{"report_id":"053245d0-7458-4804-9da9-876f97aa94da","version":6,"status":"done","tags":[],"date":"2026-04-06T13:12:44Z","url":{"schema":"http","addr":"agibogpt.com","fqdn":"agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":0,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"final":{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"title":"AgiBot","dom":{"size":24186,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17597)","md5":"e5d9af0d0256b86e806ffd0942e02db2","sha1":"dc614a9c021ddc859ccddf439102fd04a23451f9","sha256":"a0605fa9c5671d22120889972ef4445f97d7a0f25ea6dcec4d1b7bb26c7c0b17","sha512":"0da6661ad4fa0913b82301191d2e237b8550c25e281d517d3877e828aac8a7e86e59ab77f34df4a87682bb1680fe992569e0b2378e93d410c34c476a85530de5","ssdeep":"384:yL6ZZCxf2OQ1LUFmFAFyFOKFiFD7FMFIH4lvWVwYpPjUI:yL0Qxf2OjygWOemDBEIHdVwYpoI","tlshash":"71b2cb75a64001b713a799c1e5227f2eb6daf31f80068404befd818a2fc3cbab765575","dom_hash":"domhashd96cb1f557c78e5c6da6a4abb1e3d0cf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"agibogpt.com","fqdn":"agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":0,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T13:12:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":26,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:25Z","timestamp":1775481145,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33802,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:25.833158+0000\",\"flow_id\":1440466284945753,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33802,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":902,\"bytes_toclient\":3148,\"start\":\"2026-04-06T13:12:25.303449+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:25Z","timestamp":1775481145,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33806,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:25.839073+0000\",\"flow_id\":687502683382532,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33806,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:12:25.303876+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:25Z","timestamp":1775481145,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33790,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:25.842636+0000\",\"flow_id\":730761593987251,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33790,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-06T13:12:25.303283+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:25Z","timestamp":1775481145,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33786,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:25.846579+0000\",\"flow_id\":2034460261982146,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33786,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:12:25.303042+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:25Z","timestamp":1775481145,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33804,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:25.851962+0000\",\"flow_id\":1151762878276186,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33804,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":753,\"bytes_toclient\":3148,\"start\":\"2026-04-06T13:12:25.303706+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:25Z","timestamp":1775481145,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33820,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:25.869491+0000\",\"flow_id\":704034012505055,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33820,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:12:25.304095+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:25Z","timestamp":1775481145,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60422,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:25.993777+0000\",\"flow_id\":1405784424014235,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60422,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:12:25.352667+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:25Z","timestamp":1775481145,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:25.999789+0000\",\"flow_id\":1674945729487520,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60458,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-06T13:12:25.352928+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60394,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.003588+0000\",\"flow_id\":1451963912380602,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60394,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:12:25.352442+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60442,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.010254+0000\",\"flow_id\":776223822799448,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60442,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:12:25.352856+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60408,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.015103+0000\",\"flow_id\":859700807164247,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60408,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:12:25.352599+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60428,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.015950+0000\",\"flow_id\":1885777084113419,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60428,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:12:25.352779+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33826,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.066698+0000\",\"flow_id\":932573517282009,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33826,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":902,\"bytes_toclient\":3148,\"start\":\"2026-04-06T13:12:25.555737+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33824,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.085669+0000\",\"flow_id\":857892625939017,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33824,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:12:25.555593+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33854,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.099383+0000\",\"flow_id\":825903709518682,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33854,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":902,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:12:25.555866+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33842,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.103655+0000\",\"flow_id\":1710430749293339,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33842,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:12:25.555803+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33858,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.110233+0000\",\"flow_id\":878117626936213,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33858,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:12:25.555925+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":33874,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.117543+0000\",\"flow_id\":2222120268037072,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":33874,\"dest_ip\":\"47.79.64.232\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echores.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-04-06T13:12:25.555984+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60478,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.253892+0000\",\"flow_id\":1559827721041675,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60478,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:12:25.603915+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60522,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.256031+0000\",\"flow_id\":970008452216858,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60522,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:12:25.604186+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60474,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.258687+0000\",\"flow_id\":288611890706069,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60474,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:12:25.603797+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60492,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.265562+0000\",\"flow_id\":1804061036328787,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60492,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:12:25.603987+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60510,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.270732+0000\",\"flow_id\":2074154349705179,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60510,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:12:25.604123+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":60502,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.278271+0000\",\"flow_id\":47281973311381,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":60502,\"dest_ip\":\"47.79.48.199\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"xjpdata1.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":906,\"bytes_toclient\":1634,\"start\":\"2026-04-06T13:12:25.604053+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.169","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":44474,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.334085+0000\",\"flow_id\":18591591801382,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":44474,\"dest_ip\":\"47.79.48.169\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echoali.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":905,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:12:25.631334+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:12:26Z","timestamp":1775481146,"ip_dst":{"addr":"47.79.48.169","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":44482,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:12:26.576181+0000\",\"flow_id\":808891344058179,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":44482,\"dest_ip\":\"47.79.48.169\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"subject\":\"C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=ap-southeast-1.oss.aliyuncs.com\",\"issuerdn\":\"C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R3 OV TLS CA 2024\",\"serial\":\"4B:D0:7A:F2:82:E4:2F:1A:E7:B4:80:A3\",\"fingerprint\":\"b9:90:c9:a4:f9:5c:d9:49:de:99:f9:50:6f:7c:79:a9:07:4d:8b:1c\",\"sni\":\"echoali.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-22T08:21:21\",\"notafter\":\"2026-08-23T08:21:20\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:12:25.882499+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-11-02T12:34:44.616471Z","last_seen":"2026-03-04T07:23:57.96192Z","alert_count":0,"request_count":11,"received_data":90718,"sent_data":4972,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"ltc3.agibogpt.com","ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"domain_registered":"2025-10-21","domain_rank":0,"first_seen":"2026-02-11T06:55:22.092576Z","last_seen":"2026-02-11T06:55:22.092576Z","alert_count":70,"request_count":35,"received_data":2962337,"sent_data":14623,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"agi-api.fd1.cc","ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-01-05","domain_rank":0,"first_seen":"2025-11-02T12:34:44.615047Z","last_seen":"2026-02-11T06:49:30.966241Z","alert_count":0,"request_count":13,"received_data":69229,"sent_data":6700,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"echoali.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.169","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-11-02T12:34:44.617798Z","last_seen":"2026-04-06T13:09:24.738101Z","alert_count":0,"request_count":1,"received_data":593089,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"agibogpt.com","ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":631,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"echores.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-11-02T12:34:44.615446Z","last_seen":"2026-04-06T13:04:16.35349Z","alert_count":0,"request_count":17,"received_data":29329,"sent_data":8036,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-04-06T13:51:47.399372Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/charting_library/charting_library.min.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-06T13:54:46.115966Z","times_seen":627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-02792999.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c43d0ecf9bddb9d9d0eb3cbd6ab9909","sha1":"fceeead8742fb6833f2988548a8f8b0e0653621a","sha256":"31ebf15c389c133d21c28c7a0015fc97b45a938409d52cdbd10fc1f14e4aa3eb","sha512":"9337a887f35dbd687133f8c9b66ef2486e701cf07abfaa3997821e4695e9e90039f71cbc6e79c79470d70df7941d5610970de43b9e78d24d19f54ea52f2d4186","ssdeep":"768:9a76Jt/zxaWr/fI8OuJqeHX4TGyQOmaiPBUIx6eJWCMf1LpewGSAyP2AyZnxPl4D:hVgHut4Sy3IaqxPlt1Po/e9IAEO5I","tlshash":"60936d4ab9061fff69fd0884b95d480021a91f8259ccc8d3b77eae553bbacd47349728","size":96234,"data":"","first_seen":"2026-02-11T06:49:10.776745Z","last_seen":"2026-04-06T13:51:47.373447Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-06T13:52:42.020277Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-04-06T17:44:35.077258Z","times_seen":2981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-04-07T04:13:16.38435Z","times_seen":4498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"361e9d9b886c9f2b98f57c626c09b9d8","sha1":"01032a33013459a8de015112421c1a9e467f5d44","sha256":"b96071e372b614f6406f0b01ed200e24be43c5c21eac83934e41d7dd6f70ec38","sha512":"c3dc60f09e32481fa8a331627b2cd7911592847e3e0e82721694d14205de941a15ef18259c871c5957195b1ca8b3b63a8109390863f3f8d48e5e8a7d3f8b02dc","ssdeep":"","tlshash":"8bc08cc4a0c22e102602641010bf38e49024402774881b028cd4d8482e230b08233edc","size":140,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-04-06T13:53:44.119332Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ad53bdca95253da3ed0339a52f219d8e","sha1":"1acba9622b6c70c03ce56310becd1d72226538e4","sha256":"3fecdc9cf7339d52588891d5d7b0c4b4ebfd82fe813b141fd5b81fdc70694f81","sha512":"d2bf6f0a88bbc044c6aab45f1f8795b3aafcf709a0a2b294f27062c0c34e1f34ec3964286f776c55a40a412cdf01c2ace59fdf7981fd69c6d8a63a6791ff8d3e","ssdeep":"","tlshash":"61c08cc4a0c22d001a02645014bf24e4a024802770481b02dcd8d8483e220b08233e98","size":137,"data":"","first_seen":"2023-05-08T20:49:31Z","last_seen":"2026-04-06T17:05:37.549365Z","times_seen":651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-04-06T13:53:44.135286Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-786d00cf.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"importedModule","is_inline":false,"md5":"dbc96415c3a48b663d416c381027fccb","sha1":"46252c44bb5c93ae7b4b2b9349d09d2f5716586a","sha256":"962a9788ef313718132bf3d9978c12e96bbd218984cbc34911e8f676ccb5a3ac","sha512":"3ed8e62ecdf3845f9874ab27b802810cc3f252c57d877b5890a8f038e7132597d49bd53cfebc56232628561fa88173ecaa8fca3376cb10601558257913b5c49a","ssdeep":"","tlshash":"3301fdf9fd0ccebb0fa20a400190260014091fddfa2419e198877d6a1be4940dbde72d","size":776,"data":"","first_seen":"2026-02-11T06:49:10.742348Z","last_seen":"2026-04-06T13:51:47.3769Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-04-07T04:13:16.381264Z","times_seen":687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1797b90369a99ff22f1c40b0d94ec9a1","sha1":"aec8ba7bbf7bb80c7a4669d074c61aefb319ecfc","sha256":"e7129c3c36ef7b4a55f09622f14d1a60dd64551f16fd0f7a070edf2c75a13680","sha512":"a578a2dae3c0843433b3aca46d828da3db506e6c048302d6e857b77767968b4cac8e71e6d56dbd81aca28909b96a5f23447544a7a24ac9e3486478aa64b977bd","ssdeep":"","tlshash":"70c08cc4a0c72e001646641018af26e49034402ab0482f568df4d8492e620b08233ed8","size":146,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-04-06T13:51:48.598511Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"207820ea30e8c69ce04100e8526ac9b2","sha1":"289c2ffded67dd3ddfa4bfbbba56b6f8043610a9","sha256":"1fd71a67efe14f91b321e3f476ef6de1ac2329e77f5720cd37ae6589fb074b69","sha512":"d1237fe7e4dbcbfe699ee7e9b4b30d9963a1919d1451c928aa9af64326dfb7a7d43f8bde094fdd4dab7a65a070422f6904cdea73eaac2fb4225f0bb1c8d6df5e","ssdeep":"","tlshash":"30c08cc5b0c36e10261ba85050ef34e490248027b04c1b038da4e8892e630f08237e98","size":148,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-04-06T13:51:48.600108Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2f5a4f08c8536ee9b64126b563cd62c","sha1":"15d57cd315463221c807ad74b0e19578dd90f7a5","sha256":"1fce7bdbc1acea81dde9287f6971529e3cc024b01b1ebcd537ce4f16e064b760","sha512":"204e680610bbc982bcb79334b0acd7f7f3c101fcd0b0d384925c0d0f1dbb4fb222d259d164c7cf5a339887dc471086b3dcb2ca246f6af92c95526c91a4ac0427","ssdeep":"","tlshash":"48c08cd8a1cb6d005682b41459bf3ae4a0344027745cab139ce4dc682e230b48233e9c","size":158,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-04-06T13:51:48.615047Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-04-06T20:00:07.106841Z","times_seen":424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-3ffc2496.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"749b373bf14f9209e9fdedfced28f5d9","sha1":"5764ee53e2b04fabad2a5e7a75a775da0dd02759","sha256":"d6192af6b4636d31e3907a43df6219bebe0b7262197da1a75f9b0915d2bb101b","sha512":"e4240d4ea893ae6a7b4e42877b058466bfb123644e69fe8c5495a667cf66988f58f04eb0b9aff7e898ebefb7609b2ea19c389393716f42e40b5099ae117aaa0b","ssdeep":"384:+Vj26dZf8+o9A8FHnUf6CAqc80boAOiAhv3ac8sE07PPTPzPwPbPLPC0McgI:+VbNFUHnUf6Wz7b4TjC0MtI","tlshash":"3e62b495f9069a3cf5bba451408c001076197fdaa00c9ce2f9fd6e463757ff8b749218","size":14601,"data":"","first_seen":"2026-02-11T06:49:10.786299Z","last_seen":"2026-04-06T13:51:47.358221Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/filters-4aa46202.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"importedModule","is_inline":false,"md5":"932372bb7492350c49b7a964a35c38e0","sha1":"98c25d88985e8c979810ef933b1865185cccb120","sha256":"2512b7ea85a6a47c94ca4f8c4f8ff97802c3f17cd9900fd98c32109211953a5e","sha512":"2908786ec59cb1dd7eb77c2a5dbaba90c92c8f7753d5ddd5163441bb7d8a5aba8480186478712cfdec47dd664fea989e8b96b03c1dcf32fc789ce66f3a39fea2","ssdeep":"","tlshash":"5b5125fdfdd7a13356e96ef940288014728eaf24786e0a4df54bd0455a33888e07fb68","size":3102,"data":"","first_seen":"2026-02-11T06:49:10.716334Z","last_seen":"2026-04-06T13:51:47.355941Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd39dd9c845efb33ee5ac0b62d4c8b23","sha1":"75cda9605a93d3cb97891d12de43fbf85b655a75","sha256":"48135d35fcd3ea03bda6cca330ae821cc845e26e481a4edf28e698d298ba0870","sha512":"0999ef85aef535b451d80ee998616064625af5c9958f3ea83189b9cbf3f5308da3109abb67ce6d1d87e945a78d70fbb03f85fbb2f4f6680fa284cc4324aaf244","ssdeep":"","tlshash":"8911abfe191a70296303804fd76b7801652650b9000a184177cc9f9dbb9ab7dd0cfb8c","size":1048,"data":"","first_seen":"2026-02-11T06:49:10.835809Z","last_seen":"2026-04-06T13:51:47.394895Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-07T07:11:34.315183Z","times_seen":30061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-06T13:51:58.383814Z","times_seen":390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-04-06T13:53:44.112975Z","times_seen":559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-04-07T04:13:16.381821Z","times_seen":923,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-04-06T13:51:48.609568Z","times_seen":419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d98acc1019303c876db914a972334937","sha1":"73807338e5295d0e4a62fbf19a5258d5cc93e72c","sha256":"864aa8328e7915cfbea7a8773cd622fbf24494c9b6019a076bef6e3f795e7d9d","sha512":"77d7c9975e811e66a77b15f141c84b12ae3aa0f991d15d2864c3c3ce082e0da5f4154d93424ae8580ebd93a1c7231752fbf22ef82ce7a01d997287d2d854d1af","ssdeep":"","tlshash":"e6c08cc8a0c32d001a13642210ff34e4d03440a6b44d1f028dd4e8493e624b09333edc","size":150,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-04-06T13:51:48.612178Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/vendor-6b8fd0ca.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"importedModule","is_inline":false,"md5":"8256a23755be6f1cf662f4d9815fd79c","sha1":"ade6030391399ff99bd1af45009fd0d7a26e013d","sha256":"b6dff34695bc0abf6f77098568178cc1a68525119b1124bf7f21c7f5dccf1442","sha512":"8329a97ca83e4062622dcee32ad0a9ba3937aa605c4d983d569e5b82d48d0ce28f2d271336f1b152f5b4fd19146092c69116714eb93cca020da0d4b9ce5187bc","ssdeep":"12288:93oVG9EX3fHHcwSoX4svr7Lc2iiAw/OGIpHTTuBiIMWQnIVq:doVG9EX3PxvT7LJiiAwFIpHHUiIMWQIo","tlshash":"67c418c93692f02157bb14e600bb0006f33e6e59740d8494f1a9d9db3d7ad89a2b7f2d","size":587907,"data":"","first_seen":"2026-02-11T06:49:10.740448Z","last_seen":"2026-04-06T13:51:47.346876Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/en-330586a8.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":false,"md5":"475039c53d4841cb60b7167d825d3422","sha1":"f0f2f69afbacf178e5f54c0b660068558678e187","sha256":"ef9669e6d1f5c107ded544de0999f1f62a43c77883f41145f82f1825cd7c6e89","sha512":"b2c55fcf3cd9dfc5c9004908e75528e164da3df6fbcb152b4cbdcf900d3c29e09a95a07d15ac0d885a85583c42d2da6498d16a64ebbd021258e1c87ebdcdbe23","ssdeep":"768:+GtZcEw/o7rKOdAFsifnAMCxrdaAMFVoP6+6sPGKw1mwO6fpk7aOLxO:iponKOdebExr2FVLsPxwqLxO","tlshash":"f203d6893e1a989a04f3537674ce6e1120f60ac18255881f4fedc9fd93d2b67a367b34","size":40565,"data":"","first_seen":"2025-12-27T20:43:52.881944Z","last_seen":"2026-04-06T13:51:47.356688Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f19a249a3e546a75d19b9d3f75497cdd","sha1":"4fcf8a4234dc76c37cb9415dd3c2d4820fb45a30","sha256":"8f0b9cbdf1999a03131eed312b7dc7ab85a5ddbf696e4805d240a61cdf5066b2","sha512":"7f999eee3d080218db37b9bd7ae6ca464771276ae0eb378b537d24635f5d700aede00359099b8e2197cc4f36e56162a46110fbdb85f213ed5ada51d9875a7402","ssdeep":"","tlshash":"c5c08cc9a2c22d001646641014bf28f4902480277048ab038dd4dc892e620f0823be9c","size":146,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-06T13:51:48.605684Z","times_seen":301,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ced6204993ccd4d4792486f3b3c899b1","sha1":"c16ea5b8c59dcea2b9b03d844467f9db0d358cdc","sha256":"317f80fdd1cb3e7b69648541320cfeb07fd3ea3d1b70d3aab180edce7c3c4ac5","sha512":"dbf99b86ffabe8deeb56f836821b1f3c58fe9b502b89210ec5082f60b4cb4e30f060645fc970bf48f5c3f20073f0e79845925b0dfb4ac89df0319d4c26bdb795","ssdeep":"","tlshash":"b8c08cc4a0c22e509622651410af38e89034402ab08c5b52dc98e94e3f260f49237eac","size":149,"data":"","first_seen":"2024-01-05T03:21:28Z","last_seen":"2026-04-06T13:51:48.60456Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7de71cd324bb8833f4a138cbcdafa759","sha1":"d7a8122c1483170fa571ec47c62f91c66d662ede","sha256":"62b9d7d992de0ba11591d4ed7c7ab166d886c09ddb4a6b79693795ce836c6003","sha512":"5d42f665549881c48abeb0ee42138dcd1b0f6140e49c3fc6efdfe3657cba54e63218787f0b0d2f12622873799b4ec3a21b9f4f62194f2cc9bda2758dd699a439","ssdeep":"","tlshash":"73c08cdab0d72d006602642110af78e8a0388027b08c9b439cd4d8883ea30b08233fa8","size":151,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-06T13:51:48.606264Z","times_seen":258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-331dcd31.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"importedModule","is_inline":false,"md5":"421429b77229b9dfe6db2bb1028cb67f","sha1":"7e2c90fdd59f8c3a7ae81e22125dae401032e012","sha256":"6544f42dc361420841b93a464e1a05c52e14a8e25fe1bfbdc63bae4bb1e81117","sha512":"6a558257443d143b12a84eba093c1d171e0d65a4db1cc9632cf5390f8ef48d5fcc5709832dd41f992e8ca5024e9f944e2130fe9c835642797b005eea6c6a353f","ssdeep":"96:TYm7gw7aAG//NOwDHrblYQKqCwGAkBfSWaEwFbFMF0wx7IrLerbJchJJZwrbnoUt:B0w7aAGNOwDNYlqCwGrq9EwFbFMF0wxJ","tlshash":"d5b1c649b90389b9eab3648054950020721d3feb616c8ca1f7febc16737ceb893d1765","size":5584,"data":"","first_seen":"2026-02-11T06:49:10.757584Z","last_seen":"2026-04-06T13:51:47.358976Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-07T07:11:34.318674Z","times_seen":33858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-3344f146.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"importedModule","is_inline":false,"md5":"58aa65c7d78a8928542c217699172d45","sha1":"b3c6d4be06fe87d285a8c9f68ac951a690e09db2","sha256":"8192c9e12bb2ac6dcab4ffc0aada917c2025a781009650a0ad626ea9454ba4a9","sha512":"f1da8e6567d1602ac8b6490c45f0fa86aab23d3bda5bda637bf3a35d1978cf7b8132f34c75c7284340f48f7c66c9a0f9a4d56a53d44ae42aa60f67e437838a73","ssdeep":"","tlshash":"7df0c02fb96680751bb348e851230810a6181f5636b484d4d9c60a10db388d7e56d515","size":514,"data":"","first_seen":"2026-02-11T06:49:10.80993Z","last_seen":"2026-04-06T13:51:47.360015Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c1155eee87487f5efe9634a03695b16c","sha1":"2532dae40bd8f2c93a9eb7cbb00bf21e050124b1","sha256":"41c9b4311d7a14bda7da372afb964f0bf08f0823e01617a967aa9eb2554d298b","sha512":"ae1174eea2e3597d1ecd46bea51c7948e05095c00c03cb3670e5b62dd0c14abd26e7c3643fda485610290a4426fa92d0c9d7920303a7bdbc659f735313f2ea48","ssdeep":"","tlshash":"28c08cc4b1d22e106606641010af36e490298426b08c1b028ca8e8892e260b08237fec","size":148,"data":"","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-06T13:51:47.388544Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/currencyItem-6ff378bd.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"introduction_type":"importedModule","is_inline":false,"md5":"11bf80b9bfb011aa5f367fe71dc73d7f","sha1":"73605451c8a86c6dffa19497f43b4a2b186a3c10","sha256":"0f9e465c20f0de5d4c9d45fe7c01b860bcb2360ebb27d56ef3e9fb5cf660743a","sha512":"6de939353829e4c427a64ddf582275928c17e33dca74132deff2675398f971a3447e497254c840fdbab6d86d4f592dffaf7440c5d3c94239b15bfbf456c63d27","ssdeep":"","tlshash":"0421df9aaa02cbb5cbbe906281bd0414130d7fda701185c5ebed158a3b8a5fcd728a31","size":1206,"data":"","first_seen":"2026-02-11T06:49:10.730942Z","last_seen":"2026-04-06T13:51:47.33766Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"acd6c1ef2bc2ca9094aab71a944382bf","sha1":"05cdd2f74035345f36364c332bc8146e4431087e","sha256":"a2567c93a8b3fb21f7f174afe86449bd1da4fc8bd8d2f4fafe1c2f4939176e97","sha512":"6a68618f08884a3ea7850d6d15d8887f6ead00978a13db6e3d8998f798b7720a363aea0921654dd03ae18783073d071386bdf2d96befe2c2e77cba1573e45890","ssdeep":"","tlshash":"0ec08cc4b0c62e101612a81411af24e49024402770881b128ca4d8482e224b08233ed8","size":140,"data":"","first_seen":"2025-04-29T16:54:03.420141Z","last_seen":"2026-04-06T13:51:47.393363Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ba78027dcfdc9eb09767e4e83301b631","sha1":"1b7e7e0f0922b9165de433222ba8cc4afd0c59b2","sha256":"3de67c074b8692e1861e1c651848411308eb4c90e96f491e9cddc2df529a5da5","sha512":"158882fe08ddcf7bd297cd25a0e7b518789ef98ffa6ba9f14d1b565993ddd00de407f5be64c5c8a819e7a01c4da5887b21ba51f65308cd238c10076951e9e499","ssdeep":"","tlshash":"8ac08cd4a0c62d009646a51116ef36e4a0248026b8486b47cce4ec482e230b08633ea8","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-04-06T13:51:48.61016Z","times_seen":232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-04-06T20:00:07.090482Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/#/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1831de11b3f834a2de4166013d75eda2","sha1":"4cd45ddc173078df52a6a5da8ee597fc7b8fa84b","sha256":"890bb39f44fdd8c6b918239d60c90dce9fd3fae1b9b2049c5a0e9f80f02c8009","sha512":"7e4471d6a84fcda0c90b1ef370a7ac6853bb28d5fe3de1f3955f2cd491853b7b07f7eab7a9df9731f584e664d59606ca969359d613ca46193c9a31e392fa594b","ssdeep":"","tlshash":"b9c08cc4b0c36e103a26a450a1af34e4d0248027b04c1b139da8e88d2e630f18233e98","size":152,"data":"","first_seen":"2024-01-21T00:00:16Z","last_seen":"2026-04-06T13:51:47.399886Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.09c082cb9e6e04968ab10af7c8dada9b8.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09c082cb9e6e04968ab10af7c8dada9b8.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 619\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAB673236390540A9\r\nAccept-Ranges: bytes\r\nETag: \"6CFE73F06DA3C5604FFE6B41D284540D\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:36 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1104380098065402225\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bP5z8G2jxWBP/mtB0oRUDQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"6cfe73f06da3c5604ffe6b41d284540d","sha1":"9e9fa8144a7cb0f1da7daa4e5858fa49106c171c","sha256":"c0f3d5204944bd902aa03323ff6d9543ce33f9c8a523ef06b9953dabcd5e1556","sha512":"db8346b7c7d8216db595641f02a1fecccbbe268f7384be291647e939883348696f6d8b2d6754b62559eaf23a47ed50322013c87837c674745a05556bc64f665c","ssdeep":"","tlshash":"fbf0685df3fc843d5be15b598535f1b5d414ce3bc4e151080bd06891522b4553851b11","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.347701Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1652,"timings":{"blocked":1383,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0b623367aaa42416895cbdb172b62755f.png?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b623367aaa42416895cbdb172b62755f.png?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 598\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A93A7E9353272141F\r\nAccept-Ranges: bytes\r\nETag: \"CB1474A6586606366122E796E7C7B790\"\r\nLast-Modified: Tue, 14 Jan 2025 05:57:30 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 52651854032997638\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: yxR0plhmBjZhIueW58e3kA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"cb1474a6586606366122e796e7c7b790","sha1":"65e5b65ac7af71f7c74943cbbb786c502da79f51","sha256":"59ffe909363cd4f08954e3d43522913d7f06837b0a726f4f094d07e4443970e7","sha512":"24e9f1f19d63ad08cae741f4a599ed906a4b047498dd9805dd8a5ef69eecb48ba4beaebeee27f86e61b054c5b894da1da38e1ba466ee616a4de71d851d798faa","ssdeep":"","tlshash":"57f041ea69d79ad8a36c0fb3564205908447d0d0f305d7536459f7fd272074016b9a36","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.380736Z","times_seen":104,"resource_available":false,"data":null}},"time_used":1890,"timings":{"blocked":808,"dns":0,"connect":272,"send":0,"wait":269,"receive":0,"ssl":538},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0f8565cd3ca444bfb9d9d8981f68464d9.png?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0f8565cd3ca444bfb9d9d8981f68464d9.png?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1599\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A68F57933328FB667\r\nAccept-Ranges: bytes\r\nETag: \"7982395C5BE4A71C84A0E6ED25C0FFE6\"\r\nLast-Modified: Tue, 14 Jan 2025 05:57:59 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10124007141188402507\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eYI5XFvkpxyEoObtJcD/5g==\r\nx-oss-server-time: 14\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"7982395c5be4a71c84a0e6ed25c0ffe6","sha1":"47b16735c5532d2f02fd0f2d644d2e32c4a29a5a","sha256":"18c72092134e339b1b587b0791f93ce88e6d7a4e3fb8ceb46f708050d9e5caf7","sha512":"410cd3f16dfed2cae78da54fbb283132c9ea52b14649abd5ff3812f16038b1c6acd50c84c7cc202cb0f40580bf636f473ec90563f84ce246b6b17f5f156141e2","ssdeep":"","tlshash":"0b310adf6e4f2cabf7f43855e3125e48de33d1e43874071d87a2e10230516560584a45","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.353619Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1985,"timings":{"blocked":841,"dns":0,"connect":281,"send":0,"wait":295,"receive":0,"ssl":565},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.06ffc44109ec749aebbc2a94813e44064.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.06ffc44109ec749aebbc2a94813e44064.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 899\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAB4B813738F72F6C\r\nAccept-Ranges: bytes\r\nETag: \"08E093865192B5A92AAABFBFAE44C760\"\r\nLast-Modified: Tue, 14 Jan 2025 05:58:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16872590259160764689\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: COCThlGStakqqr+/rkTHYA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":899,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"08e093865192b5a92aaabfbfae44c760","sha1":"d8270cec67953ad8ea7f44aeb74975a06590c5be","sha256":"22dd145d6c8b576fc62a0d452e79fee701ca49caa17e1e3395b107640b20d5a1","sha512":"0e0008f63114b6462f097f7a3d2601cda82cec3a1b42db17c224432b264ef60c2227eeaae1c28c561616fab48caf8629284dd89111e0027ec2813ccf36f17676","ssdeep":"","tlshash":"781163e3d3c4053c5f4b9e228252b923c2a02546446ef89dea77a92e094edca043cf62","first_seen":"2024-08-19T20:18:19.606217Z","last_seen":"2026-04-06T13:51:47.354437Z","times_seen":97,"resource_available":false,"data":null}},"time_used":1331,"timings":{"blocked":1067,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/AgiBot.png?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/AgiBot.png?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 3918\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AD72D2037343DFE94\r\nAccept-Ranges: bytes\r\nETag: \"EDF4852907DF05277B6D3FCFBE0EEC23\"\r\nLast-Modified: Mon, 13 Oct 2025 19:17:37 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16723840596299500414\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 7fSFKQffBSd7bT/Pvg7sIw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced","md5":"edf4852907df05277b6d3fcfbe0eec23","sha1":"11ba2fd64392e0cbdc72f5bece2f27e968626b36","sha256":"04b83fd0a62bdb749023ccdf90b40bcefb19f49ac67425d0cebeee3f3f4b8ab0","sha512":"70180383eaca8e1b3914190784ac423c27279c52da06921b9064a2ddb7627204176d2e3e2a1f112603a9bfb047966967b3c3e15de332b247a0c047dab7232161","ssdeep":"","tlshash":"b0815c268d034a55fea56f3d803245f860b9b5627328209311505d9db30cd3e85b9ac6","first_seen":"2025-11-02T12:35:02.121258Z","last_seen":"2026-04-06T13:51:47.376098Z","times_seen":41,"resource_available":false,"data":null}},"time_used":1308,"timings":{"blocked":-1,"dns":14,"connect":322,"send":0,"wait":323,"receive":0,"ssl":649},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/currencyItem-6ff378bd.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/currencyItem-6ff378bd.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-4b6\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"11bf80b9bfb011aa5f367fe71dc73d7f","sha1":"73605451c8a86c6dffa19497f43b4a2b186a3c10","sha256":"0f9e465c20f0de5d4c9d45fe7c01b860bcb2360ebb27d56ef3e9fb5cf660743a","sha512":"6de939353829e4c427a64ddf582275928c17e33dca74132deff2675398f971a3447e497254c840fdbab6d86d4f592dffaf7440c5d3c94239b15bfbf456c63d27","ssdeep":"","tlshash":"0421df9aaa02cbb5cbbe906281bd0414130d7fda701185c5ebed158a3b8a5fcd728a31","first_seen":"2026-02-11T06:49:10.730942Z","last_seen":"2026-04-06T13:51:47.33766Z","times_seen":40,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":575,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e43b808c41551f576faa2fa8aad4cc9a","sha1":"4437b43af9a6c8f493c9a2470484eaac2d063642","sha256":"8b5da34328081f4541427a6a2f72559ff7e56c279a75834126d5b3730d06ebf3","sha512":"10bc1e17245aed829f757f4bd9c0c8d25ce46a4d56bc668272e7e3f4ae2adbd4eb4d21a476722b8c43ccc9c9b079bee30dad205e3c733ae709f1f7975434c548","ssdeep":"","tlshash":"a0f08b0e653c9f765c06a3c3a7ccbdc9522e12939660cc30469bcf2841e62ba171a604","first_seen":"2025-11-02T12:35:02.137788Z","last_seen":"2026-04-06T13:51:47.341042Z","times_seen":41,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/resource/fonts/Arial.ttf","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ltc3.agibogpt.com/assets/index-20c2635b.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Wed, 01 Nov 2023 21:05:28 GMT\r\netag: \"6542bd98-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-04-06T13:54:01.043069Z","times_seen":856,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":208,"receive":400,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-786d00cf.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-786d00cf.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\netag: \"6967bea2-308\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"dbc96415c3a48b663d416c381027fccb","sha1":"46252c44bb5c93ae7b4b2b9349d09d2f5716586a","sha256":"962a9788ef313718132bf3d9978c12e96bbd218984cbc34911e8f676ccb5a3ac","sha512":"3ed8e62ecdf3845f9874ab27b802810cc3f252c57d877b5890a8f038e7132597d49bd53cfebc56232628561fa88173ecaa8fca3376cb10601558257913b5c49a","ssdeep":"","tlshash":"3301fdf9fd0ccebb0fa20a400190260014091fddfa2419e198877d6a1be4940dbde72d","first_seen":"2026-02-11T06:49:10.742348Z","last_seen":"2026-04-06T13:51:47.3769Z","times_seen":42,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/platform/dev/logo_144.png?2.0.1768377890285","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1768377890285 HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 21 Aug 2025 00:09:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a663c2-3789\"\r\nexpires: Wed, 06 May 2026 13:12:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14217,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"a3726201a9e1b36279a2365acc246736","sha1":"5c1f45cd85981e0a90356667438e744631cd3fe2","sha256":"11da067f353539dcaa9494060850c62be24d7cf3f74cc6be62439484d54ee2d6","sha512":"055f4b396f489e6e08459b74dba3487dd640d2b340a8a6cef13f096d99706468bfa919cf3a3725d50dee4e1fcf1eab906da3f9ccf5e7a2103a1e1f05c6593e91","ssdeep":"384:GVGLB5f9k8YNDjAzSCy0WHP6oV/QvbFowre9tz0MZVnpDr295/qXbLCPEu:FLB5fOtj4D1oV4vTaBZnq9VqnCMu","tlshash":"fb52cf55faf41ea08ae9b2eec5243f9dea680acf1cd18c49ff83947b943b0415874257","first_seen":"2025-11-02T12:35:02.133349Z","last_seen":"2026-04-06T13:51:47.377494Z","times_seen":44,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0a04fe04ee3d84b259c88058951414cf3.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a04fe04ee3d84b259c88058951414cf3.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 376\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A6AFD363936FF8E20\r\nAccept-Ranges: bytes\r\nETag: \"BBAD5D8588FA82242A90D749CDD4B43F\"\r\nLast-Modified: Tue, 14 Jan 2025 05:56:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1622123216351148044\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: u61dhYj6giQqkNdJzdS0Pw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"bbad5d8588fa82242a90d749cdd4b43f","sha1":"aa2ec10316872a7a99bee54bd7a219f725f1738a","sha256":"2b10a6251723a1d78eebdbfc3ff8bbca7b0bf0ef3df87520025e12b595c9e292","sha512":"0e02dff3e327831196961905d0aaa054beb807bc1cacdababfd0c78e106ee95c1630c0d3890831e656e4cb45bbb01021dd4a70191e03992cdc63bb42834a6e85","ssdeep":"","tlshash":"32e060e7f2808cf2cac90037e3320320d08f80523380324b41301a914180fd783c134f","first_seen":"2024-01-21T00:00:18Z","last_seen":"2026-04-06T13:51:47.375071Z","times_seen":93,"resource_available":false,"data":null}},"time_used":1888,"timings":{"blocked":810,"dns":0,"connect":267,"send":0,"wait":269,"receive":0,"ssl":537},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-6c086204.css","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-6c086204.css HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-fe6\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4070,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4069)","md5":"afc974f0b24665d9d821c133517661ef","sha1":"d047a57eee45b6eaedb4e2a69cec2bb1b5b746eb","sha256":"6c0862049343f5fedbf717bd3fc217c79d06da1326f818174b7d97ea68047f07","sha512":"d52ea77ebe36ccbe2dcdd61e66468eea607c9267f756a618575067d173a1c043229338dd03f2bbbc71d323ff54cacae643b1a21aae7d4d2f9e1da92ecb61189a","ssdeep":"","tlshash":"a781414efb9531395d77e48e6e598e4ca1187e82e1cbdec0e143460208dfae73929249","first_seen":"2025-11-02T12:35:02.123492Z","last_seen":"2026-04-06T13:51:47.370809Z","times_seen":41,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/currencyItem-6ff378bd.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/currencyItem-6ff378bd.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-4b6\"\r\nexpires: Tue, 07 Apr 2026 01:12:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1205)","md5":"11bf80b9bfb011aa5f367fe71dc73d7f","sha1":"73605451c8a86c6dffa19497f43b4a2b186a3c10","sha256":"0f9e465c20f0de5d4c9d45fe7c01b860bcb2360ebb27d56ef3e9fb5cf660743a","sha512":"6de939353829e4c427a64ddf582275928c17e33dca74132deff2675398f971a3447e497254c840fdbab6d86d4f592dffaf7440c5d3c94239b15bfbf456c63d27","ssdeep":"","tlshash":"0421df9aaa02cbb5cbbe906281bd0414130d7fda701185c5ebed158a3b8a5fcd728a31","first_seen":"2026-02-11T06:49:10.730942Z","last_seen":"2026-04-06T13:51:47.33766Z","times_seen":40,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/icon/home_flhd.jpeg?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/icon/home_flhd.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 966\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAA02983530F069E1\r\nAccept-Ranges: bytes\r\nETag: \"BD2A502125E5AB16052A31331D72FE70\"\r\nLast-Modified: Sat, 23 Aug 2025 15:25:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17964365870391095443\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vSpQISXlqxYFKjEzHXL+cA==\r\nx-oss-server-time: 27\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":966,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"bd2a502125e5ab16052a31331d72fe70","sha1":"c0425dc36c1c94d5281447ef35686fdae30f0b2f","sha256":"9389b1f7bb8df29b106d1d731d6047f903ed63b08fe050ea1c3b00b41be37198","sha512":"70fd9aab39fda5d9870bb677c923cb4950f75280e9f8bbd25fe1fd5f67375eb12fda15e701b0f923cc9d0619a3931a3e8aa7f9f42fec4f24bbcf66654de52ead","ssdeep":"","tlshash":"49110c5580348f69d3de011007204557f5a0f61943be73cd8f4772d65ac8c7dc6147a0","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.38124Z","times_seen":77,"resource_available":false,"data":null}},"time_used":1367,"timings":{"blocked":-1,"dns":41,"connect":325,"send":0,"wait":350,"receive":0,"ssl":651},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/common/getAllSetting","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T08:11:45.303679Z","times_seen":13453595,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/charting_library/charting_library.min.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:23.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Nov 2023 21:05:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6542bd98-2a6b\"\r\nexpires: Tue, 07 Apr 2026 01:12:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-06T13:54:46.115966Z","times_seen":627,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-3ffc2496.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-3ffc2496.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-3909\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14601,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14600)","md5":"749b373bf14f9209e9fdedfced28f5d9","sha1":"5764ee53e2b04fabad2a5e7a75a775da0dd02759","sha256":"d6192af6b4636d31e3907a43df6219bebe0b7262197da1a75f9b0915d2bb101b","sha512":"e4240d4ea893ae6a7b4e42877b058466bfb123644e69fe8c5495a667cf66988f58f04eb0b9aff7e898ebefb7609b2ea19c389393716f42e40b5099ae117aaa0b","ssdeep":"384:+Vj26dZf8+o9A8FHnUf6CAqc80boAOiAhv3ac8sE07PPTPzPwPbPLPC0McgI:+VbNFUHnUf6Wz7b4TjC0MtI","tlshash":"3e62b495f9069a3cf5bba451408c001076197fdaa00c9ce2f9fd6e463757ff8b749218","first_seen":"2026-02-11T06:49:10.786299Z","last_seen":"2026-04-06T13:51:47.358221Z","times_seen":40,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-3344f146.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-3344f146.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 514\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\netag: \"6967bea2-202\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":514,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (513)","md5":"58aa65c7d78a8928542c217699172d45","sha1":"b3c6d4be06fe87d285a8c9f68ac951a690e09db2","sha256":"8192c9e12bb2ac6dcab4ffc0aada917c2025a781009650a0ad626ea9454ba4a9","sha512":"f1da8e6567d1602ac8b6490c45f0fa86aab23d3bda5bda637bf3a35d1978cf7b8132f34c75c7284340f48f7c66c9a0f9a4d56a53d44ae42aa60f67e437838a73","ssdeep":"","tlshash":"7df0c02fb96680751bb348e851230810a6181f5636b484d4d9c60a10db388d7e56d515","first_seen":"2026-02-11T06:49:10.80993Z","last_seen":"2026-04-06T13:51:47.360015Z","times_seen":40,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/LTC.png?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/LTC.png?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 7415\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A7CC775333493BB4B\r\nAccept-Ranges: bytes\r\nETag: \"85A6D609E605F3A8EB4C3E6AAC1EEA0D\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:11 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13437065633320091620\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: habWCeYF86jrTD5qrB7qDQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"85a6d609e605f3a8eb4c3e6aac1eea0d","sha1":"dc8811b4343dbda100a6b6bc943419b6514addde","sha256":"1eeb8294b1987d95d666338fc21eef1536c128292a169447adc07fca7f2ef34a","sha512":"78c9ffb9c8c60c4858bda722af47a7dd2d04b4524bee224a15242e426ecd3b303f4f40ff191c3d3ded55a9e96e0a3a545050b54c5b169d20d6dfd1a6aa1569d9","ssdeep":"192:a3+1g/fdyMHBgpyldXWkjCDM0tc8j18zIQ6+Ub:a3+1gQMHWpylMkjCI0tc8g6+g","tlshash":"0ee19f5b849484e5c72a08a88c6ef23d45ba81caf61bd308d05aa0415fd9bfe99452ec","first_seen":"2025-11-02T12:35:02.15788Z","last_seen":"2026-04-06T13:51:47.361143Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1333,"timings":{"blocked":-1,"dns":18,"connect":327,"send":0,"wait":329,"receive":0,"ssl":659},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/TRX.png?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/TRX.png?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 11426\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAA02983530E16BE1\r\nAccept-Ranges: bytes\r\nETag: \"4234F3496B5BF50441F5EB6D019CE29B\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13538433219395450952\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: QjTzSWtb9QRB9ettAZzimw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":11426,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4234f3496b5bf50441f5eb6d019ce29b","sha1":"3aef5eeb051f641447c451c683e387b6f12640ad","sha256":"6ee8e2c697eb32101badc2f05faf5bf0da673f3740063a43012d5bacdf70fe7b","sha512":"314bb1f429a1c4501df2fc95fd5faa21c699bd65dfb7726da2a9440961b8408fd91286b0fb1359cabc4ab56bb5f3e79c744fa5afd04f79eae826e1793f686ce5","ssdeep":"192:859hN7i15EjwKD6QHtWD33KYpPsRchfVZMm8BG14Adqq3T2+3aE1Ovjv5otmn:c76Ka33Y0ZMnw3C+3F1Ftmn","tlshash":"e532bf83d1693928ec53f1f80452d962c2f59d620b15b3528420a4ea7e87c1a6dffcef","first_seen":"2025-11-02T12:35:02.147505Z","last_seen":"2026-04-06T13:51:47.381775Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1658,"timings":{"blocked":1325,"dns":0,"connect":0,"send":0,"wait":331,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/platform/dev/config.js?1775481144456","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /platform/dev/config.js?1775481144456 HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 394\r\nlast-modified: Wed, 01 Nov 2023 21:05:28 GMT\r\netag: \"6542bd98-18a\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-04-06T13:52:41.993353Z","times_seen":255,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/en-330586a8.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/en-330586a8.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-9e77\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40567,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (40544)","md5":"475039c53d4841cb60b7167d825d3422","sha1":"f0f2f69afbacf178e5f54c0b660068558678e187","sha256":"ef9669e6d1f5c107ded544de0999f1f62a43c77883f41145f82f1825cd7c6e89","sha512":"b2c55fcf3cd9dfc5c9004908e75528e164da3df6fbcb152b4cbdcf900d3c29e09a95a07d15ac0d885a85583c42d2da6498d16a64ebbd021258e1c87ebdcdbe23","ssdeep":"768:+GtZcEw/o7rKOdAFsifnAMCxrdaAMFVoP6+6sPGKw1mwO6fpk7aOLxO:iponKOdebExr2FVLsPxwqLxO","tlshash":"f203d6893e1a989a04f3537674ce6e1120f60ac18255881f4fedc9fd93d2b67a367b34","first_seen":"2025-12-27T20:43:52.881944Z","last_seen":"2026-04-06T13:51:47.356688Z","times_seen":43,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.09e9ba6ad8ad8400391a8843e186d9853.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09e9ba6ad8ad8400391a8843e186d9853.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 525\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A68F5793332F3B667\r\nAccept-Ranges: bytes\r\nETag: \"39EF9D38FE0AAB83585DD87672DB2F9F\"\r\nLast-Modified: Tue, 14 Jan 2025 05:55:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17681862502574744688\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Oe+dOP4Kq4NYXdh2ctsvnw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"39ef9d38fe0aab83585dd87672db2f9f","sha1":"73beb0a9847b3f98e5e96b384767896452dfaa33","sha256":"ab447108bbc8e802ba2d67626f51554cb9f1fab5db2bfeabfc8371eff71204cd","sha512":"5a1441bce9b88fbc5f0ecac5aee541406dd05eec641a6d2db62c6c38d7d59365d5568aeb95efdacacd125d808fd0d9e64c7954305b6da00dab35ec659b7a75c6","ssdeep":"","tlshash":"b7f00ce9f558cc65461855e6cf79742100fefc5cd57cf81c8d45f564f54d41259502c1","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.386186Z","times_seen":128,"resource_available":false,"data":null}},"time_used":1444,"timings":{"blocked":1160,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/resource/svg/dark/mengbanzu12.svg?2.0.1768377890285","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu12.svg?2.0.1768377890285 HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 774\r\nlast-modified: Wed, 01 Nov 2023 21:05:30 GMT\r\netag: \"6542bd9a-306\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a8fdb5cde40e8ebcb2b7fddbe19943e","sha1":"c1560502d0305ec2f9973a5857c7cdd9b56caee7","sha256":"3ab8082b5d02f0e40827f2520fe7d423877d2f8d78c6f41cc11fed84b276a0ee","sha512":"8791e15406186847e2527fae5de31e11f9820322947716a0b54d235607efaae19370d66d1864a78b5f65f84ddb778b46df2474860ae9176d828c6cf958d9aac1","ssdeep":"","tlshash":"4d01f17a5221c15da2434b80c6e93f4092bda29ba2d00448b3a32da54d74f7f55bc996","first_seen":"2025-06-01T04:11:58.700896Z","last_seen":"2026-04-06T13:51:47.37804Z","times_seen":95,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/common/getAllSetting","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15690,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15287), with no line terminators","md5":"e6669f9fb96b6e3d502dfcd92428fb59","sha1":"790d1c8b3d46a828ae1d1af008704cec258f33ee","sha256":"9284111c55e28eed1133068f93880e4bbea4aefd7caad82e8d26fff11c6e7bb4","sha512":"f63f729fda678ee32ef443a573d7d7af5ca6e53ebfae1185926eea999625c0df8311f8ef11b78d7999f95c8dffa284e3235ec8decc0b5add0b7ae24d79bc4a40","ssdeep":"192:cGC4Z49dv/S8QhfbD+Rbtuc2hsSH/VU5pbAi3wj7qaIqgzc2sYZssqsCttzMNGGa:QuKu7qQ29QM/876Mwa8ywYWY","tlshash":"d762755a3798ccbc82d71ec6d4ab3a45bddc3477e984dc54e5a7af5c88999b2040f00e","first_seen":"2026-02-11T06:49:10.789293Z","last_seen":"2026-04-06T13:51:47.3529Z","times_seen":40,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"agi-api.fd1.cc/ws/dd736596-2baf-4e7a-adc5-e4df7e74ea18","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"GET /ws/dd736596-2baf-4e7a-adc5-e4df7e74ea18 HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ltc3.agibogpt.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: OO/4b358FaVgmTgpCNkh4w==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:24 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: QETdt4CjucAXWOo7gf9g28jZxQI=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T08:11:45.303679Z","times_seen":13453595,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":30,"send":0,"wait":28,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/common/type/defi_activity_type","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T08:11:45.303679Z","times_seen":13453595,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0bdef91be9d254935b506aaf656f8f619.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0bdef91be9d254935b506aaf656f8f619.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 499\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAFAD5B383381D82F\r\nAccept-Ranges: bytes\r\nETag: \"758505DEC73355A50FA0EA7479FA0223\"\r\nLast-Modified: Tue, 14 Jan 2025 05:55:26 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8231209139480566513\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dYUF3sczVaUPoOp0efoCIw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"758505dec73355a50fa0ea7479fa0223","sha1":"f625f75d14059f9ca2f10573bb2c8634c6dc0b8e","sha256":"9ba4907adb5327ca635f6187be09172b1598fcfc0e96b62fb9736d9b17ac23d9","sha512":"de61b7e447da38fb2dad09bafceb7749b71e7fcd5cfa1e1d595c79bbb59e48c630c15c57c88d5154b3fdd22364d12d5fc6569173fedfb98fedbef50ae5191ac1","ssdeep":"","tlshash":"3ff054ed83a4ec7cf60bc3608f20e828c630b96b348d0c16256eb6309b4d09c2db11f6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.348508Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1657,"timings":{"blocked":1385,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/resource/svg/dark/zu29.svg?2.0.1768377890285","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /resource/svg/dark/zu29.svg?2.0.1768377890285 HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 837\r\nlast-modified: Wed, 01 Nov 2023 21:05:30 GMT\r\netag: \"6542bd9a-345\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":837,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"357e9e22a01768dc0a074a8cd1556131","sha1":"2d45da133bcf125352b92ac22ce445819d6de392","sha256":"16f5917f9b8a87e02921ef6461afe3b3b1d1d529715cbf184ec1de62f0d2259f","sha512":"777463938489448aa26f2721b2e395769f0915cec5f794ffde8414555a24101646a28535f9021a5595fe027a814eae081d8c33fd6f1f851f0d74fc49118c2048","ssdeep":"","tlshash":"d60112be4736a3fdd5544a80aad42699343de042e16404ecb3817e17be2062a0abcd91","first_seen":"2025-06-01T04:11:58.667223Z","last_seen":"2026-04-06T13:51:47.352135Z","times_seen":69,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0b86d64cd98f347108c5c5c7c801eba05.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b86d64cd98f347108c5c5c7c801eba05.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 801\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAB67323639403FA9\r\nAccept-Ranges: bytes\r\nETag: \"2AE028AC8B83BBB61963669703398AF4\"\r\nLast-Modified: Tue, 14 Jan 2025 05:56:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6784440504219574938\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KuAorIuDu7YZY2aXAzmK9A==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"2ae028ac8b83bbb61963669703398af4","sha1":"68dd8f2c5241331ced97f7400e31d40bba2900db","sha256":"57a1356686884718fc655255495c865822cb2d0714565da6e9898240d9889c01","sha512":"a9cf6e012e04f6e51ace9259dae3f7d1ca057934a0b95bedbe183f561fc8f8d0b6ae48f478eec442d61834441d787b0a9d521b9d89a5d1673946711255a80e6f","ssdeep":"","tlshash":"8801c56b03b358b0ca12d83fc1130ce7b8b7d0273a40e24c5b1fc370085b0020074364","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.372608Z","times_seen":88,"resource_available":false,"data":null}},"time_used":1879,"timings":{"blocked":807,"dns":0,"connect":266,"send":0,"wait":270,"receive":0,"ssl":534},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/common/getCoinList","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:24 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T08:11:45.303679Z","times_seen":13453595,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":216,"dns":157,"connect":28,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-b8610c36.css","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-b8610c36.css HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-291e\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10526,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10525)","md5":"a3bc70f849dbf0c8be7adcfc0d1701f9","sha1":"8d7556da7ae268027c2ac340d3ffdd20a29f45b3","sha256":"b8610c36017a9fab54e8e815f8a78e3547fcaa4be7eed9c45a8bc819166c84c9","sha512":"d36bb5a244905091727b8558d1a895e41db5d8e25eda52065ab5ed9cc99a1fae92e38a5df8ddcac34c4895be9e5cbb193d7863346de3a62074497327ce737889","ssdeep":"96:HlAGZezOETj8XMp5mXUVM2tL0a5OsenD62rm8Ikc4dqK7L3+guSc:HXZePfpYveqDc4qK7L3+ge","tlshash":"f622752df7e42738ac37d2666bc80accf11dfa11d6539da4e9679a220dd75e3163048c","first_seen":"2026-02-11T06:49:10.802481Z","last_seen":"2026-04-06T13:51:47.345138Z","times_seen":40,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-3344f146.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-3344f146.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 514\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\netag: \"6967bea2-202\"\r\nexpires: Tue, 07 Apr 2026 01:12:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":514,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (513)","md5":"58aa65c7d78a8928542c217699172d45","sha1":"b3c6d4be06fe87d285a8c9f68ac951a690e09db2","sha256":"8192c9e12bb2ac6dcab4ffc0aada917c2025a781009650a0ad626ea9454ba4a9","sha512":"f1da8e6567d1602ac8b6490c45f0fa86aab23d3bda5bda637bf3a35d1978cf7b8132f34c75c7284340f48f7c66c9a0f9a4d56a53d44ae42aa60f67e437838a73","ssdeep":"","tlshash":"7df0c02fb96680751bb348e851230810a6181f5636b484d4d9c60a10db388d7e56d515","first_seen":"2026-02-11T06:49:10.80993Z","last_seen":"2026-04-06T13:51:47.360015Z","times_seen":40,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/filters-4aa46202.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/filters-4aa46202.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-c1e\"\r\nexpires: Tue, 07 Apr 2026 01:12:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"932372bb7492350c49b7a964a35c38e0","sha1":"98c25d88985e8c979810ef933b1865185cccb120","sha256":"2512b7ea85a6a47c94ca4f8c4f8ff97802c3f17cd9900fd98c32109211953a5e","sha512":"2908786ec59cb1dd7eb77c2a5dbaba90c92c8f7753d5ddd5163441bb7d8a5aba8480186478712cfdec47dd664fea989e8b96b03c1dcf32fc789ce66f3a39fea2","ssdeep":"","tlshash":"5b5125fdfdd7a13356e96ef940288014728eaf24786e0a4df54bd0455a33888e07fb68","first_seen":"2026-02-11T06:49:10.716334Z","last_seen":"2026-04-06T13:51:47.355941Z","times_seen":40,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-786d00cf.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-786d00cf.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 776\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\netag: \"6967bea2-308\"\r\nexpires: Tue, 07 Apr 2026 01:12:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"dbc96415c3a48b663d416c381027fccb","sha1":"46252c44bb5c93ae7b4b2b9349d09d2f5716586a","sha256":"962a9788ef313718132bf3d9978c12e96bbd218984cbc34911e8f676ccb5a3ac","sha512":"3ed8e62ecdf3845f9874ab27b802810cc3f252c57d877b5890a8f038e7132597d49bd53cfebc56232628561fa88173ecaa8fca3376cb10601558257913b5c49a","ssdeep":"","tlshash":"3301fdf9fd0ccebb0fa20a400190260014091fddfa2419e198877d6a1be4940dbde72d","first_seen":"2026-02-11T06:49:10.742348Z","last_seen":"2026-04-06T13:51:47.3769Z","times_seen":42,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.025b7fb60f51b4b74b597653d3a7f6b63.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.025b7fb60f51b4b74b597653d3a7f6b63.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1874\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A6AFD3639366B8F20\r\nAccept-Ranges: bytes\r\nETag: \"FEE16CE16A23A37EF3920798742FEFBC\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8433800826941682001\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: /uFs4Wojo37zkgeYdC/vvA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"fee16ce16a23a37ef3920798742fefbc","sha1":"f862e3e61b12495b9f683a71d3d06053bc407b0a","sha256":"dfca8887d489be448d10cbd211b271db5330d73d299fe9c76f3e3300a9045a82","sha512":"560e8d3bbee698aac3f311defb7031f289096c6101339fc642889b10e9887000240109dd3e25139f0f12b6b7583b0b185f96e86248bc98d3252e1bcc5ecec990","ssdeep":"","tlshash":"d731f7da97b3107f3e5d8374563429c5555b85d1ba050a2efcdebc4c9f066e70128071","first_seen":"2024-08-20T11:40:30.958723Z","last_seen":"2026-04-06T13:51:47.37984Z","times_seen":109,"resource_available":false,"data":null}},"time_used":1383,"timings":{"blocked":1113,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/resource/fonts/DINOT-Medium.otf","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ltc3.agibogpt.com/assets/index-20c2635b.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Wed, 01 Nov 2023 21:05:28 GMT\r\netag: \"6542bd98-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-04-06T20:00:07.044826Z","times_seen":594,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/common/getAllSetting","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:24 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15690,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (15287), with no line terminators","md5":"e6669f9fb96b6e3d502dfcd92428fb59","sha1":"790d1c8b3d46a828ae1d1af008704cec258f33ee","sha256":"9284111c55e28eed1133068f93880e4bbea4aefd7caad82e8d26fff11c6e7bb4","sha512":"f63f729fda678ee32ef443a573d7d7af5ca6e53ebfae1185926eea999625c0df8311f8ef11b78d7999f95c8dffa284e3235ec8decc0b5add0b7ae24d79bc4a40","ssdeep":"192:cGC4Z49dv/S8QhfbD+Rbtuc2hsSH/VU5pbAi3wj7qaIqgzc2sYZssqsCttzMNGGa:QuKu7qQ29QM/876Mwa8ywYWY","tlshash":"d762755a3798ccbc82d71ec6d4ab3a45bddc3477e984dc54e5a7af5c88999b2040f00e","first_seen":"2026-02-11T06:49:10.789293Z","last_seen":"2026-04-06T13:51:47.3529Z","times_seen":40,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":162,"connect":28,"send":0,"wait":85,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/platform/dev/favicon.ico?2.0.1768377890285","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1768377890285 HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 3918\r\nlast-modified: Tue, 14 Oct 2025 02:38:38 GMT\r\netag: \"68edb7ae-f4e\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3918,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced","md5":"edf4852907df05277b6d3fcfbe0eec23","sha1":"11ba2fd64392e0cbdc72f5bece2f27e968626b36","sha256":"04b83fd0a62bdb749023ccdf90b40bcefb19f49ac67425d0cebeee3f3f4b8ab0","sha512":"70180383eaca8e1b3914190784ac423c27279c52da06921b9064a2ddb7627204176d2e3e2a1f112603a9bfb047966967b3c3e15de332b247a0c047dab7232161","ssdeep":"","tlshash":"b0815c268d034a55fea56f3d803245f860b9b5627328209311505d9db30cd3e85b9ac6","first_seen":"2025-11-02T12:35:02.121258Z","last_seen":"2026-04-06T13:51:47.376098Z","times_seen":41,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.07767a3d248eb46b58778d8214479386f.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.07767a3d248eb46b58778d8214479386f.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1462\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAB4B8137387E2F6C\r\nAccept-Ranges: bytes\r\nETag: \"5012FF0AAECFEFC6BE7EA50F4DFD3DB6\"\r\nLast-Modified: Tue, 14 Jan 2025 05:55:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13028153675101006012\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: UBL/Cq7P78a+fqUPTf09tg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"5012ff0aaecfefc6be7ea50f4dfd3db6","sha1":"fbf37df3a28cd4a9df92064194b8f62c3be26a19","sha256":"da66b7770bcf47b539d5ed6a8f15d12933ff8759f8084b5cf1fde3937a8dc1e8","sha512":"61138ce362d2c1619088d527f814d7cc0fe5bc3166ad0a7be95b4d2eca4a1110337d83526ecda68219683a5f8d8692514cbc4702400751c4d9c33a0450d1fafb","ssdeep":"","tlshash":"e931c7472c20ff18cfc0576406567951642a6ec852bfb24655bf87ea54a6ae29048a41","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.371987Z","times_seen":80,"resource_available":false,"data":null}},"time_used":1864,"timings":{"blocked":803,"dns":0,"connect":263,"send":0,"wait":265,"receive":0,"ssl":530},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/resource/svg/dark/zu447.svg?2.0.1768377890285","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /resource/svg/dark/zu447.svg?2.0.1768377890285 HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 420\r\nlast-modified: Wed, 01 Nov 2023 21:05:30 GMT\r\netag: \"6542bd9a-1a4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23b51e86174e8f6920f0afedc42bb423","sha1":"cdd01b04898627077aff5bfcfe4c8d1729d89397","sha256":"3a30987fe9e27f43c0c43f5aea739a13a599a6f633131b6f042f039f15de83e7","sha512":"4c3eae2304dc9d458aac7064d93cfc502fca1543b29bd5490adb51fb806dd0596a2c854b560f605d99a78243e8cd1fe60cbd6b09b663594d4333beda3820533c","ssdeep":"","tlshash":"fee05c16cc15100e51010e95c3d11f68a47ff183c2a508aefbe0127b4ab5c0a6cbc32a","first_seen":"2024-08-19T15:53:11.170684Z","last_seen":"2026-04-06T13:51:48.565472Z","times_seen":260,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/BNB.png?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/BNB.png?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 10415\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AE173EA34319AC5D5\r\nAccept-Ranges: bytes\r\nETag: \"B5787E7F12B9832AD65C96A4B271309B\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8325378625068589541\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: tXh+fxK5gyrWXJaksnEwmw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"b5787e7f12b9832ad65c96a4b271309b","sha1":"37cda6785aba8faa381ce10cd2070ca184ec554a","sha256":"86dda9dc4570e15b86cb85cf723bd65b9d738efdcffae9838ffa0f7c2d8153cc","sha512":"858047d98ac77634577ec7f939f362c710a3518b1c53e1c1d2c5c3b9a85d7035a643495cc754bbce7ce2cf2b3db50c66e04a501092fc31a178478b8d6eb4092d","ssdeep":"192:hHJnq/KKHUjwHSS5Z+FgO2jEwHAfzcI9SZc6vhf6Fbnqqv13UQoQJR5/Rm7M1W8g:/q/KgswHSoA2jEUAfWcE6FenQNTRgH","tlshash":"0022bfa2183d4cf4db59b6096f08f11a3588de7dc982769c034cafe4d99406eda23d2f","first_seen":"2025-11-02T12:35:02.142523Z","last_seen":"2026-04-06T13:51:47.364379Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1616,"timings":{"blocked":1290,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/SOL.png?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/SOL.png?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 9713\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AD72D2037344BFF94\r\nAccept-Ranges: bytes\r\nETag: \"4DCA7BE14022BBE8AB3AABEF4A5D3C53\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12394239773823965148\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Tcp74UAiu+irOqvvSl08Uw==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":9713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"4dca7be14022bbe8ab3aabef4a5d3c53","sha1":"a00e49f088a95489e7c3110689335dc9409e8e40","sha256":"96beb2351fa32acd1bf21afb6fd4247038d976db14ca1e8339c7d4e806aca3b8","sha512":"d20db74331e6da26c03b8f54e8aabfab2d4a89f708da3e401640492449a408cbe325bff5c18196753ffd476fe910e18ad04cd71cd70afab7606a7d992827bc74","ssdeep":"192:6S5/euHgVldR4FUniO1wmPNBXPKfLXJS1gUXagNSASNP9F+:15/D7oLnN9wL5S1hXagU7rF+","tlshash":"4a12cfd58900c0baee59511b5b494c32d9612afcebde0564d9e6ca5bc8cc19833c223a","first_seen":"2025-11-02T12:35:02.118379Z","last_seen":"2026-04-06T13:51:47.339443Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1627,"timings":{"blocked":1298,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":529,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"884015264b28f92cbf1a250e58a9a757","sha1":"f28c7a6179350abffe94fefb7e1ebffa9eae574f","sha256":"818e4a82cb3a62a27fdc9c395c4a4946aec9729ba5a47ff76e00625be5a3daef","sha512":"e3877b153cfb30318cffcacaa4ddeafa4bc18415d35dfc9fb599ab98dd596bbeca5081bdf1a3dc3bb21815ce569de06914c19c773e121014e120d165988af349","ssdeep":"","tlshash":"abf0594b2a748e691d0541cb95ccbdc5a38e2683c220ce38da9acf1d81f12f5161f645","first_seen":"2026-02-11T06:49:10.723341Z","last_seen":"2026-04-06T13:51:47.382273Z","times_seen":40,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-02792999.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:23.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-02792999.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-177ea\"\r\nexpires: Tue, 07 Apr 2026 01:12:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96234,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"9c43d0ecf9bddb9d9d0eb3cbd6ab9909","sha1":"fceeead8742fb6833f2988548a8f8b0e0653621a","sha256":"31ebf15c389c133d21c28c7a0015fc97b45a938409d52cdbd10fc1f14e4aa3eb","sha512":"9337a887f35dbd687133f8c9b66ef2486e701cf07abfaa3997821e4695e9e90039f71cbc6e79c79470d70df7941d5610970de43b9e78d24d19f54ea52f2d4186","ssdeep":"768:9a76Jt/zxaWr/fI8OuJqeHX4TGyQOmaiPBUIx6eJWCMf1LpewGSAyP2AyZnxPl4D:hVgHut4Sy3IaqxPlt1Po/e9IAEO5I","tlshash":"60936d4ab9061fff69fd0884b95d480021a91f8259ccc8d3b77eae553bbacd47349728","first_seen":"2026-02-11T06:49:10.776745Z","last_seen":"2026-04-06T13:51:47.373447Z","times_seen":40,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/ETH.png?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/ETH.png?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 1100\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AE173EA343139C4D5\r\nAccept-Ranges: bytes\r\nETag: \"8658D5935AB59EE39D15C39226279D46\"\r\nLast-Modified: Mon, 18 Aug 2025 07:53:23 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 533354087542411518\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: hljVk1q1nuOdFcOSJiedRg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"8658d5935ab59ee39d15c39226279d46","sha1":"27463866eb9fa6fe4b6d2bd2cd3d6fd88392cb43","sha256":"595a7c97f329934d40fa297958ccbb31d3cd101c2965b02a32a7c96fd49c9e11","sha512":"0179fd67c6baa7d46fba32986a8f6fe1586f2d9d3c57161bc33ecae609d6e608e8d9bfcdad0459bf41ba087843955a45ce5daca8ea223cb33138de6b4c8b13db","ssdeep":"","tlshash":"f211b6b64261eec7905c8a22da820b38ed2d9718f01c3f06ef73efb39225b045105d0a","first_seen":"2023-05-25T23:01:30Z","last_seen":"2026-04-06T22:04:14.362249Z","times_seen":1480,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":-1,"dns":25,"connect":319,"send":0,"wait":321,"receive":1,"ssl":644},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/DOGE.png?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/DOGE.png?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 7799\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A7CC7753334D6BC4B\r\nAccept-Ranges: bytes\r\nETag: \"BC63BF39B9AA996F479E8913F5E4790E\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18057188316877927664\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: vGO/ObmqmW9HnokT9eR5Dg==\r\nx-oss-server-time: 11\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":7799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bc63bf39b9aa996f479e8913f5e4790e","sha1":"ba74758acf201e0361d924ca37a7d607a3dbfb98","sha256":"e53957ee53bcdc88403c798640a85be148e577080f7d820669c1409fb07c8f7f","sha512":"a84a9a328766ca0f7e892edb1382ed30134980642e9e050bb6b4f3904f47cf5ba2ad695f0b6e39270c0bb5ef22d3d09873c8612dee0c78d7ba7bc4d0261ea8b9","ssdeep":"96:t3jhxa9Spfq9K05becu17MlJ+Pv1K4e6VIcxg4A85DomIHNJwqcfWIywQDR8D1x+:Lxa9CfIecuylqv845lwCEK7myhNVTiF","tlshash":"e0f19ed992fce096c465a0818431bcc3db6d5ac69de8dbaa5f5ba120213901f3e1964b","first_seen":"2025-11-02T12:35:02.143352Z","last_seen":"2026-04-06T13:51:47.365322Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1660,"timings":{"blocked":1316,"dns":0,"connect":0,"send":0,"wait":343,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/vendor-bed6b295.css","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:23.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/vendor-bed6b295.css HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-16997\"\r\nexpires: Tue, 07 Apr 2026 01:12:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92567,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"73d5ada7e6c7bab90973cf41531fc253","sha1":"225582762a695b4a7f5c894089924753e9f144d7","sha256":"bed6b2959cd5057c70606c6e8dfaca18a993f60f43946261e893fb3cd400c3c0","sha512":"85a3e0b4f2cfda4d32163a957a5ddd4674ec55144495a579339588ad5d65bad97251fe046b2c4dc172d10c45d7646915b74ba21bd2fb5b66392649a4ef8e224d","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX7X:ZdN0rxmNH9yDWrX","tlshash":"fd93c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2025-11-02T12:35:02.119547Z","last_seen":"2026-04-06T13:51:47.379281Z","times_seen":49,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/ADA.png?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/ADA.png?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 13140\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A385D5B3834D783CF\r\nAccept-Ranges: bytes\r\nETag: \"D5C7005AE6E637C5DE46CE7489229926\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7485655218430012688\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1ccAWubmN8XeRs50iSKZJg==\r\nx-oss-server-time: 9\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":13140,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5c7005ae6e637c5de46ce7489229926","sha1":"3ff1b2ad1bc1fc06edecdaa8f3e72338b3b4868e","sha256":"116c99207078f482197b4ecee95f702cfa4392fdf76c745cbceffe07cabcf048","sha512":"6a9dcd42ccd8985f6575bf3b559f072dab2d4d5daf6e2a1662cb57a2cc178040f297cf35a38a0e06552794bb12ef91930047e36e8ab0e7978dd9c02a0bef1d0d","ssdeep":"384:1gR/SosvBuYAIFCYB9tMeKkDmdEX4NZNmuW/AMCWIV:yR/SoWBuYAxhldEKrW/0WIV","tlshash":"3c42bfb8bed12432fa289b2194cd1d9a3edc54420e95618d5e5ad1358b80ffd30f26d6","first_seen":"2025-11-02T12:35:02.113557Z","last_seen":"2026-04-06T13:51:47.385054Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1681,"timings":{"blocked":1325,"dns":0,"connect":0,"send":0,"wait":353,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-20c2635b.css","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:23.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-20c2635b.css HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-4a43c\"\r\nexpires: Tue, 07 Apr 2026 01:12:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304188,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"3442a64adbb2d25e0689debaf6b72a56","sha1":"b7c082ed2a6291daee5f875951acfa7ab9646e5e","sha256":"20c2635bb2db61bd48d0d254e5648631ec0b73353eb01628660566717f1eb5b8","sha512":"6f5d6dd9797d3669b695a3362e7f0c01a12e8ac2194b510c14f1de9fae5b2e3feb451171fcc36e42b911482aa8bc245c5a1ab2256f1c715643b6edc6cd3b6473","ssdeep":"6144:n+B/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05T7:+B/54NZ8w71ZACkFDS3vyf58rBeV05T7","tlshash":"2954c6a9a59011bc6f27aa7597ce9ad8f23ce6719c118de8f20150094fc3ff92363617","first_seen":"2026-02-11T06:49:10.75463Z","last_seen":"2026-04-06T13:51:47.349336Z","times_seen":40,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":581,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-bc011be9.css","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-bc011be9.css HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 397\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\netag: \"6967bea2-18d\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (396)","md5":"5353ff252ee4a5e7a3d0176de6a6c712","sha1":"c83942b5dfdb4aa8be53f26b39e53b0b257595e0","sha256":"bc011be90fd6cd33a399912151a5f69ba0d8e394563c71c4c1bea7a4ec032516","sha512":"9a17506817918ef0c9a5d0caebaed8f603641dc1015a726bdf247645a7e0a988b543756d7254abafa18dd4cd9d27c9a198300632156faf59f05c1e27f0a5e30a","ssdeep":"","tlshash":"5ae092c890d6927fb62b607d267c931ad425ac88d8007bb8e67fabb146c7ac53172215","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-04-06T13:53:44.089035Z","times_seen":363,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-331dcd31.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-331dcd31.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-15d0\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5584,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5579)","md5":"421429b77229b9dfe6db2bb1028cb67f","sha1":"7e2c90fdd59f8c3a7ae81e22125dae401032e012","sha256":"6544f42dc361420841b93a464e1a05c52e14a8e25fe1bfbdc63bae4bb1e81117","sha512":"6a558257443d143b12a84eba093c1d171e0d65a4db1cc9632cf5390f8ef48d5fcc5709832dd41f992e8ca5024e9f944e2130fe9c835642797b005eea6c6a353f","ssdeep":"96:TYm7gw7aAG//NOwDHrblYQKqCwGAkBfSWaEwFbFMF0wx7IrLerbJchJJZwrbnoUt:B0w7aAGNOwDNYlqCwGrq9EwFbFMF0wxJ","tlshash":"d5b1c649b90389b9eab3648054950020721d3feb616c8ca1f7febc16737ceb893d1765","first_seen":"2026-02-11T06:49:10.757584Z","last_seen":"2026-04-06T13:51:47.358976Z","times_seen":40,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-331dcd31.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-331dcd31.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-15d0\"\r\nexpires: Tue, 07 Apr 2026 01:12:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5584,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5579)","md5":"421429b77229b9dfe6db2bb1028cb67f","sha1":"7e2c90fdd59f8c3a7ae81e22125dae401032e012","sha256":"6544f42dc361420841b93a464e1a05c52e14a8e25fe1bfbdc63bae4bb1e81117","sha512":"6a558257443d143b12a84eba093c1d171e0d65a4db1cc9632cf5390f8ef48d5fcc5709832dd41f992e8ca5024e9f944e2130fe9c835642797b005eea6c6a353f","ssdeep":"96:TYm7gw7aAG//NOwDHrblYQKqCwGAkBfSWaEwFbFMF0wx7IrLerbJchJJZwrbnoUt:B0w7aAGNOwDNYlqCwGrq9EwFbFMF0wxJ","tlshash":"d5b1c649b90389b9eab3648054950020721d3feb616c8ca1f7febc16737ceb893d1765","first_seen":"2026-02-11T06:49:10.757584Z","last_seen":"2026-04-06T13:51:47.358976Z","times_seen":40,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/resource/svg/dark/mengbanzu13.svg?2.0.1768377890285","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu13.svg?2.0.1768377890285 HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 01 Nov 2023 21:05:30 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6542bd9a-4a1\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1185,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ed9f9b6d12bd8c03bbd38cb6734207b","sha1":"ae379a9b431428b493abbd53c1a5d3db643bdf5d","sha256":"4459f6b2e766c434b3cf0746ee2939f7c05b588bf5ab4901f6d9427e602f4d91","sha512":"43b0c19361ca45562e501bc37a4ae4424f578dfe49b1fea83507052d085c72b01ec712aa7bcd9e5aefb743a9fd835f882afa8a7c335fc95bf6934ea8d5a3d9a7","ssdeep":"","tlshash":"172163b8c51152ca62814f88dbe82606623ef167f3f54d9cf39016b20e78d9f15bca21","first_seen":"2025-06-01T04:11:58.699477Z","last_seen":"2026-04-06T13:51:47.386631Z","times_seen":70,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0265a7b061d824a2a87370da741be1119.png?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0265a7b061d824a2a87370da741be1119.png?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1830\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAFAD5B3833C9D72F\r\nAccept-Ranges: bytes\r\nETag: \"4B3EF8C62B99A5C2073E57DCFBFACF29\"\r\nLast-Modified: Tue, 14 Jan 2025 05:57:40 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3598652782778033866\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Sz74xiuZpcIHPlfc+/rPKQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"4b3ef8c62b99a5c2073e57dcfbfacf29","sha1":"edb4b395b6adc8d884777339788e59f75da00d08","sha256":"ddd504d154b598383eb31999c85e0d678ee28004f2db2138fe4731db99daa6dd","sha512":"f4d13b854ae3139a998768426be833c8149851ce1227b120abcf87fc75d41bd75015554677cdddec9683d4a4e78d683973d3be2e7eb561b353890eb5bc3bbc7d","ssdeep":"","tlshash":"6231d50aea40bac1538d850270fb41675e6314888ee8f579a88fc12c3c353bf55998df","first_seen":"2024-12-08T15:39:09.749558Z","last_seen":"2026-04-06T13:51:48.592294Z","times_seen":95,"resource_available":false,"data":null}},"time_used":1908,"timings":{"blocked":814,"dns":0,"connect":274,"send":0,"wait":274,"receive":0,"ssl":543},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echoali.oss-ap-southeast-1.aliyuncs.com/echo2/0d4bbb5eb1434b548ceb411a32f449dc.png?2.0.1768377890285","fqdn":"echoali.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.169","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /echo2/0d4bbb5eb1434b548ceb411a32f449dc.png?2.0.1768377890285 HTTP/1.1\r\nHost: echoali.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 592512\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AE173EA3338ADC5D5\r\nAccept-Ranges: bytes\r\nETag: \"DFEB78030193859E388CF31D7AD35B1D\"\r\nLast-Modified: Mon, 27 Oct 2025 15:42:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12298372851024769143\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 3+t4AwGThZ44jPMdetNbHQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":592512,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 2368, 8-bit/color RGB, non-interlaced","md5":"dfeb78030193859e388cf31d7ad35b1d","sha1":"ed5d9a53efcdbc15a206b74fe7c450361aea3173","sha256":"a7dc5b316c5333c45fa36cc1cec1d2d5fdf73a3e952a7092da9fdfef46600e33","sha512":"23b2fe7ade39dff860b5e74ddc647d42033bd10a9012a73d25aa5f9d3ae1d99aa5f37eac521a062739646d7168319121ddc3ca5b3beb6019ccf8b25e265a2d45","ssdeep":"12288:0nyQEnCojUTBZBILLHXKLWaTMeKexZryfto7wiSdS7G6c74b:0nyQEnz6BHuaLF3/ryf+5gqG77A","tlshash":"d8c423a62cfa4d82ddec00f91e235f5c27a32b555e9ec937510eb2001ed61b7b5dae80","first_seen":"2025-11-02T12:35:02.148486Z","last_seen":"2026-04-06T13:51:47.370164Z","times_seen":41,"resource_available":false,"data":null}},"time_used":2608,"timings":{"blocked":0,"dns":39,"connect":324,"send":0,"wait":331,"receive":1210,"ssl":704},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agibogpt.com/","fqdn":"agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T13:12:21.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 05:00:00 GMT","end":"Tue, 05 May 2026 04:59:59 GMT"},"fingerprint":{"sha1":"D0:E5:39:41:39:48:8F:3C:BC:31:33:04:16:5C:5A:A8:CD:20:BD:D9","sha256":"6B:96:59:5F:94:34:FB:4A:9F:35:2E:39:18:79:C3:07:F5:BB:41:90:C7:62:38:E5:15:F8:A7:90:86:7C:4A:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"86802fb8249797fc913ea68be99acde0","sha1":"f4d4ad65511f258963785c6518c9de92031e4171","sha256":"165ddd224692029e7d9bfd8e4f149430b9a54b9f866d8c6330b30ebd4c20483b","sha512":"ff1ac5f3af721096baac5831c8b781d26ea613995f207a8deb9347d5ec0f5299e9c693f8f1e5fd0e30a7aa782ef764a1344cc1f175dc9e663942dc8cdfc8a167","ssdeep":"","tlshash":"66d097a3ac01480a0333971028c3a100a0bbaad31c94cc5c94f2f04b7df6b22d383bb2","first_seen":"2026-04-06T13:12:59.373104Z","last_seen":"2026-04-06T13:51:47.342458Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1243,"timings":{"blocked":513,"dns":94,"connect":205,"send":0,"wait":216,"receive":0,"ssl":212},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/common/getAllSetting","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:24 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T08:11:45.303679Z","times_seen":13453595,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":222,"dns":161,"connect":26,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/common/type/defi_activity_type","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:25 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":635,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-04-06T13:53:45.252436Z","times_seen":474,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0c773c8ebe0194a919efee1afe2dab519.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c773c8ebe0194a919efee1afe2dab519.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1321\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAB4B81373853306C\r\nAccept-Ranges: bytes\r\nETag: \"B86773B6AA18C4A58D9C9879EBBA8892\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:09 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2019276143507127384\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uGdztqoYxKWNnJh567qIkg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b86773b6aa18c4a58d9c9879ebba8892","sha1":"cb93b7a65e61e1206a92c01b63e9484b09885a5c","sha256":"1265faf359314ea74da3377a409087910279422db110469598b5cd514c918b91","sha512":"b2141ef8ef08d94acf6e764614667adc6c5893f057d55035d9a76c66b3ece5760ae98a67f500d8af66351a3ac6b7e254a65f21ce8ae6565e222bc89f3af61bd2","ssdeep":"","tlshash":"d321fbc2b3414eb836baae955312dc525efa7b6003198d8d3d212a67cd82311f962289","first_seen":"2024-08-19T20:18:19.617789Z","last_seen":"2026-04-06T13:51:47.369499Z","times_seen":91,"resource_available":false,"data":null}},"time_used":1645,"timings":{"blocked":1379,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T08:11:45.303679Z","times_seen":13453595,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-6b71fa4a.css","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-6b71fa4a.css HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 218\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\netag: \"6967bea2-da\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":218,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"476fe4ef1e74281876ae98f76e6f1995","sha1":"fff1e33d1976ab95edf37ab61865857866a24f72","sha256":"6b71fa4ac2480b82209eb77e2645ffd3782f9ad1df20ea891afc0f4f5de5167e","sha512":"f354545d1deb788b4b9c1d4667d3d71074929afc971cb1f51796c0248e9068617f348f6f0fec4dfa22082b539dd9cf5adaa9c6a1aea63d57a1b91332b9ae9fe5","ssdeep":"","tlshash":"82d0a72fd6d6a010b23b8cb975025c0ed804be5171cbcf50dba38d0a49e7d8b3780306","first_seen":"2025-11-02T12:35:02.114739Z","last_seen":"2026-04-06T13:51:47.366969Z","times_seen":41,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/filters-4aa46202.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/filters-4aa46202.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-c1e\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3101)","md5":"932372bb7492350c49b7a964a35c38e0","sha1":"98c25d88985e8c979810ef933b1865185cccb120","sha256":"2512b7ea85a6a47c94ca4f8c4f8ff97802c3f17cd9900fd98c32109211953a5e","sha512":"2908786ec59cb1dd7eb77c2a5dbaba90c92c8f7753d5ddd5163441bb7d8a5aba8480186478712cfdec47dd664fea989e8b96b03c1dcf32fc789ce66f3a39fea2","ssdeep":"","tlshash":"5b5125fdfdd7a13356e96ef940288014728eaf24786e0a4df54bd0455a33888e07fb68","first_seen":"2026-02-11T06:49:10.716334Z","last_seen":"2026-04-06T13:51:47.355941Z","times_seen":40,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/common/getCoinList","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:24 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30045,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e4cf070b0a4d7effb7589e8848a3943d","sha1":"5a263ec2b0400fa5f7648efb7bb278f39f490208","sha256":"bd327d79c21897c9a91d54f295de09aaf617232145615f8ea5aa754ff993c05c","sha512":"bdd6e211721b5c1bdb192269c7137f26e1921bf30accea9f64685445de3549c17dc4ef523217ff4100651900aef92a5275277486aca8069ab23895e0851f39ce","ssdeep":"192:tge2X9Mge9X01geTXY0XZogerXkqXB3gerXH6dXlNge7Xx1geHXSKTlfXGqNXClY:GTluqzNkyThTTln","tlshash":"64d21f81163856bdc679d0d02f6f7906529c35afacc68d2bd7c94d8c8ed4bf12a0af06","first_seen":"2026-04-06T13:12:59.382873Z","last_seen":"2026-04-06T13:12:59.382873Z","times_seen":1,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":161,"connect":32,"send":0,"wait":98,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/index-3ffc2496.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/index-3ffc2496.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-3909\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14601,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14600)","md5":"749b373bf14f9209e9fdedfced28f5d9","sha1":"5764ee53e2b04fabad2a5e7a75a775da0dd02759","sha256":"d6192af6b4636d31e3907a43df6219bebe0b7262197da1a75f9b0915d2bb101b","sha512":"e4240d4ea893ae6a7b4e42877b058466bfb123644e69fe8c5495a667cf66988f58f04eb0b9aff7e898ebefb7609b2ea19c389393716f42e40b5099ae117aaa0b","ssdeep":"384:+Vj26dZf8+o9A8FHnUf6CAqc80boAOiAhv3ac8sE07PPTPzPwPbPLPC0McgI:+VbNFUHnUf6Wz7b4TjC0MtI","tlshash":"3e62b495f9069a3cf5bba451408c001076197fdaa00c9ce2f9fd6e463757ff8b749218","first_seen":"2026-02-11T06:49:10.786299Z","last_seen":"2026-04-06T13:51:47.358221Z","times_seen":40,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0dbed02da73e34b8dbcdcc926a5da1127.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0dbed02da73e34b8dbcdcc926a5da1127.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 614\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A93A7E93532C2141F\r\nAccept-Ranges: bytes\r\nETag: \"288529B0E33D3B66A2731D058A0EDB26\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12140603420238383984\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KIUpsOM9O2aicx0Fig7bJg==\r\nx-oss-server-time: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"288529b0e33d3b66a2731d058a0edb26","sha1":"45e95e851bc5f5ecf47f60051a2f337c4618b343","sha256":"c0a8c66763227f10f381f4aa054b2a851693e6519fd8daa435c326c4831bb34b","sha512":"47bd6e3b05c428e8fd039220d02a9e5498a8027c1aab085a7d04024472b2c88644e7b5097ddac8d2593c4d1ab7681ea57891066e36f782cbb28f34fef388432b","ssdeep":"","tlshash":"cff04751dff9f27d6bc1b051a7cd1027f2397c51403428308a18541cf01849afc56202","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.383169Z","times_seen":128,"resource_available":false,"data":null}},"time_used":1375,"timings":{"blocked":1106,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.01bfef044560f45e786e98bdec1295ec8.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.01bfef044560f45e786e98bdec1295ec8.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1907\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A93A7E935322B151F\r\nAccept-Ranges: bytes\r\nETag: \"9459A1B16A6346A8DAF9E2E700D8A0AF\"\r\nLast-Modified: Tue, 14 Jan 2025 05:54:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17079821215456291766\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: lFmhsWpjRqja+eLnANigrw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"9459a1b16a6346a8daf9e2e700d8a0af","sha1":"7aeef8fb0483dd8f7089324bf338a8baff19c377","sha256":"fdbb68edeff25fa09404179dfc144d6343af95599093ad71043bd44939983a04","sha512":"87f2d69526f66e1169d4ca8a4ede4337e912b04ceab6438d0cb29021f3687a3e6802fc103fb77f7af9ad5ec1ebba3e404794cf0daf8a13f2c05c2be05c7e1376","ssdeep":"","tlshash":"c141f9a8f7a5f50fec540152146b69040df94844b560c04f06df94be4aa7af38c9f584","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.382723Z","times_seen":113,"resource_available":false,"data":null}},"time_used":1649,"timings":{"blocked":1374,"dns":0,"connect":0,"send":0,"wait":270,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.0450e5050aa5f4f9b999d5e8cdaeac464.png?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0450e5050aa5f4f9b999d5e8cdaeac464.png?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1599\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A6AFD363936C98F20\r\nAccept-Ranges: bytes\r\nETag: \"7982395C5BE4A71C84A0E6ED25C0FFE6\"\r\nLast-Modified: Tue, 14 Jan 2025 05:54:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10124007141188402507\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: eYI5XFvkpxyEoObtJcD/5g==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1599,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"7982395c5be4a71c84a0e6ed25c0ffe6","sha1":"47b16735c5532d2f02fd0f2d644d2e32c4a29a5a","sha256":"18c72092134e339b1b587b0791f93ce88e6d7a4e3fb8ceb46f708050d9e5caf7","sha512":"410cd3f16dfed2cae78da54fbb283132c9ea52b14649abd5ff3812f16038b1c6acd50c84c7cc202cb0f40580bf636f473ec90563f84ce246b6b17f5f156141e2","ssdeep":"","tlshash":"0b310adf6e4f2cabf7f43855e3125e48de33d1e43874071d87a2e10230516560584a45","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-04-06T13:51:47.353619Z","times_seen":99,"resource_available":false,"data":null}},"time_used":1654,"timings":{"blocked":1382,"dns":0,"connect":0,"send":0,"wait":271,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T13:12:22.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:23 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-14fb\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5371,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"98515b813b8d8513c178fd9a2063771c","sha1":"8e04be71778b246045233a8c88eb23446c8748af","sha256":"862bf648a8656bfec26f88c837f036306152caa1cf685cb1cf32f1a41da70df4","sha512":"d7b6eec6d511808de84715e09e12161ca672db6a1ccc695fcc0a2efa42ed1ab1c5df91943299f988e05a0598f793b56f7fe7383b6fbc613456963ba72a03241c","ssdeep":"96:+r82+mAMf53uSPE7zrxESt/KHr6TCZydHRH/gh2mUsGKAiowGwuB1niHMiHvjUHu:+Fd99PEfbiZCxfg2nfD3bwuB1nisiPjN","tlshash":"46b162b75da5882a2372456befe7b018df615193841a481070cc44ee5fe6fe9c4c7b3a","first_seen":"2026-02-11T06:49:10.814048Z","last_seen":"2026-04-06T13:51:47.355186Z","times_seen":40,"resource_available":true,"data":null}},"time_used":1190,"timings":{"blocked":498,"dns":102,"connect":191,"send":0,"wait":193,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/currencyItem-15550dda.css","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/currencyItem-15550dda.css HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-6d6\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1750,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1749)","md5":"0a88af6b4dca3c130c74addeb274fb10","sha1":"fb0c4b8a0f7b7c4bac8e193999f99b4070ffcfad","sha256":"15550dda13edd7fe55a2d29edacb7ba57f23f39ef10d087669c0f75facae0763","sha512":"5d046b442f0f471b2063fcd34fb68b1d95b79647ec7e50cf5290ebd866febcd12e9b890a1784512959c4f4a433d3f31d57540254b4e0abbb6f55dc7773677619","ssdeep":"","tlshash":"ed31c05457110375da3bc8866ea8010dc0d47fd1901765cae8afaa2b2ccfa931b7096b","first_seen":"2024-08-19T15:53:11.157884Z","last_seen":"2026-04-06T13:52:41.996879Z","times_seen":257,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.022a27043bab143ebbdcf2feec3f0bcdf.png?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.022a27043bab143ebbdcf2feec3f0bcdf.png?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1696\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAFAD5B383325D82F\r\nAccept-Ranges: bytes\r\nETag: \"6B415DB0E9421893AC9138D29C9508C2\"\r\nLast-Modified: Tue, 14 Jan 2025 05:54:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6343616017940680678\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: a0FdsOlCGJOskTjSnJUIwg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"6b415db0e9421893ac9138d29c9508c2","sha1":"0aa816a7e2be813f871f4dd45e561349d5a1caf8","sha256":"41d3b9b935e805a680e9b6091106ea27663185f3b41ea952afcaae111b411795","sha512":"c1e26f24cf03efd69f406cc5840f6e7336c382e54f00fe5f18e435e9d74d9827411cdc096cc4857adc70cd608b2b30b530cd8f2c302ec2b8917ecdbff7c6ae5c","ssdeep":"","tlshash":"5931b8caf550b7c0a74559912cf1c871996b4850e7e0d0b5b98ec0268f355b244ba9ce","first_seen":"2025-11-02T12:35:02.129225Z","last_seen":"2026-04-06T13:51:47.385646Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1386,"timings":{"blocked":1112,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/platform/dev/logo_txt.png?2.0.1768377890285","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /platform/dev/logo_txt.png?2.0.1768377890285 HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 28 Oct 2025 02:43:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69002ddc-21f7\"\r\nexpires: Wed, 06 May 2026 13:12:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced","md5":"242661f6b26cf261d7ca74c321c5968f","sha1":"bf315f549e0e3575cf220e699121f8391428d596","sha256":"2358ad882f97fe659340a686f00b5231b36cd8c179d995523707caef29993d49","sha512":"fd0dd26ad23b8176eaa40cd780c7dc622c54023d038a6f2f0141e2af99f0681d43e97ea05a7913fc0c647eca731d218d5cfba68ef55250002f34f1d8f0f142a2","ssdeep":"192:mIPhdtFRSV74oyveLEOWODkHUr5INUn3hRqaa7FwY1KSQdA:jhd2tpTkHUrTnRDqNQ6","tlshash":"1b02bfefe6a34a0615e20799ddf490025eb0b078507dc98dc672b92f9774e65203f692","first_seen":"2025-11-02T12:35:02.140392Z","last_seen":"2026-04-06T13:51:47.345997Z","times_seen":41,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/BTC.png?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/BTC.png?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 10225\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A385D5B38348A82CF\r\nAccept-Ranges: bytes\r\nETag: \"2DB914A7CD7E95E621E8C6583F1BC157\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10337996312582732758\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: LbkUp81+leYh6MZYPxvBVw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"2db914a7cd7e95e621e8c6583f1bc157","sha1":"27eb2f92bf6b850f2df817924bae573e3be1b683","sha256":"391b9837814e7f8a602d8e4f30f69b1bbaf7874314396e5c543a309a453e26e7","sha512":"2c49505e6037b73687e81642387766e819448422decb73acc8655868ae6a0b833b1126c8c8a3c51b2a9916be5ae52330eb5e8584e2518abf0b5e740b7390a5f6","ssdeep":"192:K7ckTNck3A/9kk6fDIRHHFWGkb04ZMuOtaePoQwREtHiDjqrDuBftqx97E:MckTek361isRFtj49Ota4oj2MHxBlA9Y","tlshash":"0422be57458d172df7978b2363656f322126dc27f37efb8b58e824a880cc5403cad55a","first_seen":"2025-11-02T12:35:02.151453Z","last_seen":"2026-04-06T13:51:47.384144Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1353,"timings":{"blocked":0,"dns":27,"connect":330,"send":0,"wait":333,"receive":0,"ssl":663},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xjpdata1.oss-ap-southeast-1.aliyuncs.com/trade/coin/XRP.png?2.0.1768377890285","fqdn":"xjpdata1.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.199","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /trade/coin/XRP.png?2.0.1768377890285 HTTP/1.1\r\nHost: xjpdata1.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 8560\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13A5767583333C04201\r\nAccept-Ranges: bytes\r\nETag: \"E5317EA83F31CABD72384EBFE9AD4D19\"\r\nLast-Modified: Mon, 18 Aug 2025 07:45:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12202450021848313861\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 5TF+qD8xyr1yOE6/6a1NGQ==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"e5317ea83f31cabd72384ebfe9ad4d19","sha1":"1b86b9a1cc9b2fc526b0633c9c05bf254aeea492","sha256":"408631d9c94d043df50ee2a54e8f155972fb034dd2fa34a362f8ed9f3a5e9e80","sha512":"8f5e959a587a319ee4379149fb8e46c4f09064652739b35e15211067d7efcd6c0b7f25c5320713ab56274a607a36abf83033d2cce872ec3f3acc620a641785ee","ssdeep":"192:x1T2zB7RZPwLv8u0idTXTUOoTey39GASdPPuHJAs/Pt:x1i/PVk7wnd3zSdPPsF","tlshash":"7102bfef7f7829a5f75dcae909a73b5a8c3e8f190a2b77ddca1800548487806085f325","first_seen":"2025-11-02T12:35:02.16133Z","last_seen":"2026-04-06T13:51:47.387578Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":-1,"dns":21,"connect":330,"send":0,"wait":334,"receive":1,"ssl":661},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agi-api.fd1.cc/api/notice/list?key=ROLL_NOTICE","fqdn":"agi-api.fd1.cc","domain":"fd1.cc","tld":"cc"},"ip":{"addr":"8.208.114.79","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agi-api.fd1.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 05:00:25 GMT","end":"Fri, 10 Apr 2026 05:00:24 GMT"},"fingerprint":{"sha1":"B5:CB:01:32:1C:42:BE:22:0C:2F:E9:1F:13:A2:30:78:42:8D:0B:9A","sha256":"17:16:0C:D5:1B:33:BD:3A:4F:F7:1E:C5:CA:06:9A:96:44:EF:53:EC:AE:9F:E5:61:88:7C:84:50:8F:A1:9E:16"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: agi-api.fd1.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://ltc3.agibogpt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 \r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 06 Apr 2026 13:12:25 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ltc3.agibogpt.com\r\nAccess-Control-Allow-Methods: POST\r\nAccess-Control-Allow-Headers: lang, language\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1800\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-07T08:11:45.303679Z","times_seen":13453595,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/vendor-6b8fd0ca.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:23.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/vendor-6b8fd0ca.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-8f883\"\r\nexpires: Tue, 07 Apr 2026 01:12:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":587907,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8256a23755be6f1cf662f4d9815fd79c","sha1":"ade6030391399ff99bd1af45009fd0d7a26e013d","sha256":"b6dff34695bc0abf6f77098568178cc1a68525119b1124bf7f21c7f5dccf1442","sha512":"8329a97ca83e4062622dcee32ad0a9ba3937aa605c4d983d569e5b82d48d0ce28f2d271336f1b152f5b4fd19146092c69116714eb93cca020da0d4b9ce5187bc","ssdeep":"12288:93oVG9EX3fHHcwSoX4svr7Lc2iiAw/OGIpHTTuBiIMWQnIVq:doVG9EX3PxvT7LJiiAwFIpHHUiIMWQIo","tlshash":"67c418c93692f02157bb14e600bb0006f33e6e59740d8494f1a9d9db3d7ad89a2b7f2d","first_seen":"2026-02-11T06:49:10.740448Z","last_seen":"2026-04-06T13:51:47.346876Z","times_seen":42,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ltc3.agibogpt.com/assets/vendor-6b8fd0ca.js","fqdn":"ltc3.agibogpt.com","domain":"agibogpt.com","tld":"com"},"ip":{"addr":"102.223.72.41","port":443,"asn":328543,"as":"sun-asn","country":"South Africa","country_code":"ZA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:24.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ltc1.agibogpt.com","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 04 Feb 2026 06:00:00 GMT","end":"Tue, 05 May 2026 05:59:59 GMT"},"fingerprint":{"sha1":"FA:7F:90:C1:CF:1E:15:A9:F0:78:1C:5F:D6:3C:CA:B6:D9:E0:4A:2D","sha256":"07:8D:D9:D7:AE:AE:61:C4:4A:90:1B:C1:BC:1B:A3:9B:EA:86:58:1D:71:F1:B1:FE:4D:92:7C:4A:DC:C6:66:AD"}}},"request":{"raw":"GET /assets/vendor-6b8fd0ca.js HTTP/1.1\r\nHost: ltc3.agibogpt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 06 Apr 2026 13:12:24 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Jan 2026 16:04:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6967bea2-8f883\"\r\nexpires: Tue, 07 Apr 2026 01:12:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":587907,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8256a23755be6f1cf662f4d9815fd79c","sha1":"ade6030391399ff99bd1af45009fd0d7a26e013d","sha256":"b6dff34695bc0abf6f77098568178cc1a68525119b1124bf7f21c7f5dccf1442","sha512":"8329a97ca83e4062622dcee32ad0a9ba3937aa605c4d983d569e5b82d48d0ce28f2d271336f1b152f5b4fd19146092c69116714eb93cca020da0d4b9ce5187bc","ssdeep":"12288:93oVG9EX3fHHcwSoX4svr7Lc2iiAw/OGIpHTTuBiIMWQnIVq:doVG9EX3PxvT7LJiiAwFIpHHUiIMWQIo","tlshash":"67c418c93692f02157bb14e600bb0006f33e6e59740d8494f1a9d9db3d7ad89a2b7f2d","first_seen":"2026-02-11T06:49:10.740448Z","last_seen":"2026-04-06T13:51:47.346876Z","times_seen":42,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"ltc3.agibogpt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echores.oss-cn-hongkong.aliyuncs.com/echo2.02a1a902ab11d4bc4a5e9f1b9e6220bf6.jpeg?2.0.1768377890285","fqdn":"echores.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.232","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ltc3.agibogpt.com/","date":"2026-04-06T13:12:25.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.02a1a902ab11d4bc4a5e9f1b9e6220bf6.jpeg?2.0.1768377890285 HTTP/1.1\r\nHost: echores.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:12:26 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1353\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3B13AAB67323639A33FA9\r\nAccept-Ranges: bytes\r\nETag: \"3374D8DCC672161C3E942D71643DD6DF\"\r\nLast-Modified: Tue, 14 Jan 2025 05:53:13 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18229691747106943305\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: M3TY3MZyFhw+lC1xZD3W3w==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"3374d8dcc672161c3e942d71643dd6df","sha1":"1eb89d286896e972f6f9e433541e1a406d336db1","sha256":"26a7521cd56d484b5a9775d11c173e6f67c45c68c2bde5feee095b3ff5be0bdd","sha512":"02c86573b4cf743a1576007a70029a3808734d6893546fde74c13a3912a6ad2e850309c5eb0130492321eba8a73b7256f402ea483c861761934463a14eb6aaf9","ssdeep":"","tlshash":"c921084493f1682c99fe6034d1fa5a10dc9de10e392cc8a2ffb9a804722142adcb11b1","first_seen":"2024-08-19T20:18:19.617177Z","last_seen":"2026-04-06T13:51:47.368829Z","times_seen":116,"resource_available":false,"data":null}},"time_used":1392,"timings":{"blocked":1121,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}