2e12c09ad182f5696d9d03bb281084f5840f542d60d7d109e1cbee437a3ac7c4d9ddf6","first_seen":"2025-06-04T17:05:58.456623Z","last_seen":"2026-05-13T11:09:14.223944Z","times_seen":36,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":5,"connect":4,"send":0,"wait":123,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/resource/svg/light/user.svg?2.0.1737798368368","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /resource/svg/light/user.svg?2.0.1737798368368 HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:13 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6794b2c7-227\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0rra4JGjoUxDwBa8uQzaFccmH8%2Bj1XXM5xkIQ0Z%2FTC7ZsRXa2xZNQE5cYtRUXZ7MnAA27OZnzYXDMRqKSSZklMnkYYDKvjWAxEu%2FG0wcYqCfXKAiOXWKjQ0p3Rwdn6EbVA%3D%3D\"}]}\r\ncf-ray: 9f381ea1da6f3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cbadb23520ecde3a8d7488fc19e95980","sha1":"b10897e06fe244e246e8542b0d1b6d695317576c","sha256":"7217fe0095fa190b95295278d273242aafd0ce4944095f55a3a2a6554d428e46","sha512":"9223a7055472f242d2a4494d80c4c546578663054b494dfd7d3c668157c598c91d6a5e9cfcb1835746b16b02abda7dd674a57b7313011f2a961a87e0cf68a3a9","ssdeep":"","tlshash":"70f04cf7501c949950014550c9de3a85973df133a3468d5eb3a208e68a1454b217c555","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-06-06T04:02:55.265615Z","times_seen":344,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":862,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getAllSetting","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RB1QRxaaD6oe4vydMiofH6oRwe2oyNfidNOZKhOZuajHVREQnJauQekrKTzRFXRChmepaTnevojezMwjbGqgXB1cWEy6%2FLSC%2FfoyZcIU7%2B%2FSpOUDQ6lpg90zDxeCB6VoVhJCm%2BBeGoA%3D\"}]}\r\ncf-ray: 9f381e92eb9e1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":975,"timings":{"blocked":78,"dns":42,"connect":1,"send":0,"wait":813,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/platform/dev/144.png?2.0.1737798368368","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /platform/dev/144.png?2.0.1737798368368 HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LD%2FGqCDWGOamhBm%2BHoddi0yVNUYHgpc0dNwKbaX7i6c5oybYitpfQ%2FMBwiAQ41MkJ3MBpfXM3RqkJWzWofNL7iV0hES48eXNRXwDXpAiq2nLAEpAwKhafamrdHL%2FqcyjSw%3D%3D\"}]}\r\ncf-ray: 9f381e8fdf653181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-06-08T11:42:24.740062Z","times_seen":279597,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":834,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/vendor-59d1d097.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/vendor-59d1d097.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-d6c3e\"\r\nexpires: Wed, 29 Apr 2026 06:27:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2jE85%2FfVy1hxknGetLD5d20cnMUo5g4kocfwR8%2FkniSHlz%2F0%2FtP9ByVmA9zXahrJyTxuZRLFwKwzYhqUNet8qaHNAtXj5gmZrUrroJoyIeJ2akL%2BGU5Logh2HUhvODaE3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e922fc73181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":879678,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"34a4e6bb0b5ccecddb517c50a51d4ac7","sha1":"d071d1c69bedc0f9afdd35bf85cebf068d4feb72","sha256":"525eb4c25143e6e43b27ff094d7ab2c5b69ef5610d8a0799aac95a0232fd235d","sha512":"cbe77e6e02b1acee2540d117ede908f6081b8bde35e7226f3815e365dde836a88a6cd61d817e2da02a0991e333595d8349f98eb6d30f5afc982a2a4c6ea7003c","ssdeep":"12288:NrgoZ+A7lCFumfDT1SaBRMhWiOpEIWVTzuLfatf2OqWKwvU7ola2Uj:NUo4A7lqf/YSRLpEIWnAOqWKwvba2y","tlshash":"c3153ac57292f06147ab20e210bb1006f3396e59744e84a4f16d98db7d7ad89e2b7f3c","first_seen":"2025-06-19T02:24:45.742771Z","last_seen":"2026-04-28T19:33:36.648689Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_dot.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_dot.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10310\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"951caf058eeb23ccb17ee55d2740c48c\"\r\nlast-modified: Tue, 03 Mar 2026 01:43:07 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=_TAts8tH4wC8iwa.UyT7F8oM2_dlaj_tR52Du4mOP8Y-1777400832.3853118-1.0.1.1-uyNvzrT_0QGVnO4MHY61LoAseByQYu3rDZhCm9Q6dZ2VIJB7wfb4czvWHDntJF3PXpl2T7M7RfaFByAcuUvCrnYvFvM2nZ7vbfhpsVqgp0EFdkroxavLzj.C1Sx4HPyv; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9f381ea269c35684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"951caf058eeb23ccb17ee55d2740c48c","sha1":"646512fe271e87f664f133cb6095c6c8822fe7f9","sha256":"0ee9e476ae89b0e40e7bb0109c584e20d06f2013efc547faeb1de60d58c52bc7","sha512":"4f19144c600fe38e4f47b14a5414ec32f59f270f91934962391bf202c4cee2f9ed3921abebd9052f180f1a70f39f896b8ed3a3edf1af9f133f4fc80ead2ddb53","ssdeep":"192:N89NAY5SmzbZ0KPwxvJEqiHkhLGFnKhE1CrkO4xFURGwf7NV+MqFj:O+mzRPAViEG9OkPxFURGwDNcMA","tlshash":"d022b0d9e1e8e0c31a6cc0a675e0c81ab4085c1175797b57bbc49b7b377790aad397c0","first_seen":"2025-06-04T17:05:58.518345Z","last_seen":"2026-05-13T11:09:14.077558Z","times_seen":34,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":10,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-bc011be9.css","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6794b2e0-18d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b81JOOVEaGVEIkrknyg3qNzHDTsoOUCFOaSTDjIsuClm5kTQ%2Fyc9mxFbddoxMYsPPQa%2FSQ2xlEfjckA297alBGFmwLvkqF3%2FlrlZAIblZ8kdY1ahBsb6VmVz9Ah7voSbzA%3D%3D\"}]}\r\ncf-ray: 9f381e927fce3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-06-08T05:16:21.625968Z","times_seen":707,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/filters-78ce0663.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:10.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/filters-78ce0663.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-d78\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q5gywf9DQmJR%2BgolruN3nY9z6nwW0cbwC4nvJb0jGGBKnO2d04fCWuK4R4I6FZVxAPpslm92HJemugVxB6zVWCRwidQ1DXbz9AW%2B47aoDLRGsT9Q55igEVKp9%2FyWfrM0Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e9848cc3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3425)","md5":"c93d3ab6485a831b6bdbe46cf0b5a804","sha1":"b98fc7b3776258900ec30f2b64cc6ef2d135f1f4","sha256":"9a2dcd43650683060f243038bb3cc8ac66f6861f89a1c432d5587099faf3fa2d","sha512":"c91a50fa5b54aab5644d266a27d48de2d52623035a6a71327aa7b8a3abe6ec1f5c6f6aa0d4980c0e760b73c943ba69a591476aca0b122a8bedcd5fb7ab7d27af","ssdeep":"","tlshash":"e96125edfcd7613756fa6ae9002c855172ceae20785e0e49f54bd041597388ce0bfb64","first_seen":"2025-06-19T02:24:45.734561Z","last_seen":"2026-04-28T19:33:36.640071Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getMt5Amount?coin=xpd","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:11.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:11 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBI94QqUN8OH3XFfNXIvt5mqKKZF6Fj%2FdbPavkMb8DxaxhMzvhJMr7OuTbql9vPExw8qsFq8%2Fbihj9rO6QamWXzWd7b3UGppvZCNPMV8JyFdGLksPQKVwWv2gaxuwGm5nNRN%2BC2CfL4%3D\"}]}\r\ncf-ray: 9f381e9a1ea21a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/resource/svg/light/mengbanzu12.svg?2.0.1737798368368","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /resource/svg/light/mengbanzu12.svg?2.0.1737798368368 HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6794b2c7-322\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkMCc9kX1z0J%2Fslv6KI6PF%2B5r5wSWFwW6Nb9fVhvB5FS8Oa1jEDg81LNQSJn8ppdelyf0rqaXIuTsHqLVymLdArsfVBJx%2B2Ur0Nj8pGyRKcaALllKf0KQL0fMPecHmwLew%3D%3D\"}]}\r\ncf-ray: 9f381ea1fa743181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"184d38c97adf35302491834eaf17aee3","sha1":"a21f6508e3eb8b4bf52a510ac9dd219783f561bc","sha256":"5cdcdf5fb66c61d69b6c308a4569e093ff7b0e178fbb1c7d94a599473339bf99","sha512":"a88827fe8f336cb9f4de9cbaade38ff0026d003f03cc096dc443724052a51c417432d1b96b7006e21c49498791fac31678492626f5643eb09d5b94b32afdb9f0","ssdeep":"","tlshash":"d201f6764321c19dd2538b80c7d93f44927eb65bb2d00448b3a32aa74e34f7f55bc595","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-06-04T04:33:14.422649Z","times_seen":360,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_eth.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_eth.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8592\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"720c85e9c535e6553a32389ce5c8c29f\"\r\nlast-modified: Tue, 03 Mar 2026 01:43:18 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=8htW.We.Sg0c3morGLMVmBWITbPN2sqjVnep_p_oa2Q-1777400832.3934624-1.0.1.1-Rw1JOeBzfSiCjzSZYA3UcbYSIISbCTMGV60EmoRAUOUAZWtUZ4K99EZkZt3oydVSJgA7huQfR6ATMD.Qv9nxdSgUePSbMkW9zcPhgWz2vHbq0rVU2a7pbsw8i9utHsMt; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9f381ea279df5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"720c85e9c535e6553a32389ce5c8c29f","sha1":"d89df3b6979132401c628711f825b7bc4590cc36","sha256":"b9646034a8dce0fe2f482365661937610ee4900b2e5041873b25ea8429c0bd36","sha512":"5f3587b41770a778f3592f29bd1b624ae91ed8ab8eab8cf9e966e6fe908bef2f2e4d3fd7dc02ee07061f402df04e3804b0eda3fc297a3a171ddef2950b75ea8a","ssdeep":"192:G89NAY5SmzbZ0KPw8PcCgrn4nn+KoXmktfbNUw6ts/eF3sFOY:L+mzRPJ0Cgen+H2IbNUts2FbY","tlshash":"1c02a01ad3f0a2865d6c4703114194ffdc1d604c54dadd0857fe2ae2b72e0bb9f66da0","first_seen":"2025-07-12T22:28:58.36598Z","last_seen":"2026-05-07T20:34:44.801398Z","times_seen":12,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getAllSetting","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:13 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=diQXX9OtVxrBqcw8ZGQQVoUb7SH9WiOvW56MUjAZRSePVu1BX8mQ86iMfKmxBq0Zf7rxJOht9qcLcvmW%2FntImBbQQYbu%2FzqthMMPd9ml1RJ1reqISAb00IENSNDnnZ04kdk8nDDb%2FQg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381ea5ccecb50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12046,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11720), with no line terminators","md5":"785099e6d36e296a5f71a4249f088f49","sha1":"fb4650aea23d25924eb857b909a74cddc46912b4","sha256":"31d5a414823441438eb10e77c1b7f1b5592c4ad6962c902caa60502cf3e1ab5e","sha512":"771244777e5db9a218a13961693e2f55cae518c3c71b32ffccc0c3975b57689dc00aa90525749c86021a08d64a8be77bbc3c82b95531aaf34da5e7d83c18e591","ssdeep":"192:q+9BpUOSpQ+oQD+RbKM2hVoeHqzv5iULy355xrkD515dq2sYDMNjD3eoV6JkhAda:29aO2FMR5eb2SE","tlshash":"8f42555b31dcccbdc6d64dc5d0bb3a5a759c38abaa809c55d8e6af9c889dcb3440b00d","first_seen":"2026-04-28T18:27:36.006901Z","last_seen":"2026-04-28T19:33:36.654624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/resource/fonts/Arial.ttf","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:07.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xexbestpro.com/assets/index-00a05960.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:08 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Sat, 25 Jan 2025 09:45:43 GMT\r\netag: \"6794b2c7-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=naFChKyf6OSptsKTGTmDBLM%2Bo%2FSf%2BxeK56YhCw%2BfWBAlTANZUFBQiUVuNBH4m7rD0BlAvEDskv1tYeu%2FZWsHj83bo%2FaIPtCPySJf2FchTENFv2vDs1iSqFSEWRt83Kt3aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f381e8499fc3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-08T05:16:21.720932Z","times_seen":1329,"resource_available":false,"data":null}},"time_used":4360,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":835,"receive":3525,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-e32aa1de.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-e32aa1de.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-3649\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbT56BCWqunL16iMUqTxZUbIGwFOJqFv9Z0Eogl1%2FoRJ85H0TQb5gGGWrZEu%2FrC6a9I2ifsaCg5rzeEs56Couf3N8fnnGn0sdLCXrYE92akG8UiibKo20orWYXL71FkFNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e927fd53181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13897,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13896)","md5":"655c3f713e41926298350a3a6ce3b866","sha1":"503e001ddb55c616b4dca07046b80d29f1c65b3f","sha256":"213f6f1fd49a7677ab70e21204eb07269d389ed9ceca4b6fcf770290ba419ea7","sha512":"f0896768567bbf14226fbea8db0333fe651ea15590eeaa2a1007b36eddacd4d4fd161503d838b0f7d82df9db572899b36c8fe4a0d28e6121cbe3ac89013644dd","ssdeep":"384:+DcwS7VAjw7zeyndG7FY8tJfUlwCD8+AAgW6k6MjzprhlcYCO7sSyX:8dSnFmztJfU6fmvprhlcYC3LX","tlshash":"c852d862f9079a3cf5fba05140c80050b6697ffb501a89e2b9bc6d4a3356ef8b35d718","first_seen":"2025-06-19T02:24:45.762431Z","last_seen":"2026-04-28T19:33:36.662676Z","times_seen":3,"resource_available":true,"data":null}},"time_used":846,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":846,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-77fcdb44.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:10.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-77fcdb44.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6794b2e0-308\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ik3Bs%2BGuibb6iNBPqkgI%2BhsbmUIVCloLuamQ8j6i5mDh24VkhqJkNwg4ZIk1IZRN%2FVPHlKWgyTW84dLsEo2MflZ1G2ifUesrMRzL%2BuC2ygOD%2BCIjCJzmyZPqwK2UuJX3AA%3D%3D\"}]}\r\ncf-ray: 9f381e9848ce3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"be6df40b3e8eda9e3cf728cd083571e2","sha1":"83e915a410f1739b964ea695433a6c5130c93014","sha256":"ac8a877c285826fdbe79f20daa17d41aa34e9b7ceb0592b9e5cce3bfdaa673c8","sha512":"2dc48fac570f6bb7e9596dc14487b5cfd823c8ab22f9204d68c880ccd35dab1a64b6ced89b2e2bc2bd4a4dc1bb5736553da578e7799b5fa2c018d219e6cd69cc","ssdeep":"","tlshash":"4201fdf9fc0c8ebb0ea20a4042902600140a1fddfa1419f198867d661be4940d7ce32d","first_seen":"2025-06-19T02:24:45.779468Z","last_seen":"2026-04-28T19:33:36.650336Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp5003601ad1584e3885d20c1533a0af9a.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp5003601ad1584e3885d20c1533a0af9a.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66690\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC01AB4B8138388F9FB0\r\nAccept-Ranges: bytes\r\nETag: \"CBEC0CC4E6C68E40B434B233B215E994\"\r\nLast-Modified: Sat, 28 Dec 2024 06:21:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12580187144197897650\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: y+wMxObGjkC0NLIzshXplA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":66690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 780 x 729, 8-bit/color RGBA, non-interlaced","md5":"cbec0cc4e6c68e40b434b233b215e994","sha1":"88e001f3d4b9515ff1e3e2f74a42e6f8a93a4e6e","sha256":"9fb9dc9d37fa744cc8d6aa423121d44225784060d60e4375b19629f71974c2fe","sha512":"01f59eaa403a285ebad7b1cb3c4ae1be7cf9c13ac7910bcfe85186ea3f6659582fc20806d176d4c8a07e3f14c307fdfbc8e1857d983b8dfe58530716b1fa5a5a","ssdeep":"1536:0BaOua8IkqRbk8PxEFg6DubNAAnONpHKPDhxHu85+0tRLmxHEvC1Fk+:0BDtkqRVPKPqmXNxYFpu6+0tUxksy+","tlshash":"b053025ce35aaaa3c5cb21714d8c0e8168ad4a4f3c5362a6641030c71f7a5f2e7ec977","first_seen":"2025-02-02T00:35:42.264542Z","last_seen":"2026-04-28T19:33:36.657145Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1867,"timings":{"blocked":1334,"dns":0,"connect":0,"send":0,"wait":278,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getAllSetting","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sMofKNfnK6sLAif81tvpLPaB4W6KGvijRsPlsSe0x8EQWEYuPacH3l7W7LmVN0%2Fn2%2BDWonGaYMXxdQ6J600UrINSbzEiPKciCDy8Bguso25mnpQOZ8OqEvhSf4RQGjam8Vf0YW4e%2BWQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381ea2fa04b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/vendor-59d1d097.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:07.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/vendor-59d1d097.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-d6c3e\"\r\nexpires: Wed, 29 Apr 2026 06:27:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uz86EFEaEMYSQUazeeOPyRYhJDsLVVw4IX11rAlVtYo0A87ziV1kSsM2hJ1GHbPRMGEa2Z0VpMo%2BqbvTJGdQzfaHBa1r4k%2FGUjcY9UaFQHCLHf1iu50drxbu0l9wb6HaaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e8329ca3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":879678,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"34a4e6bb0b5ccecddb517c50a51d4ac7","sha1":"d071d1c69bedc0f9afdd35bf85cebf068d4feb72","sha256":"525eb4c25143e6e43b27ff094d7ab2c5b69ef5610d8a0799aac95a0232fd235d","sha512":"cbe77e6e02b1acee2540d117ede908f6081b8bde35e7226f3815e365dde836a88a6cd61d817e2da02a0991e333595d8349f98eb6d30f5afc982a2a4c6ea7003c","ssdeep":"12288:NrgoZ+A7lCFumfDT1SaBRMhWiOpEIWVTzuLfatf2OqWKwvU7ola2Uj:NUo4A7lqf/YSRLpEIWnAOqWKwvba2y","tlshash":"c3153ac57292f06147ab20e210bb1006f3396e59744e84a4f16d98db7d7ad89e2b7f3c","first_seen":"2025-06-19T02:24:45.742771Z","last_seen":"2026-04-28T19:33:36.648689Z","times_seen":3,"resource_available":true,"data":null}},"time_used":2269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1084,"receive":1185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getAllSetting","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:10.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:11 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v3%2BZcrqUGbnLZleGHWx3ew%2Bz3ZiMUeoHu6DOZqIR6WprFM5oKx%2BVi01zkMGwHP5XgZpj0EPcMFLZxnIfKYtPumb47biEL2PwAPrkYZuOm8BiqrC9Z8D4Rv5WDhbNtjQGCXhclliW3bQ%3D\"}]}\r\ncf-ray: 9f381e980f3c1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12046,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (11720), with no line terminators","md5":"785099e6d36e296a5f71a4249f088f49","sha1":"fb4650aea23d25924eb857b909a74cddc46912b4","sha256":"31d5a414823441438eb10e77c1b7f1b5592c4ad6962c902caa60502cf3e1ab5e","sha512":"771244777e5db9a218a13961693e2f55cae518c3c71b32ffccc0c3975b57689dc00aa90525749c86021a08d64a8be77bbc3c82b95531aaf34da5e7d83c18e591","ssdeep":"192:q+9BpUOSpQ+oQD+RbKM2hVoeHqzv5iULy355xrkD515dq2sYDMNjD3eoV6JkhAda:29aO2FMR5eb2SE","tlshash":"8f42555b31dcccbdc6d64dc5d0bb3a5a759c38abaa809c55d8e6af9c889dcb3440b00d","first_seen":"2026-04-28T18:27:36.006901Z","last_seen":"2026-04-28T19:33:36.654624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpd36c7ba6af4f41988d24a243ebad9744.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpd36c7ba6af4f41988d24a243ebad9744.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66690\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC01C78BAF3330A744FB\r\nAccept-Ranges: bytes\r\nETag: \"CBEC0CC4E6C68E40B434B233B215E994\"\r\nLast-Modified: Sat, 28 Dec 2024 06:21:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12580187144197897650\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: y+wMxObGjkC0NLIzshXplA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":66690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 780 x 729, 8-bit/color RGBA, non-interlaced","md5":"cbec0cc4e6c68e40b434b233b215e994","sha1":"88e001f3d4b9515ff1e3e2f74a42e6f8a93a4e6e","sha256":"9fb9dc9d37fa744cc8d6aa423121d44225784060d60e4375b19629f71974c2fe","sha512":"01f59eaa403a285ebad7b1cb3c4ae1be7cf9c13ac7910bcfe85186ea3f6659582fc20806d176d4c8a07e3f14c307fdfbc8e1857d983b8dfe58530716b1fa5a5a","ssdeep":"1536:0BaOua8IkqRbk8PxEFg6DubNAAnONpHKPDhxHu85+0tRLmxHEvC1Fk+:0BDtkqRVPKPqmXNxYFpu6+0tUxksy+","tlshash":"b053025ce35aaaa3c5cb21714d8c0e8168ad4a4f3c5362a6641030c71f7a5f2e7ec977","first_seen":"2025-02-02T00:35:42.264542Z","last_seen":"2026-04-28T19:33:36.657145Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2129,"timings":{"blocked":786,"dns":1,"connect":265,"send":0,"wait":273,"receive":267,"ssl":533},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp52cda99078a846318268161fdd312606.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp52cda99078a846318268161fdd312606.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 212682\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC0268F57934346F2A78\r\nAccept-Ranges: bytes\r\nETag: \"5C50F9006B35205538A2AE762272AAFC\"\r\nLast-Modified: Sat, 28 Dec 2024 06:22:12 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11836568954764455172\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XFD5AGs1IFU4oq52InKq/A==\r\nx-oss-server-time: 6\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":212682,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 1500, 8-bit/color RGBA, non-interlaced","md5":"5c50f9006b35205538a2ae762272aafc","sha1":"cbe2b0ebf9cfc86d8a797153c4e7be08a9984a5c","sha256":"9dee77e684e7bb856bfd43acff23efe0eeb83999abf31e1c188167a39536fc25","sha512":"80212546d4ae3100512a73c89950e18627a733d38664f62a95b0ca7335293c5cff181e7d073dd0426e4ef4d93c5718d54ac8c28097bacdfdf53cec61c505852c","ssdeep":"3072:RJFobMlHsWiNJrtIND6bYit5LMAf9fqWQA+r+An4KnU36T7qQsR7dJNhHf:KAlHsV5ttY6BBqWBhKnO6T7qzP/","tlshash":"a624129910e7cb62ef5e4737b52e3f90680458063aa833380170ee49ce9bdea46746f1","first_seen":"2025-02-02T00:35:42.266504Z","last_seen":"2026-04-28T19:33:36.64545Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2725,"timings":{"blocked":1802,"dns":0,"connect":0,"send":0,"wait":296,"receive":627,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp97256cdf0a84490b93fa510fc61c5ad0.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp97256cdf0a84490b93fa510fc61c5ad0.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 212682\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC01AB4B813737649EB0\r\nAccept-Ranges: bytes\r\nETag: \"5C50F9006B35205538A2AE762272AAFC\"\r\nLast-Modified: Sat, 28 Dec 2024 06:22:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11836568954764455172\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: XFD5AGs1IFU4oq52InKq/A==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":212682,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 1500, 8-bit/color RGBA, non-interlaced","md5":"5c50f9006b35205538a2ae762272aafc","sha1":"cbe2b0ebf9cfc86d8a797153c4e7be08a9984a5c","sha256":"9dee77e684e7bb856bfd43acff23efe0eeb83999abf31e1c188167a39536fc25","sha512":"80212546d4ae3100512a73c89950e18627a733d38664f62a95b0ca7335293c5cff181e7d073dd0426e4ef4d93c5718d54ac8c28097bacdfdf53cec61c505852c","ssdeep":"3072:RJFobMlHsWiNJrtIND6bYit5LMAf9fqWQA+r+An4KnU36T7qQsR7dJNhHf:KAlHsV5ttY6BBqWBhKnO6T7qzP/","tlshash":"a624129910e7cb62ef5e4737b52e3f90680458063aa833380170ee49ce9bdea46746f1","first_seen":"2025-02-02T00:35:42.266504Z","last_seen":"2026-04-28T19:33:36.64545Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1954,"timings":{"blocked":1047,"dns":0,"connect":0,"send":0,"wait":292,"receive":615,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-e32aa1de.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:10.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-e32aa1de.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-3649\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=idOLTQ9HcjvV2bMlE7E%2FqtBakLkHS8N3y8NjWYgGBgVBvAw610QFyewiDPqji4JH9wZDEelYVmqbg6y3hbDfV%2B0%2BG8cnw6xxBz4jitlX1hNoHzAR9noX589GYiD7NzcXCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e9828c63181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13897,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13896)","md5":"655c3f713e41926298350a3a6ce3b866","sha1":"503e001ddb55c616b4dca07046b80d29f1c65b3f","sha256":"213f6f1fd49a7677ab70e21204eb07269d389ed9ceca4b6fcf770290ba419ea7","sha512":"f0896768567bbf14226fbea8db0333fe651ea15590eeaa2a1007b36eddacd4d4fd161503d838b0f7d82df9db572899b36c8fe4a0d28e6121cbe3ac89013644dd","ssdeep":"384:+DcwS7VAjw7zeyndG7FY8tJfUlwCD8+AAgW6k6MjzprhlcYCO7sSyX:8dSnFmztJfU6fmvprhlcYC3LX","tlshash":"c852d862f9079a3cf5fba05140c80050b6697ffb501a89e2b9bc6d4a3356ef8b35d718","first_seen":"2025-06-19T02:24:45.762431Z","last_seen":"2026-04-28T19:33:36.662676Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/en-fad3186f.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:11.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/en-fad3186f.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-a0e4\"\r\nexpires: Wed, 29 Apr 2026 06:27:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4YmHbvSvKqvXJMlqt6AJQaesIG5rv4tUhiIFkEhUfpA3QGVH0Dtb37B9I0avRY26%2B9k7gvcZaFha1lD7DEktr34Lxef%2B3QgRM9Qtevo3Xw9lOsyqE%2F%2FQFPM7ZEqTSDtqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e9a291b3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41188,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (41001)","md5":"7ee0aa9979231e441bba765bf0b3f6d4","sha1":"a7ebc9a8902b8846dfb126ad8365be0c4839ccfc","sha256":"65996f5aa608c26dd8f178672b7121ea9a44d355717b11b2516361d258f115c9","sha512":"df80fd6f49267800a1909616b543a83cc1562230db9b69118ed3317121bb5ff2814001c6f12c50b3d59d8a3192507ccca5c97a0590aa0ff2609f6dd64cdf5962","ssdeep":"768:9Y/4tZcEw/o7rKOdAFsifnAMC2rAaAMEVoP6+6sPG9q1mwO6fpk7aOLxO:9wponKOdebE2rdEVLsPWqqLxO","tlshash":"a603c6897e1a989a04f3536774ce6e1120f60ac28255881f4fedc9fd53d2b67a363b34","first_seen":"2025-02-02T00:35:42.29314Z","last_seen":"2026-04-28T19:33:36.6389Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getMt5Amount?coin=xau","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:11.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:11 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Loo8Ng5HxqImln5ITtm7snPh6ob78gpTCf2NmJwi1DlFs0%2BKvQEGqKRZPl65v3YRRDEp8CjBoZsWOGEi%2B5EA5UodyE0bGnTJWPKN8QOd6Hou6x0FDAAWAA%2BZFdqaeuCF3hpebNb5AVY%3D\"}]}\r\ncf-ray: 9f381e9a1e771a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_etc.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_etc.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8524\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"cc1adcdfdf065fce1eaf332e06fb696a\"\r\nlast-modified: Tue, 03 Mar 2026 01:43:18 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=HhwOSi2NPW.rw_YSqmlAu7bqUcf8HBI9HYHmDSONWYc-1777400832.3901427-1.0.1.1-RxOiSvbzKrY4X0DfpVprFWj4rW9HGspV9GJ6riuayTvlw0SJsLqPKp0RN0bFF6iiVGcmeKh7fb6ww0qMkn7u2E6.kkyB75MTcTeJQTYW3aHwn.ZrKyj4YYTEP4YqkMBb; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\ncf-ray: 9f381ea269d65684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc1adcdfdf065fce1eaf332e06fb696a","sha1":"39b740a310591ecddfe849e8844572f462579763","sha256":"cf7f493973716a45cc173fd8d540b06f6de4429e0b84be8c009a1d72e49137cd","sha512":"410f3065518e75468066c2b86d644daf6a9d8a304afad45728f069c7e88a06a278a6d93d2c6d7915d445c489a6fb7a29c16a40b7faf2570d00aeaa8b17a4e932","ssdeep":"192:q89NAY5SmzbZ0KPwsdIqSrgtglApvYydsYAHSW7VwVuhzTFkDjc:P+mzRPRdItrgtBpyYOS4VwVKO8","tlshash":"c402af8fe7e4a0b33d1c405234433449da0f913ad1e87c2776baa96fa22d4decc75946","first_seen":"2025-09-18T10:45:14.162046Z","last_seen":"2026-05-07T20:34:44.809967Z","times_seen":5,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":51,"dns":2,"connect":1,"send":0,"wait":115,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_ton.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_ton.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8792\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"1a26eb784bb80aacdffd66b03eb12fda\"\r\nlast-modified: Tue, 03 Mar 2026 01:46:20 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=JKuIyjkAmpbjbxk0GfHY.hU3IAovv0rpQ.tW3pqdE0M-1777400832.3857002-1.0.1.1-MWHDidQKI83FMg9Y4i2Z1KSUJHMx38r.LRUAdDkfXyjPXeOMA7Fy8zOiiyg3sGnVx3_tRLBG265S0_9PNpzGk0IAgxGKAAabJHijB_eIuSZgEIqafkNn6qiFqaKu5DIT; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9f381ea269c55684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a26eb784bb80aacdffd66b03eb12fda","sha1":"7ab313aee55b2b338919bd153ff1bc6f2b923b68","sha256":"3434335b283844800664281ec4183a1c649465dca505cc2b0cf3d146423ae7eb","sha512":"a2d6fd023f2f0b3d6be1765db77ee61b79348c1863afa582997e94558e69bc40e9604b94582c53ca276dbd3eb9dc3518547e510dab49e858892eea29134b914c","ssdeep":"192:t89NAY5SmzbZ0KPwKMGwlZPkyPAejpupe5zbj105yFJNFhDlcdoBQ4ibGHGl:u+mzRPmKyPAetuuzbj100JNFDioiPl","tlshash":"7802b05e42b347d23dbc0012defac00f746ab024c75fb124ba569b4f695fb88f920155","first_seen":"2025-09-18T10:45:14.147957Z","last_seen":"2026-05-07T20:34:44.864789Z","times_seen":5,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_doge.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_doge.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11836\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"eeef89eabae7e3d8650ad2150e3b0887\"\r\nlast-modified: Tue, 03 Mar 2026 01:43:04 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=vqKYZCVsOpwyAe9MObAsJrUqmVTVqWGpltXFWgJ4d6Q-1777400832.4156442-1.0.1.1-Fi2DaFrpD.5ojtOma6pgximXpVzzyCAeO3z7Fr4auPSfgnWZ9f3hh25Uan0Jf76apIQdzvAaOpXcZnbiTt6iJKvI7V77SJAMeZdGqmWFxRVrR1bcqKdce6_tEDPSf4lT_LKUSAhRLiWCwc7Xp0WwaPyWwwOJYbTTeZQJfCxTlqkDL3f.dQTyEm4wp1.U_CVJ\"}]}\r\nset-cookie: __cf_bm=toF9RlGmLwAuzmjDnykw2YSGf_hiShVV0zdPDqzFot0-1777400832.4156442-1.0.1.1-2NO_sbcXrKU_xNVpsj2idyLURSVo8zUqz748lRbfefOw9dh73pFYsimDvM1xmOVYQMQl4i3f4DMBf7PVYXJupuBIZq7qDsNRMDA8zNKkTls5uudGmsiU_ynQDcvQtV4r; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\ncf-cache-status: HIT\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=vqKYZCVsOpwyAe9MObAsJrUqmVTVqWGpltXFWgJ4d6Q-1777400832.4156442-1.0.1.1-Fi2DaFrpD.5ojtOma6pgximXpVzzyCAeO3z7Fr4auPSfgnWZ9f3hh25Uan0Jf76apIQdzvAaOpXcZnbiTt6iJKvI7V77SJAMeZdGqmWFxRVrR1bcqKdce6_tEDPSf4lT_LKUSAhRLiWCwc7Xp0WwaPyWwwOJYbTTeZQJfCxTlqkDL3f.dQTyEm4wp1.U_CVJ; report-to cf-csp-endpoint\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncf-ray: 9f381ea29a245684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eeef89eabae7e3d8650ad2150e3b0887","sha1":"4edbaf7375d0af99116a391ad05ce98df9675395","sha256":"4bdbc7b214c49dbaf4c47428bf65301a06cc3d7e2ea0eaf13f64b6fa626f461b","sha512":"6347ee0956bd315606524e13dac38c0878658bf1dc4e3b1693bd320baa3e4ca43f8938624e1485fb7d581e280d2ea3b542a8d0ba49ccd79653de4a6dd6c5dd8c","ssdeep":"192:NDYjjEzY6uP/p8RE7wCgS7ug6EMFsY7VD4xmKwTkf/oyZazAo+eNKQ1jaTA5ugm+:BYjwzYjxEEHGgdMuY7VD4xbwofjkAozv","tlshash":"6832cf2bb430a17abc3d5bc38ce394ad3f41c3bad99228ce6e8c5452f6aa417d506305","first_seen":"2025-06-04T17:05:58.489322Z","last_seen":"2026-05-13T11:09:14.215286Z","times_seen":40,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp286e188ac8bf406b8df973ee1f13e92f.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:13.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp286e188ac8bf406b8df973ee1f13e92f.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 68034\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC01C78BAF33305047FB\r\nAccept-Ranges: bytes\r\nETag: \"F4F9AACAFD34859C016E00935EE2B426\"\r\nLast-Modified: Sat, 28 Dec 2024 06:28:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12025236494059902021\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 9Pmqyv00hZwBbgCTXuK0Jg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":68034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x672, components 3","md5":"f4f9aacafd34859c016e00935ee2b426","sha1":"87383619bcd0253034542b3b92d7c0c7a56a38b3","sha256":"37331e55ddae411048ac7c12228033600df1d708bb9fd6110c05471fac241baa","sha512":"423cf75aa2f6768b96e7782b9b038b368d4777ec3e3bb761ecf319801dee39f4413f88813f896bae10bf5a2e83325170c3f2ad3eaf4265ca7e4925c550dddba6","ssdeep":"1536:Rpgm8J5wAsvaQhJmv4on727oOW+015yd8oUIBE2HGJ:JKwhaO+4oCM/F15yd7U+Ewg","tlshash":"27630207b701a606e1d01b31696bafd94fbe916f2167c3ebb1519af6cc46628b313720","first_seen":"2025-02-02T00:35:42.278868Z","last_seen":"2026-04-28T19:33:36.659115Z","times_seen":4,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":562,"dns":0,"connect":0,"send":0,"wait":279,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-36a2a4a7.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-36a2a4a7.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6794b2e0-1fe\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3eCVURrDEzTYV6PwrytV53vfwsEkH%2Fdu1qGQZCVSnw1gIm%2BkKq%2FgVDjFCW8YC9XTz3L00G4BmxVfMGswTZinKPTPgaMU%2BIsf0H9U%2F%2FIBKMO3AdFv6CLZYYJMbCoUIvX6rg%3D%3D\"}]}\r\ncf-ray: 9f381e927fd63181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":510,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (509)","md5":"c188853dfc6cffdf97083825328b4c9d","sha1":"9f96cb169ecd6f4264ec2381f2dfabd6baec1fe3","sha256":"cc49710d81d13cdc7eb3347fa0b898f8393385bcf9de09584e49f8e6963982b1","sha512":"4adfb9006bb33e52b790a78146b31996cfe536d0cfecff0e9afc0fa40e6df911c791f4b823047c7e91be45a2b2a401ea3b6f32e0305c37f438767d808ec4292f","ssdeep":"","tlshash":"73f00e7f7d6a80722bf388e8a2b30820b62c1b4a3b54c4d4d9871e10d774ce3d16f228","first_seen":"2025-06-19T02:24:45.775316Z","last_seen":"2026-04-28T19:33:36.64799Z","times_seen":3,"resource_available":true,"data":null}},"time_used":885,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":885,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getMt5Amount?coin=xag","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:11.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:11 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvMV2FTYzWZ0FvkBQjPgn4uJDeG19LYGq0y1lC%2F4Ez3%2BkrCAVI8EFQac5%2BgSWIyWdXhIJchJmFab%2FaWKbpb7C7DUCi1C5MM6mFvpBYmOUErskW5%2BqSINlyrDSiy5pLpSzddBA2crwiI%3D\"}]}\r\ncf-ray: 9f381e9a1e7f1a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getMt5Amount?coin=xap","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:11.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xap HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:11 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vVIzXsS310zgMiZgS0TEofllKIxcSWXcQfFNxncSU6OhGgFlpohqEOsgfez998CdnCR0lp%2Bz6YvZYVg88jVJndQBLJBEqnCe%2BNbjIO4nFqKoweDENVNkUzh7NeWMmRvNqIZQMGUirE%3D\"}]}\r\ncf-ray: 9f381e9a2eb21a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"webapi.xexbestpro.com/ws/363d961a-6402-4435-93d1-ae0807a3b6d9","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /ws/363d961a-6402-4435-93d1-ae0807a3b6d9 HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://xexbestpro.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: AK1fwrUX0nFH6PDkHMjM8Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Tue, 28 Apr 2026 18:27:10 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://xexbestpro.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 6uAIvxkM4aVmoX0rcrzb8gxk31Y=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4Q7ODpRHoKKBaUPxDmuoNissJ8hiB0CbXZND%2BlZRQ1RrujkNrwfQ7iTg9E9hBIN7g7yhbIFahvZopXb70Iwkhmc%2FXrvNpjRI1pyEtqRNA1CvyEh96%2FenJvZGVlINZ6T5bw0lnaIKW%2Bg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9f381e930beeb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=494\u0026min_rtt=459\u0026rtt_var=152\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3117\u0026recv_bytes=1200\u0026delivery_rate=7515570\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=ffbb6ebf8361a553\u0026ts=856\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":926,"timings":{"blocked":9,"dns":33,"connect":25,"send":0,"wait":843,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp74f9d1535d3546fab67fb4ef7796ce3f.jfif?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp74f9d1535d3546fab67fb4ef7796ce3f.jfif?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1020\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC01BC6A5B313331B13C\r\nAccept-Ranges: bytes\r\nETag: \"FEFC4C2FEE1744A34034DBBAEF82316F\"\r\nLast-Modified: Sat, 28 Dec 2024 06:26:58 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1657945692254989793\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /vxML+4XRKNANNu674Ixbw==\r\nx-oss-server-time: 20\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"fefc4c2fee1744a34034dbbaef82316f","sha1":"ad1774785b02870643113d742c59a861007902ae","sha256":"b9f7aa27195c249887b07ec3b570819e71f7373b36e5a25ae23f55517816b760","sha512":"ebd655eaf1f6896c483cde3b8ddeea93beb609a77207f85aa102822734f26e7882f0f42c5a2704c3d9b3aa52c1d01032c9d92204b200cb0290a84ddf25d394d3","ssdeep":"","tlshash":"4911d8cd6671cf7543f88250823fc86892396d9c50e31df8a21c7543687e130221ccc1","first_seen":"2025-01-06T18:38:04.012508Z","last_seen":"2026-06-01T14:33:57.942222Z","times_seen":86,"resource_available":false,"data":null}},"time_used":2110,"timings":{"blocked":902,"dns":37,"connect":286,"send":0,"wait":307,"receive":0,"ssl":575},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_avax.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_avax.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8696\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"d4c32cdcbbe93620061421c9dea94fb5\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:07 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=sUT93ubYftk8W4ODk21L._f9QjS4W26bXY8xTwMoLWw-1777400832.387012-1.0.1.1-Hh6c4GjheCqWFvyfD2h04LH4VoHbuMXUklByjIeShK6yGS1jT9LFNfczyoFVYDhKEHgaYUZAWabxDxpinITha6_bILDXQ32MEwCoVlZeOEFmgl2uiDrcHGKAV0e.ZFS2; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\ncf-ray: 9f381ea269c85684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4c32cdcbbe93620061421c9dea94fb5","sha1":"86b7d8bfcadcf29dc15e04ac27c6fde87dff4037","sha256":"d8e22a4ffaddf6d0ac9a800f58e91a0568b42b7b950ed433acab3e6b54d298d1","sha512":"7e689ce4701f9b7934003689d6365157b34be9be1f94d216df6ffe458179c4428740f75fe17d2575acc0d33fd9ffc680924eee33396bbb2141d3ab044221cf3b","ssdeep":"192:e89NAY5SmzbZ0KPwumFLowvjvYXYN6G+jqe7R0q3YShNSGwp:T+mzRPNi7d6lNYwNSGwp","tlshash":"5102bf17c5a6e7b51e48c4a70c40942fc33a9020694fad28534c9c5bb33dfeeddb1899","first_seen":"2025-09-18T10:45:14.114732Z","last_seen":"2026-04-28T19:33:36.653064Z","times_seen":3,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_bnb.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_bnb.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10384\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"ce04d16efbaa543192615e13a7e5f7fb\"\r\nlast-modified: Tue, 03 Mar 2026 01:42:23 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=y1amXQpgXbBhC1ZJ8sQo8e1PL9m9m7VCmkuGq8QOaGY-1777400832.4071612-1.0.1.1-5wNY50TDzlYcTg9jvc7aichvsp6Qtih4Ug2NbwiPG9FuwFPfFR6Rf1kbT4qFvvMLoDNNU1iUgsqhm3Kzc3Rp8q8p9odXpdlhRlLlcj49K3DKZmxMWRs2P1fa.9K7SrGg; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\ncf-ray: 9f381ea28a095684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce04d16efbaa543192615e13a7e5f7fb","sha1":"833ce284ffc85e0dac3ce2e2567cf2d7980ab9f1","sha256":"bc5207bb03a5312c2deec22bd4651d89257eec64fa8a036598df67699102d6db","sha512":"2cc7a3227d27bc8bf2ea13e0f7a63effe9165ad59e3549de1b03d6d44a833e56b7021531a47e09977f1220652625b6a817c9f09d1b027a776ed02a2c1e7e2612","ssdeep":"192:L89NAY5SmzbZ0KPw6XRiel0VM06UkRWrJeCY5rmzUZjYrOtPUxkL0O3b:Q+mzRPBRieq5ngWrJnfqjJPJ5b","tlshash":"0322c04c925132127af084057cc28a79905e335974bae1c5a99c165f3d3aceeef568a8","first_seen":"2025-09-18T10:45:14.088674Z","last_seen":"2026-05-07T20:34:44.866144Z","times_seen":10,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_sol.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_sol.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5812\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"5bc7eb3839fa419024d466729b76a863\"\r\nlast-modified: Tue, 03 Mar 2026 01:45:56 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=YBZMFbmuGJ7LDtjNXVEzKfaK2PN1XVsD8Jj6uUFBx_Q-1777400832.4089417-1.0.1.1-0_R.gqOHHHs.jt4CUKIh_SBV1N1gUGIYairZ.bPEfHjhARX__F9j3VCCG2cUpRSVHzJiIxrtsnYCc7oaZlsfk7WfbT8kLPd9Ul9Kcve7INRNHTWdTK.foOCFIHZ9LN02; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9f381ea28a115684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5bc7eb3839fa419024d466729b76a863","sha1":"2c62b058343436b88c56a5c3bd3a7e751e20444d","sha256":"469b2921933e8d3581d9b9f629744f0ef3ae00737094bfde3bc79a0574580761","sha512":"385c083444cb0d6e78b5e46c0eeb54e11e4b47a83316d9a8518a3f30c93e2b87cdaa7e0ac3faba33d935ca8574edbb7fbe07b82324f7c48f62cad4703b2ae5d0","ssdeep":"96:jJKpGINSQyHVK5Sm1ta0eRE3EkNLQMYjPfHTie9b30Muw1F5LsXep:t89NAY5SmzbZ0KPwnWE07w1FGe","tlshash":"fdc18e18d2e5a4e335e8844767c5c21ad42d002c1206fd3252f9ed876a1bdfb9f2daf8","first_seen":"2025-06-04T17:05:58.571943Z","last_seen":"2026-05-13T11:09:14.306182Z","times_seen":36,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/type/defi_activity_type","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxzIJOoX9H%2FWQkUkgs5sbW1EClV3D5q5ZdYkoi7rAxTGnvLU93jFMOFD0E1s20rv%2BYkoFPhLvi8zsgvO9GtnkPDq%2FUp9l9PKO9%2F3yHm3n2fkebI8YMsc428jJOP1YzI74S%2BNG8k03Ko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381ea30a0bb50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/type/defi_activity_type","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:13 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2vBPIDTIEpHJyof1F8pixRGGnOOu%2F22jDbvYwHS%2BZvwrUe97eAD83NcYEsX2EoAJ7Ol05%2FcB8pqQJZCaLnQ2LXddkd3R5gJdIYeC70Et0Frp6pcCukg4r03YIMzcS85noSWIryQdUwc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381ea5ccfab50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-06-04T04:33:14.419392Z","times_seen":666,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/currencyItem-69dc0017.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:10.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/currencyItem-69dc0017.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-4b6\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Jl50a4UDtdcPE3mJafn6LLP5rWBOzwgrrv7uCqC12I2KwWRKe96lwS6B1ohOwa1vngPjnHMB5tssLPQnuRHE9WYKDfc%2FPyTv%2BLRrdTParNFdexmCEErnn1fnhZ7%2BPvVJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e9848cd3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"eb61a566e218a149dd68df005aab1352","sha1":"6115952faa45d8706e3d99c77ea727b5c92f8dd9","sha256":"18d7c4c9f1b2a857ceff701ca1ed6effe6558317e6587e556acec18d86a8c292","sha512":"56c24586a5093d4c97c06211641a7aa41985fba045cca9937cdad2da5dfe5a398bb3b469b5d4f44c36bff9fe1de895ce2c36fee1c8a0ba80b07208ae40337c79","ssdeep":"","tlshash":"2721df9aad02c7b1cabe946281bd4414131d7bda700185c1ebed148a37876fcd728a31","first_seen":"2025-06-19T02:24:45.764118Z","last_seen":"2026-04-28T19:33:36.660472Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getMt5Amount?coin=xpd","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:11.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xpd HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=trYi54kVvy8oZeE3Coc7ZgDKsYEt4IJJyCWAkpNQ57Fig61Q5GMb4kukxkQIWC6MDzMRfYwmZazkAsclsmUY1QA7laS1u4Nf6wFhjKZS%2BANM2xPRPGlKVqjeocdb7Nic5g6DaPF4mTM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e9bda9ab50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"10a9ffba73b2c13f2cf77027963e16bc","sha1":"91103cebb3967e098e39740eb181ee456d93c044","sha256":"dfd52369805706aaf70ae9cff6b0c2ac38fc9402d5ce7976f9829618201a7e40","sha512":"bf06e36bb7075e6eb9b283fa092427e853631add583155f1458f8301e693075fb004b14ebd85da8324c8c4f3a2084df3fa16b52539fc75b010a94568157b8bcd","ssdeep":"","tlshash":"429002651c1c8243b88701a596461208402431646664d2584c59912580881a22040858","first_seen":"2026-04-28T18:27:36.026316Z","last_seen":"2026-04-28T18:27:36.026316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_near.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_near.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7556\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"3ef243cdbde6310a864669c80de226eb\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:47 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=5etnftFziXAcBEHy2jn1Watrmh9swr99UCkuRQNq83M-1777400832.4009304-1.0.1.1-IGHv43HetX4GdK4eonKQ7j1iddXX5EkY_14uJPE0YcawsKmcET2R159YQYI97Gia_nSAPeB3XWA_uS.1bNAxe_mHAk_r7WF8euR9shWptZDtTHmE5rGaHWPaoZCLGEJO; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9f381ea279f85684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ef243cdbde6310a864669c80de226eb","sha1":"e8b104b1377a79bbca795cd2903c74b8a286c5bd","sha256":"61ff3f9321ff1e1aeaac230e01dc7d47d4dd768f13af29a350af0a168ab6184d","sha512":"5b59464211378044ed8f077ab5c7ed6340f8b6772a5bdb52c6c959b574489dfb014b3c98ab18a7f5e59472e101ba9140276462dfd108d6c0b528410ed8a2418c","ssdeep":"192:289NAY5SmzbZ0KPwY96s8+CL0mVx0OcWmqCSzD:7+mzRP79H89Lw/WND","tlshash":"e2f19ff4a270be05117c44b3a4e4442ef91ca00bd29da908a5fde99fbf27d3c5e654e4","first_seen":"2025-09-18T10:45:14.149469Z","last_seen":"2026-04-28T19:33:36.635882Z","times_seen":3,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":110,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/currencyItem-69dc0017.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/currencyItem-69dc0017.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-4b6\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sSqzNntKCNG9h%2FtN59xTRbu3x9B41kcR0izj4%2Ff89K9nSo0nt%2Fb2NdkipSVnxcWBK6JymKZe4edpaUDVPtbk4Ifunvwy53KcYPd3JsyjvXgctz%2BCkBQRiJ5cq4Nkcj6YUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e928fda3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"eb61a566e218a149dd68df005aab1352","sha1":"6115952faa45d8706e3d99c77ea727b5c92f8dd9","sha256":"18d7c4c9f1b2a857ceff701ca1ed6effe6558317e6587e556acec18d86a8c292","sha512":"56c24586a5093d4c97c06211641a7aa41985fba045cca9937cdad2da5dfe5a398bb3b469b5d4f44c36bff9fe1de895ce2c36fee1c8a0ba80b07208ae40337c79","ssdeep":"","tlshash":"2721df9aad02c7b1cabe946281bd4414131d7bda700185c1ebed148a37876fcd728a31","first_seen":"2025-06-19T02:24:45.764118Z","last_seen":"2026-04-28T19:33:36.660472Z","times_seen":3,"resource_available":true,"data":null}},"time_used":899,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":899,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/vendor-7eaa3a1d.css","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:06.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/vendor-7eaa3a1d.css HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-16c1e\"\r\nexpires: Wed, 29 Apr 2026 06:27:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0bwg6v2MDz0SEsCEzfZopwz%2FPvmSJEXbHa%2BMrg2dD%2Fl%2FRAkHC63RUZGAFbqmpEbHX9QDuwrrOvoQz3v9RAK9kAT0ruKBA6K1DwhDo49Z0NBRiiqmhqfqdZNINEMcHZCplQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e7bb81d3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93214,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"8aef551479cd768f08b17aa53b2aee7b","sha1":"bde44b9c7c806620d6bef662457283c8249e658b","sha256":"7eaa3a1d80b7b315220f31fa65efebe89b62b2f736396b95384f0abe44d07ac4","sha512":"e3ca8339741dd0a44162a8df19670d7ee3b43cf4aa39a0a48803f10735c74ec95991a10a6fbe33a3a44f4f07205b8607fb0f2cdc8cc040e4734bcd98c12a2b67","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8D/zb:BnNIClDsIxuVS8nb","tlshash":"a593d4a5a9c461fc6f2ae2659b8765e8f13cf671cc01daa0f105511d0fcbbf60613a3a","first_seen":"2025-06-19T02:24:45.883153Z","last_seen":"2026-05-08T21:17:12.318016Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1085,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/platform/dev/favicon.ico?2.0.1737798368368","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1737798368368 HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6794b2c7-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNl3gophCj2bdtp2D5DgCl3jt2ALmnazBcglpEYoQLMW5AZFXu00vqtJdXkJzKyMXMW8fJcKNfyG1hrmrk%2BWfvWEtemmvulhYx5qPl64S7lBXhhz4X6zu5X9RAz8soTVdA%3D%3D\"}]}\r\ncf-ray: 9f381e8fdf663181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"52fcbdc9b89c76570a1246925d321d0d","sha1":"3f50dd9c170be3d69730f9060d26c40c72bb9d96","sha256":"973c5a83c751f168437e3b261dbd6e939123a9908a711cbed65f18d74696a62d","sha512":"c070c3d1805d341a50bdf930c4fd272b83fe40b7f2f5fa873fc7c46c5cdfb867efa265a29b6d190f393c342edd7079d7181fadc8904d7c6b9b67aee9d3dafb6f","ssdeep":"96:fulu06nYkKiOeP1wl7tU3GLtIJyoAbdDes1:BYgF1K7tU2LtIwoEdDR1","tlshash":"c391debd5deea63cc201467128910264f6f2cf207afb2b0994f7f68dd92d40a532c9a5","first_seen":"2024-12-28T13:26:38.876326Z","last_seen":"2026-06-01T14:35:57.908374Z","times_seen":97,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/currencyItem-60d85ee8.css","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/currencyItem-60d85ee8.css HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-6d6\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RdeIxWIiKlxLDJLjvxMwnN3wFzjOYDKFPXZMN6vJ4HWYkecAdjGZj%2F5fX3xoXfqEovtRP6RiimA%2FFSB%2FFrmLcocAZKwbYEMaoDCwZW%2Bo1jQEuqFh5Guuvh3RYuc%2BzPgF7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e927fd23181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"1089970c70c80c7202c76af80156cac9","sha1":"c85254b66ce1b056fec523057b79da4889c136d9","sha256":"60d85ee8da3a27266c72c465a77ff03384a9776be9ae03b980eb193309676fe9","sha512":"628494baa060e49ba3eaa5dcd330f03d54b6fdd995eb23795ad098b214db3e5c95861487d28dc8333a3c1c01c5200869432354ecf46c4a29cf78adfd6db7868e","ssdeep":"","tlshash":"c2314fe4d3160374d93ac8966ea4018cd0543b829057dac9f48ffe1b5fcb6d31b70969","first_seen":"2025-06-19T02:24:45.85215Z","last_seen":"2026-04-28T19:33:36.667313Z","times_seen":9,"resource_available":false,"data":null}},"time_used":900,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":900,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/filters-78ce0663.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/filters-78ce0663.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-d78\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HjWeGpyoOq%2BGffXyme%2FXSO0sRs35y0EGNMg%2BBpDyzT5NBTrWjjk4pKzvwqoR3Utmhj9AmmPrL1MSpZ8l689r79lGQvg5DZksSnU0YTPM6Pe3bE8hAzymo8uPxAUOK1DJOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e928fd93181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3448,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3425)","md5":"c93d3ab6485a831b6bdbe46cf0b5a804","sha1":"b98fc7b3776258900ec30f2b64cc6ef2d135f1f4","sha256":"9a2dcd43650683060f243038bb3cc8ac66f6861f89a1c432d5587099faf3fa2d","sha512":"c91a50fa5b54aab5644d266a27d48de2d52623035a6a71327aa7b8a3abe6ec1f5c6f6aa0d4980c0e760b73c943ba69a591476aca0b122a8bedcd5fb7ab7d27af","ssdeep":"","tlshash":"e96125edfcd7613756fa6ae9002c855172ceae20785e0e49f54bd041597388ce0bfb64","first_seen":"2025-06-19T02:24:45.734561Z","last_seen":"2026-04-28T19:33:36.640071Z","times_seen":3,"resource_available":true,"data":null}},"time_used":833,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-2051d7e3.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:06.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-2051d7e3.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 14 Mar 2026 07:51:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b51368-18eb5\"\r\nexpires: Wed, 29 Apr 2026 06:27:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80EfThlGeT7Fx8vR84UllldNTRRuyMulWEPXpcUZF4mxwTd5kPquT5yKCEuuhwyLTPRmIG6BSataj8ghY16q9FzctXaLSwC5IJ9%2BxCaoYrt8CFpbHLmGaKx60MiDyQaYdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e7bb81b3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102069,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"602edcb3b7c76fd8e44ef4e7db63b874","sha1":"5b6d5fd84c621034babfcf1d7437b481a0ac4b8f","sha256":"74b0ae11d0cd842b466ed6e04e1ab0c8e842b0a81cf8bf35f842284915024514","sha512":"9ab3254a49bbf0def55192f700f49995cf9c2e63ba67ff9f6aaad0e094acb45fa2a9c7d9e923f707c3377167530ef3f54eb3fe29a49964bc4816f9f164f8ba60","ssdeep":"1536:LT6qqjy7zO/5qFlPt1wQWaqde3qbsYs7+Co1JS3uHHE:PAy7zO/5qFIde3qbsYs7+YD","tlshash":"5aa35c8a78071fff6dee4844a559895021b42f9399cccc93b3bdae1527f6cd4238a319","first_seen":"2026-04-28T18:27:36.031239Z","last_seen":"2026-04-28T19:33:36.652422Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1110,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getMt5Amount?coin=xap","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:11.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xap HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNm9CGunkmSJB4GZZOc%2Fu1UuxUari7az8UX94n%2FQakDf0Jirw8I3NdRNgM%2FCf%2FhzO6KUSnWnOzZvrlNCa2Nh%2F8eNfD9FT4tjDXbjHK%2B6mo%2BycBJgbmIVKsVegi4du3IfrxquTvYF2iw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e9bda9eb50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"38eee6f8010b431540ac2c121c062d07","sha1":"e58f6e86f1198a2d28698b142b73a9d5dda7b46c","sha256":"7eb622cf72b61c7faf6d714f0cbbed904b58f26a7eb221c750b2b082e9f734ec","sha512":"d8fe2141d9fcf763e0d3ef714969bb1fde3b279b45ca8f309cad5aaa289f0d16f7a5d23d2f6c7f9a17cc64c2655e02beeccca3ea399645b341afe0ea39da52fe","ssdeep":"","tlshash":"109002561c1d8282ed8310a595062708002431b06b3892484c59612580881626041c58","first_seen":"2026-04-28T18:27:36.035847Z","last_seen":"2026-04-28T18:27:36.035847Z","times_seen":1,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpef3452d1cdb046dbac734c682a2980fe.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpef3452d1cdb046dbac734c682a2980fe.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 889531\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC01ACF6C53630F9D81C\r\nAccept-Ranges: bytes\r\nETag: \"4B1898172CB1EEAF2ECBD8412928C0EB\"\r\nLast-Modified: Sat, 28 Dec 2024 06:24:25 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11895756006205167554\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SxiYFyyx7q8uy9hBKSjA6w==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":889531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 1754, 8-bit/color RGBA, non-interlaced","md5":"4b1898172cb1eeaf2ecbd8412928c0eb","sha1":"a05c023847e29f70e042c4788df07833d4338dd0","sha256":"83823e3b79d6c3c31c87e70a8a12a9748aeba734127d28bcbb3c76968ac63384","sha512":"75d863253a0e6b37769e3021684ae3c668156addf98882556ff017282ec80aba4ea1f5b4345d209152a976283f43fa0ace513c44e3b0c17414b827420010c266","ssdeep":"24576:bFQ2JyUMYq4OGvr3RYroLjJRoGRRMTyfnBfmkCY:BQ2JyUMYq4OGv1YkLZMkukf","tlshash":"c91523bd42df6a40c95f7128e9e2354306ac6a01c26e48fbd476799c74793ba211cfcb","first_seen":"2025-02-02T00:35:42.280454Z","last_seen":"2026-04-28T19:33:36.64063Z","times_seen":9,"resource_available":false,"data":null}},"time_used":3258,"timings":{"blocked":881,"dns":43,"connect":276,"send":0,"wait":288,"receive":1211,"ssl":556},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Je%2F5fvmPUVprKjq7Tn1GvQVVVG4QlDJLahxnx%2FfdwTa8Oku4SW2oXcLHozsAvepRfGj3oVFbCVbW23TGrTHtUBAG4uEsJQZtE%2BAKJi2X6JstwCHVsxaOOvJJgh%2Bx9vCwmCKeVybj6uc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381ea2fa02b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T12:34:25.437902Z","times_seen":16239334,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:13 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCJK7ZkDnM3ktKi95lEuMTEYu40zXD6aDYLarkdygWR25AWglfvovQphPfgETq5Jjj%2FOmu9VQy2sMAIJ6rXo9jdm2Dlt6BO0u0u6KWvIlTzUeXar8q803tCXSvIGkbrJLiNk6pJh9LY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381ea5cce2b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"398bb7ce82e255652e47d482ef8073b3","sha1":"db3ad21f0d7008e59538d4119d975f80420b62e5","sha256":"1a99c57bd4fe28807a1211b33b87d4933d348582724af35782cedd935a408414","sha512":"62f2bf57fb5c0b53c8ef545c47eec8e98447c76ae3ac34c5dedfb0703fe62ad570c0bcfe47faab1e3629b836667cf9f421f7bc9c50777ea66cec7f3c411b4ef8","ssdeep":"","tlshash":"6ff0c90f2978ceba0c0508c754cdbcca625e2647e360cc709aa6cf6c41f58b70b0a508","first_seen":"2025-09-18T10:45:14.1395Z","last_seen":"2026-04-28T19:33:36.666788Z","times_seen":3,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-d253bac1.css","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6794b2e0-3d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJki8URQr9P5YWRK8wJLAPRAaexD6rBZ7xJrCXcmy84z%2FcVObS5oVDRCSlNveTq8XPHuyV44PO4pYSiKTIFb4iqCg65PA%2F6xZqD%2F%2Ff5sp20PdaMYLK6JDrbCUjofP2MGqA%3D%3D\"}]}\r\ncf-ray: 9f381e927fcd3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-06-04T04:33:14.424259Z","times_seen":317,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":890,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/platform/dev/config.js?1777400829809","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /platform/dev/config.js?1777400829809 HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6794b2c7-18a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCO7CvgFe%2FeAdgXco2NjlUjSwMWRjndNxBb%2F2ptdz%2FFeTQm23NnLiOx278U1yqwh%2BPexxv7ev9esQMhT%2FqnXt9RmPkmeHZRkymUBVR%2FJJLxw0gsckiY7tSbXhJJKHay7cg%3D%3D\"}]}\r\ncf-ray: 9f381e925fc93181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-06-01T14:24:52.336032Z","times_seen":377,"resource_available":false,"data":null}},"time_used":884,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":884,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-b0981e41.css","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-b0981e41.css HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 25 Jan 2025 09:46:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6794b2e0-27c4\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0ViBuz4PFKhiU5%2FfAxMH1I4fbryw6jZWldpqYS%2FHfTOenDkQCQBY8CA2s%2F60zEOXogrNosFtvXslX4ggIAf4hbsvAAGkNcoJgDkwojt6p2bmmPHoZmd4VqXcC1AhNl1FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e927fd43181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10180,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10179)","md5":"94ac2a86c850a4165e5a7e0b505b201d","sha1":"a9b74ddd2bc90105e72bef3d491811deae5bc90c","sha256":"b0981e41889f4dfbe5a2dd10cbe68e6bf586777a9ac605b92ac72126ca95fb0d","sha512":"6bae8a7897e2249dbeb1d24f75664f76a9bdbc3da5700c948b570a29565dbc6a8a81edbfc5ecf7d12916b42edf08d4d76e003e9a3dc2ab36b58e9dc86368e467","ssdeep":"96:tYyGhezOETj+jXMp5mXUVM2tL0a5OsenD62rm8Ikc4rZxsLq/Bslx:tYhePf+EYveqDcuZxsLq/B+","tlshash":"c922322df3952738ac37e2a6abd849cce10db911e553dde4f56795220ddb2f31a30089","first_seen":"2025-02-02T00:35:42.273559Z","last_seen":"2026-04-28T19:33:36.66862Z","times_seen":4,"resource_available":false,"data":null}},"time_used":772,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/common/getMt5Amount?coin=xag","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:11.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hvfwQG85XA6YWIksN74Kc%2FVRi6CPgf4qpDEN%2B%2FkxBT2mh32xNNL96RKMUqH4QpzYvV3Yk0V7FXXS9l0%2BITNGQMYccfxE6zPlSPnvUfqo5AutZQUiMhUokmoXgCshXzwDmXQUsTKoWLc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e9bda91b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4361a7197b259cdaf10ff3911729f9f3","sha1":"69c8a05240493ad96300d2bf0ec6ca41dccca6b1","sha256":"0f2f0af83c9e4688732529efacbb5f528c6c25e3717d4551594a75ea1ae5fa60","sha512":"e7aaeb5540769d8ae33a796161806ef30dcee3ded5bafd6c0d75f5a2bc41dfd6c7b23b10d9fa6be55ce5b1009f420f41301d69a002c652b6c15595ecaf32e1c4","ssdeep":"","tlshash":"e39002551c1d8282acc300a5d5065218102431a0762492484c5a6165c08c1662040858","first_seen":"2026-04-28T18:27:36.049815Z","last_seen":"2026-04-28T18:27:36.049815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/resource/svg/light/zu29.svg?2.0.1737798368368","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /resource/svg/light/zu29.svg?2.0.1737798368368 HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:13 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 25 Jan 2025 09:45:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6794b2c7-348\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVTpKEos8KhlcVKtWMohOynroz8DaeOI%2FRdQK8xIA4yRZ%2BXHmlhfuDDdGax18ZSZBy863ulq7iERttj%2F9WyW5QZhWOXMmdTE%2Faotz1mwXAixi8%2FE4k4jOOCSSbW3ezEbpA%3D%3D\"}]}\r\ncf-ray: 9f381ea20a783181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a11daaf1382f31c1a57202739adf7748","sha1":"ef2b1485dde5d0c14809b2759acbd9a09c18af80","sha256":"9ae3a8a520a4491119fa30d193bc35d15d8a12cc1b62136ce1e89b3db3e71251","sha512":"9b8089fa1eca241be91a837da97c88ab917a50336f820d1d855343b9f8a86d63692bfd4ea3b22d408f748e47580107339b789bc9f4d243379a093b5348dad640","ssdeep":"","tlshash":"280112bf4736a3fdd6644a80aad42799343de042e17404ecb3817e177e2062a0abcd95","first_seen":"2024-07-24T17:37:44Z","last_seen":"2026-06-04T04:33:14.405543Z","times_seen":328,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_ltc.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_ltc.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7038\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"80566bf46c37249b2a0592f55edefa73\"\r\nlast-modified: Tue, 03 Mar 2026 01:44:23 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=OCm7gDIO1zoCtZ1guCdTQuPHxYoo7JGSYh2oRqZoX_Y-1777400832.3991597-1.0.1.1-uIOG2lTbfzOnyrOlxfpIzOyY2J9g92fSFt40o3wlK2O3thCJ85TZ5YDgeCyT4BBiNYM46TKNwrzlddiVfGRvzH14vo2CVVqoPxTCwkItfutjatNPaexp014cyPi0H1SNjXzbwjpcZTQ4YgSMfKNZWbedbiUR9a_kUWOYHJmXTfevet4NK4hrt6yh6B5cN4YM\"}]}\r\nset-cookie: __cf_bm=q4NeuWaQ35llG2.aJ8fLerFCr_yh7kEBy8vOaomDPQQ-1777400832.3991597-1.0.1.1-HkXbyIWiKTRvQcBp1qRp5_wBin5pHeNU8ZSxdqZzilXuz0PsABmogN8phcz5IjsZf5XF6hhmJZ7apI.Xz1BEX8SECF7d7c1s6i125YRYpEru3piyz1sfFcm0TPLLjonR; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\ncf-cache-status: HIT\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=OCm7gDIO1zoCtZ1guCdTQuPHxYoo7JGSYh2oRqZoX_Y-1777400832.3991597-1.0.1.1-uIOG2lTbfzOnyrOlxfpIzOyY2J9g92fSFt40o3wlK2O3thCJ85TZ5YDgeCyT4BBiNYM46TKNwrzlddiVfGRvzH14vo2CVVqoPxTCwkItfutjatNPaexp014cyPi0H1SNjXzbwjpcZTQ4YgSMfKNZWbedbiUR9a_kUWOYHJmXTfevet4NK4hrt6yh6B5cN4YM; report-to cf-csp-endpoint\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncf-ray: 9f381ea279f25684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":7038,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80566bf46c37249b2a0592f55edefa73","sha1":"e8170cef7e071f5c12337efb38c8c950a660b916","sha256":"c2cf6c63f82500f3ed187b88c26220f4c815145d8c562f755b86ce0c7ed7d3a7","sha512":"eaf9303323356cb3bbcf46b5c340e9d74a00059787e7159328b75ab8eeba8b3a5a90273cceb4dd4de7d0a74e3df4c752766828a0180f2c21a2fdb5d579eb9764","ssdeep":"96:AJKpGINSQyHVK5Sm1ta0eRE3EkNLQMYjU6MMJEypjaYm+zAf0WmJRog8CJ3sGA0v:m89NAY5SmzbZ0KPwJJtaYm+MfOAIcG","tlshash":"5ae1ae89d6f0d09b6ffc0007b560d24eb8cde1346589ad063faddd5fad1a81f2e15a40","first_seen":"2025-06-04T17:05:58.618444Z","last_seen":"2026-05-13T11:09:14.316546Z","times_seen":37,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webapi.xexbestpro.com/api/notice/list?key=ROLL_NOTICE","fqdn":"webapi.xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: webapi.xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://xexbestpro.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:13 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://xexbestpro.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IfD3I0lFiDlLu4h9amEb6BBL3DcjfWxTcsP12S3Sf2yqo62h2c3Op2eAVnpxkr1ccgzroPXkGxxDSJBMQYNYPuJzwLCOd%2FLM7TAzjhcurqlbcXDAvyuJG1NlQg9YQDoivA778BQLy7o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381ea5ccf9b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":484,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e23f942f7e9679b0edbcaefa50de2064","sha1":"1d823c8af05c1812d781aeb30c11fcf27b75de74","sha256":"62517deff07130498abbeea764d39495a98293bbabfa09346342d8de84aeebf5","sha512":"4c1303740ef90b8c873c5a100eba05f3be7acfec92346b610c338d9c4c78fa32fb32c4b4e62faa7c4fbaaf26612d9b0f6608fde360e39e9cf5b1d533a055bdc1","ssdeep":"","tlshash":"7bf05c4e043c8e76480644c715ccbdcd517f1793d660cd34865bcf1c82f56b5071b908","first_seen":"2024-08-19T15:53:11.172011Z","last_seen":"2026-06-04T04:33:14.45383Z","times_seen":64,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"webapi.xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-99bb0d24.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:09.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-99bb0d24.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 May 2025 15:13:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6829f923-15d2\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FYEth0RjzXaTqhDAWPpDLYaLEHfWDdpUJGtWF1ga%2Fil%2Bp29AIr6VVjArnOAlXfd7vK571BeSpdGfL7keny7b4QLtJAgia45zLfF%2BWkDzcJrGSVw0oT2zwUr9ELhN%2F2RbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e927fd73181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5586,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5579)","md5":"eeb51c4d24f2679cef33768da06e3eb1","sha1":"6457d6d39e6e68f207f3f06e5a5e62935d104e99","sha256":"841e6501d5e0586a05b325aba1baf4d4c3fb62d88d459c737ccc6d6c886c2a6f","sha512":"b0e6698f2e2da189cd9795f67ac105d0ace3602571350033e627b6ca643a2c7f737443d98b10ea582fa87bc469b0ca423e059ddc593f91f59ef62a18f91e7c7e","ssdeep":"96:EXVnSRrFwcrblYUB9qCwGjRjd4a45xfGRai3PXHBNKDwYCArbw2U8z9kxT3haG3w:qVnSRrFwoYULqCwGldV4vlivHBNKDwRm","tlshash":"5cb1a589b802cebcea77984145ec102125583be6b10c88e6f6fefd462374eb69745335","first_seen":"2026-04-28T18:27:36.064588Z","last_seen":"2026-04-28T19:33:36.670775Z","times_seen":2,"resource_available":true,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":867,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xexbestpro.com/assets/index-99bb0d24.js","fqdn":"xexbestpro.com","domain":"xexbestpro.com","tld":"com"},"ip":{"addr":"172.67.223.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:10.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xexbestpro.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 17:45:47 GMT","end":"Fri, 10 Jul 2026 18:42:53 GMT"},"fingerprint":{"sha1":"FB:33:E1:1D:54:FD:8E:1D:BB:80:72:DD:D6:BD:A5:6E:D2:2A:F6:56","sha256":"5E:D9:B5:3B:4D:B1:AE:D0:58:25:CA:98:97:ED:0E:09:A6:21:7B:13:C5:C6:56:EE:B6:75:EA:89:81:96:5B:41"}}},"request":{"raw":"GET /assets/index-99bb0d24.js HTTP/1.1\r\nHost: xexbestpro.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 18:27:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 May 2025 15:13:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6829f923-15d2\"\r\nexpires: Wed, 29 Apr 2026 06:27:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L3jtYpBrJCkAz%2F1iHYCMh7HKkfXfR%2Bqv8WB%2BUSMlWdmBA62FiMGveVwOGes0Mw4AjsoLcEuyg%2FXHADYS5lKj1u5YCLy215cGwkuc7OsEgvZKEvmbzffi4L5cb%2FE9r8E0Jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f381e9848cb3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5586,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5579)","md5":"eeb51c4d24f2679cef33768da06e3eb1","sha1":"6457d6d39e6e68f207f3f06e5a5e62935d104e99","sha256":"841e6501d5e0586a05b325aba1baf4d4c3fb62d88d459c737ccc6d6c886c2a6f","sha512":"b0e6698f2e2da189cd9795f67ac105d0ace3602571350033e627b6ca643a2c7f737443d98b10ea582fa87bc469b0ca423e059ddc593f91f59ef62a18f91e7c7e","ssdeep":"96:EXVnSRrFwcrblYUB9qCwGjRjd4a45xfGRai3PXHBNKDwYCArbw2U8z9kxT3haG3w:qVnSRrFwoYULqCwGldV4vlivHBNKDwRm","tlshash":"5cb1a589b802cebcea77984145ec102125583be6b10c88e6f6fefd462374eb69745335","first_seen":"2026-04-28T18:27:36.064588Z","last_seen":"2026-04-28T19:33:36.670775Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"xexbestpro.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tp1aa1f8c603f24d7bb22c840b4561e573.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tp1aa1f8c603f24d7bb22c840b4561e573.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 598\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC0168F5793434DB2578\r\nAccept-Ranges: bytes\r\nETag: \"CB1474A6586606366122E796E7C7B790\"\r\nLast-Modified: Sat, 28 Dec 2024 06:26:49 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 52651854032997638\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: yxR0plhmBjZhIueW58e3kA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"cb1474a6586606366122e796e7c7b790","sha1":"65e5b65ac7af71f7c74943cbbb786c502da79f51","sha256":"59ffe909363cd4f08954e3d43522913d7f06837b0a726f4f094d07e4443970e7","sha512":"24e9f1f19d63ad08cae741f4a599ed906a4b047498dd9805dd8a5ef69eecb48ba4beaebeee27f86e61b054c5b894da1da38e1ba466ee616a4de71d851d798faa","ssdeep":"","tlshash":"57f041ea69d79ad8a36c0fb3564205908447d0d0f305d7536459f7fd272074016b9a36","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-06-04T04:33:14.413133Z","times_seen":121,"resource_available":false,"data":null}},"time_used":2076,"timings":{"blocked":893,"dns":38,"connect":282,"send":0,"wait":285,"receive":7,"ssl":568},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.kraken.com/marketing/web/icons-uni-webp/s_sui.webp?i=kds?2.0.1737798368368","fqdn":"assets.kraken.com","domain":"kraken.com","tld":"com"},"ip":{"addr":"104.17.188.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.kraken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 04:27:30 GMT","end":"Wed, 01 Jul 2026 05:27:14 GMT"},"fingerprint":{"sha1":"02:FD:2C:17:58:B1:F2:30:A9:E2:19:CC:6F:95:98:E5:FF:FC:31:F3","sha256":"E3:66:59:B0:30:E7:48:7A:4C:18:6F:D8:76:08:2F:0A:C8:1A:84:C0:4B:D1:F7:C1:2B:99:83:71:F5:19:71:32"}}},"request":{"raw":"GET /marketing/web/icons-uni-webp/s_sui.webp?i=kds?2.0.1737798368368 HTTP/1.1\r\nHost: assets.kraken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 18:27:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6232\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public,max-age=86400\r\netag: \"e0b8fb4c5fd8610725fbd1819f74985a\"\r\nlast-modified: Tue, 03 Mar 2026 01:46:08 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=3za8sjUXWiHNc.8cFSKqI0s_zYr1kTRaP4ZDBWagXzE-1777400832.3862245-1.0.1.1-0.OpCWURDTGJvJ4pp4m.LdYWxtUU.Rk4MfuxhiJOSFvnw.ks4CkVZhQQ0Ndg8doTdYhWNjSdBM9gwD7HSymTY45XmJ0gvU1R3VaMVhawNZVyDpGb3iqxw8OtjOfHeEJ6; HttpOnly; Secure; Path=/; Domain=kraken.com; Expires=Tue, 28 Apr 2026 18:57:12 GMT\r\ncf-ray: 9f381ea269c65684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6232,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0b8fb4c5fd8610725fbd1819f74985a","sha1":"a1ffb70325e875fc1a3918c87ef96c147424e200","sha256":"176d54073d77afe3fc3a345e15c43c3fe9381d38f586d9af396c578a4a38c8a6","sha512":"71584ef6872e58fbc90df9282eed6de9d19929dfd4ad78e8f56784e3e3c2d3d38cd487460bf4e651f5df2b5a7b1176afbc96d7c5ef5b0b31e5dd00ce3f23a8d5","ssdeep":"96:eUJKpGINSQyHVK5Sm1ta0eRE3EkNLQMYjUincV/ISUosUjYAl0gMXMOx3Bewocd1:D89NAY5SmzbZ0KPwlcJIdUzdMXMOxco3","tlshash":"7cd1a09cc3e0c37676b4c1232a40497d5a6dc0285486f40e1e499d4fa73d7ff4a15f98","first_seen":"2025-09-18T10:45:14.152435Z","last_seen":"2026-05-07T20:34:44.896688Z","times_seen":6,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heco.oss-cn-hongkong.aliyuncs.com/tpdf810fde6b48425f9e1fb627c949aaa0.jpg?2.0.1737798368368","fqdn":"heco.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.186","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xexbestpro.com/","date":"2026-04-28T18:27:12.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /tpdf810fde6b48425f9e1fb627c949aaa0.jpg?2.0.1737798368368 HTTP/1.1\r\nHost: heco.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 28 Apr 2026 18:27:13 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 370023\r\nConnection: keep-alive\r\nx-oss-request-id: 69F0FC01BC6A5B313366B23C\r\nAccept-Ranges: bytes\r\nETag: \"A381DB0B785A07066ABE9386956071F3\"\r\nLast-Modified: Sat, 28 Dec 2024 06:22:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11132760987835081693\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: o4HbC3haBwZqvpOGlWBx8w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":370023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1300 x 1054, 8-bit/color RGBA, non-interlaced","md5":"a381db0b785a07066abe9386956071f3","sha1":"fc780da65e5fa456d9d5f1597dcb1ac5c8288117","sha256":"c1808d5bfbe24674d0f471f033d44445ee28790a6755a8d5ed6c3bb546e91531","sha512":"10ec63f4cfb5319abd3e745afe02d45c511b4626e81685581b0a1b7ac6fccc5e5dc1f8a7c93454245201d2c42ca9176dd432614b619140679b57c4ae8ace3c12","ssdeep":"6144:2yOvTSv4EaxbYemICE9bvnKS4MoG7iki52QxkNapmhWO0Tz7sy5hJ0cmpg7l:2x+v4b+e1GSkuiki52Q6SmsOEB6O5","tlshash":"c874221aedd78db29feb2a636ad34ced1300731edb123a7260580f79fd6212812197d5","first_seen":"2025-02-02T00:35:42.267543Z","last_seen":"2026-04-28T19:33:36.661707Z","times_seen":9,"resource_available":false,"data":null}},"time_used":2244,"timings":{"blocked":1070,"dns":0,"connect":0,"send":0,"wait":298,"receive":876,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}